hydra: add page #3468

Jab2870 · 2019-10-23T18:55:00Z

The page (if new), does not already exist in the repo.
The page is in the correct platform directory (common/, linux/, etc.)
The page has 8 or fewer examples.
The PR title conforms to the recommended templates.
The page follows the content guidelines.
The page description includes a link to documentation or a homepage (if applicable).

CLAassistant · 2019-10-23T18:55:25Z

All committers have signed the CLA.

tldr-bot · 2019-10-23T19:07:58Z

The build for this PR has failed with the following error(s):

pages/common/hydra.md:3: TLDR004 Command descriptions should end in a period
pages/common/hydra.md:6: TLDR005 Example descriptions should end in a colon
pages/common/hydra.md:10: TLDR005 Example descriptions should end in a colon
pages/common/hydra.md:14: TLDR005 Example descriptions should end in a colon
pages/common/hydra.md:18: TLDR005 Example descriptions should end in a colon
pages/common/hydra.md:22: TLDR005 Example descriptions should end in a colon
pages/common/hydra.md:26: TLDR005 Example descriptions should end in a colon

Please fix the error(s) and push again.

sbrl · 2019-10-23T19:31:06Z

Hey, thanks for the new page @Jab2870! The descriptions are a bit verbose. Perhaps we could shorten them a bit in places?

I also noticed that the parts of the command that can be changed aren't wrapped in the token syntax {{ }}. Perhaps you could edit this too please? It might help with making the descriptions slightly more concise too.

tldr-bot · 2019-10-23T20:40:51Z

The build for this PR has failed with the following error(s):

pages/common/hydra.md:6: TLDR005 Example descriptions should end in a colon
pages/common/hydra.md:10: TLDR005 Example descriptions should end in a colon

Please fix the error(s) and push again.

Jab2870 · 2019-10-23T20:42:06Z

Thankt @sbrl for the quick feedback. I have made some changes, hopefully this is more in line with what you are looking for.

agnivade

Please change all tokens to use snake_case. You also have a typo at "Useaname".

agnivade · 2019-10-25T07:25:58Z

pages/common/hydra.md

+
+`hydra -L {{Username List}} -P {{Password List}} -M {{Target list}} ssh`
+
+- Run hydra against an online login post form:


I think this is a bit complicated to be in a tldr page. Let us remove this.

@agnivade which part of this do you deam too complicated? is it the fact that there are 3 tokens?

I agree that it might be quite complicted but I do use it regularly. This (or a variation on it) is probably the second or third most common hydra command I use

@agnivade , I think I might have misunderstood you. Are you refering to the Login Post form or the ssh login with a Target list?

If you were refering to the SSH login, my previous comment is still the case. If you are refering to the Login Post Form then this is the most common hydra command I use. I agree that it is complicated and I have to look it up every time I try and use it.

I was referring to the Login Post form. Note that the tldr project is more of an explainer than a cheatsheet -- in other words, the underlying mission is not to merely provide copy-pastable snippets (like, say, commandlinefu.com) but rather to allow readers to understand the language of the commands, so that the logic behind the options is evident and they can then derive new commands from the provided examples, or compose several simple examples into more complex ones that are useful to them. This is basically the same purpose of man pages, but executed in a more readable way (so we believe), .i.e. through a series of examples.

Fair enough. How would feel if i changed it to this:

- Run against an online login form: `hydra -L {{username_list}} -P {{password_list}} {{ip_address}} http-post-form {{http_service_options}}` - Show options for a service: `hydra -U {{service}}`

Can you give an example of http_service_options ? And same for service

Sure:An example of http_service_options is what I had before: /{{path_to_login_request}}:{{useaname_parameter}}=^USER^&{{password_parameter}}=^PASS^&{{other_parameters}}:{{string_in_failed_responce}}"

An example of service might be http-post-form or ssh

Right, so it leads to the same amount of complexity. It's just hidden. When somebody sees "http_service_options", they will go - well, what does that mean ? And then the whole point of having a tldr page is lost.

