Image
 
linkedin_logo.png rss_logo.jpg
twitter_logo.png youtube_logo.jpg
Latest Additions
 
EH-Net Login
Welcome Guest.






Lost Password?
No account yet? Register
Who's Online
We have 38 guests online
 
Advertisement

You are here: Home arrow Ethical Hacking Discussions and Related Certificationsarrow Network Pen Testingarrow hydra help
EH-Net
May 25, 2013, 03:54:59 AM *
Welcome, Guest. Please login or register.
Did you miss your activation email?

Login with username, password and session length
News: Go back to The Ethical Hacker Network Online Magazine Home Page
 
   Home   Help Calendar Login Register  
Pages: [1] 2 3   Go Down
  Print  
Author Topic: hydra help  (Read 16968 times)
0 Members and 1 Guest are viewing this topic.
LT72884
Jr. Member
**
Offline Offline

Posts: 95


View Profile
« on: March 07, 2010, 11:35:55 PM »

Ok so here is what i have done. my home network is on the 192.168.2.0/24 network and i have BT2 bridged via virtual box. i perfomr this command:

nmap -sV -P0 192.168.2.0-255

finds all my interesting stuff along with banner grabbing. So i notice it finds my router and tells me the exact type and what not. Very cool. So i point firefox to the IP provided and it asks for user name and pass. For lab purposes i set user name to admin and a simple password(7 digit number. this might be the problem). I make sure that hydra is set to verbos and that its pointing to the wordlist.txt i set protocol to http-get and set username to admin pointing to target ip of 192.168.2.1. after 15 minutes of waiting this is what appears on my output. even though i grabbed it at 19,441 or so. it was still going at 50,000+ tries.

19487: Can not connect [timeout], process exiting
Process 19424: Can not connect [timeout], process exiting
Process 19425: Can not connect [timeout], process exiting
Process 19426: Can not connect [timeout], process exiting
Process 19427: Can not connect [timeout], process exiting
Process 19428: Can not connect [timeout], process exiting
Process 19429: Can not connect [timeout], process exiting
Process 19430: Can not connect [timeout], process exiting
Process 19431: Can not connect [timeout], process exiting
Process 19432: Can not connect [timeout], process exiting
Process 19433: Can not connect [timeout], process exiting
Process 19439: Can not connect [timeout], process exiting
Process 19440: Can not connect [timeout], process exiting
Process 19441: Can not connect [timeout], process exiting

It never found my password but it sure knocked my internet connection around.

What could be the issue?

thanx for all your time, effort and input you have given  me so far here. I know i ask alot but i hope i can find something to give in return.

Matt
Logged
KamiCrazy
Jr. Member
**
Offline Offline

Posts: 78


View Profile
« Reply #1 on: March 08, 2010, 12:48:10 AM »

here is a snippet of the code

Code:
// ----------------- alarming functions ----------------

void alarming() {
    fail++;
    alarm_went_off++;
// uh, I think it's not good for performance if we try to reconnect to a timeout system!
//    if (fail > MAX_CONNECT_RETRY) {
        fprintf(stderr, "Process %d: Can not connect [timeout], process exiting\n", (int)getpid());
        if (debug) printf("DEBUG_CONNECT_TIMEOUT\n");
        hydra_child_exit();
//    } else {
// if (verbose) fprintf(stderr, "Process %d: Can not connect [timeout], retrying (%d of %d retries)\n", (int)getpid(), fail, MAX_CONNECT_RETRY);
//    }
}

It means that basically hydra is unable to open a connection to whatever you are telling it to connect. You should verify that http-get is the correct authentication method you should use.
Logged
j0rDy
Hero Member
*****
Offline Offline

Posts: 590


View Profile
« Reply #2 on: March 08, 2010, 03:12:54 AM »

did you set the parameters right? hydra can close the connection before he gets the result, so try to ajust the number of connections and the time it waits for response.

