How to Crack Passwords Using Hydra

A very fast network logon cracker which supports many different services.
Number one of the biggest security holes are passwords, as every password security study shows.
Hydra is a paralyzed login cracker which supports numerous protocols to attack. New modules
are easy to add, besides that, it is flexible and very fast.

**Hydra was tested to compile on Linux, Windows/Cygwin, Solaris 11, FreeBSD 8.1, OpenBSD, OSX, QNX/Blackberry, and is made available under GPLv3 with a special OpenSSL license expansion.


Asterisk, AFP, Cisco AAA, Cisco auth, Cisco enable, CVS, Firebird, FTP, HTTP-FORM-GET, HTTP-FORM-POST,HTTP-GET, HTTP-HEAD, HTTP-POST, HTTP-PROXY, HTTPS-FORM-GET, HTTPS-FORM-POST, HTTPS-GET, HTTPS-POST, HTTPS-HEAD, HTTP-Proxy, ICQ, IMAP, IRC, LDAP, MS-SQL, MYSQL, NCP, NNTP, Oracle Listener, Oracle SID, Oracle, PC-Anywhere, PCNFS, POP3, POSTGRES, RDP, Rexec, Rlogin, Rsh, RTSP, S7-300, SAP/R3, SIP, SMB, SMTP, SMTP Enum, SNMP, SOCKS5, SSH (v1 and v2), Subversion, Teamspeak (TS2), Telnet, VMware-Auth, VNC and XMPP.
For HTTP, POP3, IMAP, and SMTP, several login mechanisms like plain and MD5 digest etc. are supported.

This tool is a proof of concept code, to give researchers and security consultants the possibility to show how easy it would be to gain unauthorized access from remote to a system.

The program was written van Hauser and is additionally supported by David Maciejak.


Download and install Cygwin ( Linux Terminal) For 32 bit

After we have finished installing Cygwin we can get to the fun part and install Hydra

Step 1: Download Hydra from either directly DOWNLOAD

Step 2: Unzip the file using a program such as Winrar to your desktop.

Step 3: Move the file from your desktop into your main drive “C:”

Step 4: Open the Cygwin terminal which if you listened to me you made a shortcut to already.

Error Note: If it says “cannot find mintty would you like to browse for it” then browse to your installation folder, go to the bin and look alphabetically for mintty until you find it.

Step 5: search for cmd at the start menu (if you can’t it’s placed in “C:\Windows\System32\cmd“) when you do find it right click it and click “run as administrator”

Step 6: type “NetSh Advfirewall set allprofiles state off” to turn off your firewall off. manually turn off your other antiviruses such as Norton or McAfee

Note: I understand this might sound crazy but when you’re installing a hacking software you don’t anti-hack softwares running.

Now you can test Cygwin out by issuing a few commands that you wouldn’t normally have use to in Windows that are common Linux commands. Here is a quick view of: "pwd", "cd /", "ls", "ps":

Step 7: on Cygwin terminal type
cd /cygdrive/c/

Once this is successful there should be yellow text besides your username saying “/cygdrive/c/

Step 8: Type “./configure
wait until it stops saying anything and then wait 2/3 minutes to make sure it stopped.

Step 9: Type “make
wait until it stops saying anything and then wait 2/3 minutes to make sure it stopped.

Step10: Type “make install
wait until it stops saying anything and then wait 2/3 minutes to make sure it stopped.

Step 11: I hope by now everything has gone fine and Cygwin should be letting you input but just close it if you’re done.

Step 12: Now right click your Cygwin shortcut, go into properties and make the start in  “C:\4hc-hydr6” and rename it hydra

Step 13: Turn your firewall back on by typing this in the admin cmd “NetSh Advfirewall set all profiles state on” but make sure that it doesn’t intervene with hydra, google how to exclude programs from the firewall and if you have an antivirus same goes.

Don’t forget to leave a comment below….

Leave a Reply

Your email address will not be published. Required fields are marked *