Update Pentesting tools News 12-Feb-2012

THC-Hydra 7.2 released!

Hydra is a very fast (multi-threaded) network logon password brute forcing, similar to the famous Medusa Password Cracker.

It was tested to work on Linux, Windows/Cygwin, Solaris 11, FreeBSD 8.1 and OSX and supports a lot of services and protocols: TELNET, FTP, HTTP-GET, HTTP-HEAD, HTTPS-GET, HTTP-HEAD, HTTP-PROXY, LDAP2, LADP3, SMB, SMBNT, MS-SQL, MYSQL, POSTGRES, REXEC, SOCKS5, VNC, POP3, IMAP, NNTP, PCNFS, ICQ, SAP/R3, Cisco auth, Cisco enable, SMTP-AUTH, SSH2, SNMP, CVS, Cisco . . . . .

Changelog for v7.2

Speed-up http modules auth mechanism detection
Fixed -C colonfile mode when empty login/passwords were used (thanks to will(at)configitnow(dot)com for reporting)
The -f switch was not working for postgres, afp, socks5,
firebird and ncp, thanks to Richard Whitcroft for reporting!
Fixed NTLM auth in http-proxy/http-proxy-url module
Fixed URL when being redirected in http-form module, thanks to gash(at)chaostreff(dot)at
Fix MSSQL success login condition, thanks to whistle_master(at)live(dot)com
Fix http form module: optional headers and 3xx status redirect, thx to Gash
Fix in configure script for --prefix option, thanks to dazzlepod
Update of the dpl4hydra script by Roland Kessler, thanks!
Small fix for hydra man page, thanks to brad(at)comstyle(dot)com

More details about THC-Hydra 7.2 and download can be found on the THC-Hydra official WebSite.

Enjoy, Jano