OK, just a quick video before we finish this section, I want to mention one thing about Hydra.
Now, Hydra is a powerful tool, and it's not only useful for brute forcing Web pages, it can be used
to brute force different services as well, such as S.H., FTP and others.
And in this example, I just want to show you that if we take a look at our own WASP virtual machine
and we scan it with a map using the F command, which will scan most known hundred ports, we will get
this output.
And if we take a closer look at scan results, we do notice that the target has Port 20 to or in other
words, DSH port open.
So we can try to target the S.H. port with hydrous brute force attack, so let's give it a try.
Now, the first thing that you will notice regarding Hydra with S.H. is that the syntax is rather easy
or much easier.
Then once you're targeting Web pages, all we need to do is specify the IP address, then we type as
S.H. and then bash our users and there should be 30, 60, and this will run the attack on this switchboard
with these two lists.
Now, since we don't have the correct username and password inside of these lists, it gave us an output
that zero valid passwords that.
Now, let's add the correct credentials right here, the correct user name is Root or we already have
routes, so we can just leave it like that.
But correct password is a WASP BVA, so make sure that you add or WASP BVA inside of the password list.
And if I run the comment again.
For some reason, we get incorrect or not, while username once again, so perhaps we need to add another
option.
Let me just go to the help menu real quick.
And let's try adding Dashty option.
Which default is set to 16, we're going to lower it just for the purposes of this command, so let's
type it right here.
Dashty for and then S.H. and then users and passwords that the.
And here it is, we successfully found the correct log in to the same report on the target machine.
All we had to do is type Hydra, the IP address, the four, and then we specify which protocol in our
case we're using S.H. and then the passwords and usernames list.
Now, if you wanted to check whether this is correct credentials, you can type S.H. wanted to do that
168 at one dot 11.
Here you want to select yes, and pardon me, we need to close this because we're trying to connect
to the Mr. Hacker account on the target machine, which is nonexistent.
So we must type as the sage route and then at this IP address right here, then we enter.
It will ask for the password, and here we type or wasp BB as the password for the account.
Now we're locked in on the target machine over at Serch and we can execute any commands that we want
on the target machine, such as I have configured, such as who am I?
We can type out as we can change directories and see all the files on the target system just because
we successfully brute force the S.H. from here, we can delete the entire website if we wanted to.
We can delete the operating system, we can create files, delete files and do pretty much anything
that we want.
OK, I just want to show you this, that there is another possibility with Hydra besides just targeting
Web pages.
Nonetheless, we are officially done with the brute force section and in the next lecture, we're going
to take a look at sensitive data exposure.