We can do the next command. Please use a concrete value like {{ssh}} instead of {{service}}.

pages/common/hydra.md

sbrl

This looks ok to me.

The last example is rather long and verbose, but I can't see any way of shortening it - and it seems to be a valuable example to keep in the page here. I think it's a bit like the whiptail command I did a while back

owenvoke

LGTM!

schneiderl

Hi,
Just a few minor comments about casing on protocol names.

schneiderl · 2019-11-08T13:46:35Z

pages/common/hydra.md

+> Password brute forcing tool.
+> More information: <https://github.com/vanhauser-thc/thc-hydra/>.
+
+- Run hydra against an ftp server:


Suggested change

- Run hydra against an ftp server:

- Run hydra against an FTP server:

schneiderl · 2019-11-08T13:46:42Z

pages/common/hydra.md

+
+`hydra -l {{username}} -P {{password_list}} ftp://{{ip_address}}`
+
+- Run hydra against an imap server with plain authentication:


Suggested change

- Run hydra against an imap server with plain authentication:

- Run hydra against an IMAP server with plain authentication:

schneiderl · 2019-11-08T13:46:54Z

pages/common/hydra.md

+
+`hydra -C {{credentials_file}} -6 pop3s://[{{ip_v6_address}}]:{{port}}/TLS:DIGEST-MD5`
+
+- Run against all ftp servers in an ip range, testing a specific username and password:


Suggested change

- Run against all ftp servers in an ip range, testing a specific username and password:

- Run against all FTP servers in an IP range, testing a specific username and password:

schneiderl · 2019-11-08T13:47:19Z

pages/common/hydra.md

+
+`hydra -L {{username_list}} -p {{password}} imap://{{ip_address}}/PLAIN`
+
+- Run hydra against a pop3s server. The credentials file should be a list in the form `user:password`:


Suggested change

- Run hydra against a pop3s server. The credentials file should be a list in the form `user:password`:

- Run hydra against a POP3s server. The credentials file should be a list in the form `user:password`:

schneiderl · 2019-11-08T13:47:29Z

pages/common/hydra.md

+
+`hydra -l {{username}} -p {{password}} ftp://[{{ip_address}}/{{subnet}}]/`
+
+- Run against ssh on all a list of targets with every combination usernames and passwords:


Suggested change

- Run against ssh on all a list of targets with every combination usernames and passwords:

- Run against SSH on all a list of targets with every combination usernames and passwords:

schneiderl

Whops. Didn't meant to approve.

agnivade · 2019-11-10T04:13:56Z

Took at look at the whiptail page. It still seems to me that this example is slightly more complicated than the whiptail's example.

stale · 2019-12-09T17:48:46Z

Hi all! This thread has not had any recent activity. Are there any updates? Thanks!

schneiderl · 2019-12-09T19:48:36Z

ping @Jab2870

stale · 2020-01-08T20:24:43Z

Hi everyone. This thread is being closed as there was no response to the previous prompt. However, please leave a comment whenever you're ready to resume, so the thread can be reopened. Thanks again!

zlatanvasovic · 2020-01-08T22:33:53Z

Beware, bot is on the killing spree!

sbrl · 2020-01-10T16:50:25Z

I think it runs only every x amount of time @zdroid - and it has only just detected a number of PRs that meet the threshold :P

zlatanvasovic · 2020-01-10T16:52:37Z

It does, that's true. Someone should issue death warnings before the bot's day comes, though. :P

sbrl · 2020-01-10T17:03:05Z

It does send a reminder message @zdroid: #3468 (comment)

hydra: add page

af67b33

hydra: fix typos

2ef2a34

sbrl added the new command Issues requesting creation of a new page. label Oct 23, 2019