here's some reseach material:

http://www.enterprisenetworkingplanet.com/netsecur/article.php/3745276

i quote:
The Tuning tab is used for selecting the number of login attempts that are submitted simultaneously, and this number can be quite critical. Too high and the chances of being detected or locked out of the system are much higher, but too low and it could take days to work through your password list.
Logged

ISC2 Associate, CEH, ECSA, OSCP, OSWP

earning my stripes appears to be a road i must travel alone...with a little help of EH.net
KamiCrazy
Jr. Member
**
Offline Offline

Posts: 78


View Profile
« Reply #3 on: March 08, 2010, 03:36:01 AM »

After reviewing your question again, I would also look into whether you are attacking the right web page for your router.
Logged
zeroflaw
Full Member
***
Offline Offline

Posts: 208



View Profile
« Reply #4 on: March 08, 2010, 05:50:05 AM »

Yea be sure to use the right parameters. Especially pay attention to the -t -w and -f parameters. You usually want to use -f to make hydra stop when it gets the password right. If you don't do this I believe it will just keep running and try other passwords.

Though, it seems you're attacking something that doesn't accept connections.
Logged

ZF
LT72884
Jr. Member
**
Offline Offline

Posts: 95


View Profile
« Reply #5 on: March 08, 2010, 12:04:02 PM »

Yea be sure to use the right parameters. Especially pay attention to the -t -w and -f parameters. You usually want to use -f to make hydra stop when it gets the password right. If you don't do this I believe it will just keep running and try other passwords.

Though, it seems you're attacking something that doesn't accept connections.

i used xhydra form the cli. I followed a video tutorial from the purehate blog(google search) and followed it to a T. I even have the same router as he uses in the video. WRT54G non flashed. Just the normal firmaware.

thanx for the input.
Logged
zeroflaw
Full Member
***
Offline Offline

Posts: 208



View Profile
« Reply #6 on: March 08, 2010, 01:00:21 PM »

XHydra? Is that the GUI version? Well anyway, it seems you need to be really careful with the number of tasks you let hydra perform. After some googling and actually trying hydra myself on the de-ice disks, I've found that 8 tasks works best.

Hope this helps.

I prefer to use the command line versions for some reason, lol.
Logged

ZF
LT72884
Jr. Member
**
Offline Offline

Posts: 95


View Profile
« Reply #7 on: March 08, 2010, 01:16:20 PM »

XHydra? Is that the GUI version? Well anyway, it seems you need to be really careful with the number of tasks you let hydra perform. After some googling and actually trying hydra myself on the de-ice disks, I've found that 8 tasks works best.

Hope this helps.

I prefer to use the command line versions for some reason, lol.

Yes xhydra is the gui.

http://blip.tv/scripts/flash/showplayer.swf?enablejs=true&feedurl=http://purehate138.blip.tv/rss&file=http://blip.tv/rss/flash/527781&showplayerpath=http://blip.tv/scripts/flash/showplayer.swf

is the video and it says 68 tasks, i think. I guess i need a good hydra tutorial. I better start googling. haha that sounds funny.

thanx
Logged
KamiCrazy
Jr. Member
**
Offline Offline

Posts: 78


View Profile
« Reply #8 on: March 08, 2010, 05:48:10 PM »

pure_hate has said that he only used 68 to speed things up in the vid, he posted in a thread 2 years ago on remote-exploits.org forum that you should use something more sensible.
Logged
LT72884
Jr. Member
**
Offline Offline

Posts: 95


View Profile
« Reply #9 on: March 08, 2010, 07:47:08 PM »

pure_hate has said that he only used 68 to speed things up in the vid, he posted in a thread 2 years ago on remote-exploits.org forum that you should use something more sensible.

LOL, my bad. I just need to read up on hydra. haha thanx
Logged
j0rDy
Hero Member
*****
Offline Offline

Posts: 590


View Profile
« Reply #10 on: March 09, 2010, 06:34:41 AM »

wow, i'm a little suprised i got the (first) right answer, hehe. anyway glad its solved!
Logged

ISC2 Associate, CEH, ECSA, OSCP, OSWP

earning my stripes appears to be a road i must travel alone...with a little help of EH.net
LT72884
Jr. Member
**
Offline Offline

Posts: 95


View Profile
« Reply #11 on: March 09, 2010, 11:48:39 AM »

wow, i'm a little suprised i got the (first) right answer, hehe. anyway glad its solved!

