How to do a Brute Force Attack using Hydra on Kali Linux

1 year ago
47

In this video I show you how you can perform a Brute force attack using the kali Linux OS and a penetration testing tool called Hydra.

Brute Force is listed as T1110 under the Mitre ATT&CK Framework and has 4 sub techniques including:

- 001 Guessing
- 002 Cracking
- 003 Spraying
- 004 Stuffing

Link to Lab Files 🥼:
https://docs.google.com/document/d/1LUdrwT29bJ6EQXN7nnxF4ZD0pILM-TQxLJTuARlRSNc/edit?usp=sharing

Note* when I copied the files from Metasploitable2 I copied the files to a folder called "Desktop". This is because I opened the terminal from the desktop so when moving the files from Vulnerable, it copied the contents to a new folder named Desktop. If you drop Desktop from the command, it will copy the folder name.

Hydra - The Hackers Choice
https://thc.org

MITRE ATT&CK
https://attack.mitre.org/

Music 🎵
Lawrence By TrackTribe
https://www.youtube.com/watch?v=muLrR10nThM

Check out my website💻:
https://www.BrentonHancock.com

Buy me a cup of coffee☕:
https://ko-fi.com/brentonhancock

Check out my books📘:
https://www.amazon.com/stores/Brenton-Hancock/author/B0BS8TYFBS

📔Bookmarks📔
0:00 - Introduction.
0:55 - MITRE ATT&CK Framework.
1:38 - T1110 - Brute Force.
1:58 - 001 Password Guessing.
2:30 - How Secure is your password?
4:16 - 002 Password Cracking.
4:36 - 003 Password Spraying.
4:50 - 004 Password Stuffing.
5:01 - Lab setup.
5:19 - Disclaimer.
5:30 - Lab Set Up continued.
6:19 - Hydra.
7:07 - Files needed.
7:36 - Nmap scan.
9:22 - Getting the username & password.
11:33 - Gaining access via SSH.
12:45 - The Attack.
16:10 - Close.

Loading comments...