hydra: Adds token syntax and shotens descriptions

2e94c1d

hydra: Adds colons to the end of descriptions

6cf68e6

agnivade requested changes Oct 25, 2019

View reviewed changes

Jab2870 added 2 commits October 25, 2019 10:49

hydra: change tokens to snake_case and fix typo

d3947d9

hydra: remove occurences of the word hydra in later descriptions

8144957

sbrl approved these changes Oct 27, 2019

View reviewed changes

owenvoke approved these changes Nov 8, 2019

View reviewed changes

schneiderl approved these changes Nov 8, 2019

View reviewed changes

schneiderl requested changes Nov 8, 2019

View reviewed changes

stale bot added the waiting Issues/PRs with Pending response by the author. label Dec 9, 2019

stale bot removed the waiting Issues/PRs with Pending response by the author. label Dec 9, 2019

sbrl added the waiting Issues/PRs with Pending response by the author. label Dec 11, 2019

stale bot closed this Jan 8, 2020

fazlearefin mentioned this pull request Apr 8, 2024

Let's document: pen-testing tools #6863

Open

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

hydra: add page #3468

hydra: add page #3468

Jab2870 commented Oct 23, 2019

CLAassistant commented Oct 23, 2019 •

edited

tldr-bot commented Oct 23, 2019

sbrl commented Oct 23, 2019

tldr-bot commented Oct 23, 2019

Jab2870 commented Oct 23, 2019

agnivade left a comment

agnivade Oct 25, 2019

Jab2870 Oct 25, 2019

Jab2870 Oct 25, 2019

agnivade Oct 25, 2019

Jab2870 Oct 25, 2019

agnivade Oct 25, 2019

Jab2870 Oct 25, 2019

agnivade Oct 25, 2019

sbrl left a comment

owenvoke left a comment

schneiderl left a comment

schneiderl Nov 8, 2019

schneiderl Nov 8, 2019

schneiderl Nov 8, 2019

schneiderl Nov 8, 2019

schneiderl Nov 8, 2019

schneiderl left a comment

agnivade commented Nov 10, 2019

stale bot commented Dec 9, 2019

schneiderl commented Dec 9, 2019

stale bot commented Jan 8, 2020

zlatanvasovic commented Jan 8, 2020

sbrl commented Jan 10, 2020

zlatanvasovic commented Jan 10, 2020

sbrl commented Jan 10, 2020


		`hydra -L {{Username List}} -P {{Password List}} -M {{Target list}} ssh`

		- Run hydra against an online login post form:

	- Run hydra against an ftp server:
	- Run hydra against an FTP server:


		`hydra -l {{username}} -P {{password_list}} ftp://{{ip_address}}`

		- Run hydra against an imap server with plain authentication:


		`hydra -C {{credentials_file}} -6 pop3s://[{{ip_v6_address}}]:{{port}}/TLS:DIGEST-MD5`

		- Run against all ftp servers in an ip range, testing a specific username and password:


		`hydra -L {{username_list}} -p {{password}} imap://{{ip_address}}/PLAIN`

		- Run hydra against a pop3s server. The credentials file should be a list in the form `user:password`:


		`hydra -l {{username}} -p {{password}} ftp://[{{ip_address}}/{{subnet}}]/`

		- Run against ssh on all a list of targets with every combination usernames and passwords:

hydra: add page #3468

hydra: add page #3468

Conversation

Jab2870 commented Oct 23, 2019

CLAassistant commented Oct 23, 2019 • edited

tldr-bot commented Oct 23, 2019

sbrl commented Oct 23, 2019

tldr-bot commented Oct 23, 2019

Jab2870 commented Oct 23, 2019

agnivade left a comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

sbrl left a comment

Choose a reason for hiding this comment

owenvoke left a comment

Choose a reason for hiding this comment

schneiderl left a comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

schneiderl left a comment

Choose a reason for hiding this comment

agnivade commented Nov 10, 2019

stale bot commented Dec 9, 2019

schneiderl commented Dec 9, 2019

stale bot commented Jan 8, 2020

zlatanvasovic commented Jan 8, 2020

sbrl commented Jan 10, 2020

zlatanvasovic commented Jan 10, 2020

sbrl commented Jan 10, 2020

CLAassistant commented Oct 23, 2019 •

edited