Hmm, i tried messing around with the parameters and took it down to 8 and below for tasks. Still same error. Maybe my router is the issue. I know it does weird things at times. haha. ill keep trying and when i get it to work, ill post my finindgs.

thanx for the input
Logged
hayabusa
Hero Member
*****
Offline Offline

Posts: 1633



View Profile
« Reply #12 on: March 09, 2010, 12:10:00 PM »

I'd throw a packet trace on the wire (wireshark,) and see if A.) the packets are getting to the router, and B.) if the router ever appears to respond.  That should tell you if the router is doing ANYTHING in response.  If it is, and hydra just doesn't like it, then it's a timeout or something on the application side.  If it's NOT, then you need to see if the router even tries to accept connection attempts, and go from there.

Based on your saying it sure knocks your connection around, it sounds like the packets are definitely hitting it, so it's more than likely you're either hitting the wrong page on the router, or your router isn't configured for http versus https or something, and you're misconfigured, somwehere, either at the router or in hydra...

Very basic overview, but you should be able to get the idea...
Logged

~ hayabusa ~ 

"All men can see these tactics whereby I conquer, but what none can see is the strategy out of which victory is evolved." - Sun Tzu, 'The Art of War'


OSCE, OSCP , GPEN, C|EH
LT72884
Jr. Member
**
Offline Offline

Posts: 95


View Profile
« Reply #13 on: March 09, 2010, 02:59:16 PM »

I'd throw a packet trace on the wire (wireshark,) and see if A.) the packets are getting to the router, and B.) if the router ever appears to respond.  That should tell you if the router is doing ANYTHING in response.  If it is, and hydra just doesn't like it, then it's a timeout or something on the application side.  If it's NOT, then you need to see if the router even tries to accept connection attempts, and go from there.

Based on your saying it sure knocks your connection around, it sounds like the packets are definitely hitting it, so it's more than likely you're either hitting the wrong page on the router, or your router isn't configured for http versus https or something, and you're misconfigured, somwehere, either at the router or in hydra...

Very basic overview, but you should be able to get the idea...

Hmm, i know the router is set to http because i tried hhtps and it hated that. Im gonna have to try wireshark and see what happens. Never thought of that actually. See i do learn something new everyday..

Im thinking that my router might be messed up because when i first bought it it had a very hard time doing normal things such as saving settings.. Gonna try against smoothwall and see what happens.
Logged
j0rDy
Hero Member
*****
Offline Offline

Posts: 590


View Profile
« Reply #14 on: March 10, 2010, 09:57:40 AM »

you can also try adding another computer to the router through the broadcast port and sniff all packages with wireshark. actually the same option as hayabusa offered, but then you sniff the complete network to check for abnormality.
Logged

ISC2 Associate, CEH, ECSA, OSCP, OSWP

earning my stripes appears to be a road i must travel alone...with a little help of EH.net
Pages: [1] 2 3   Go Up
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.18 | SMF © 2013, Simple Machines
Joomla Bridge by JoomlaHacks.com
Valid XHTML 1.0! Valid CSS!
Page created in 0.088 seconds with 23 queries.
 
Exclusive Deal

sansfire13_245x90_cw90.jpg
SANSFIRE 2013
June 15 - 22

5% Off w/ Code: EHN_5

SANS Deals 4 EH-Netters
5% OFF Any SANS Course in Any Format!
Coupon Code: EHN_5 Including SANS Rocky Mountain 2013 & SANS Boston 2013
Polls
Compared to this year, 2013 will be:
 
Recent Forum Topics
EH-Net News Feeds
Latest Additions
 
         
Free Business and Tech Magazines and eBooks

© 2013 The Ethical Hacker Network
Joomla! is Free Software released under the GNU/GPL License.