Update Pentesting tools News 04-May-2011

THC-Hydra 6.3 released!

Hydra is a very fast (multi-threaded) network logon password brute forcing, similar to the famous Medusa Password Cracker.

It supports a lot of services and protocols: TELNET, FTP, HTTP-GET, HTTP-HEAD, HTTPS-GET, HTTP-HEAD, HTTP-PROXY, LDAP2, LADP3, SMB, SMBNT, MS-SQL, MYSQL, POSTGRES, REXEC, SOCKS5, VNC, POP3, IMAP, NNTP, PCNFS, ICQ, SAP/R3, Cisco auth, Cisco enable, SMTP-AUTH, SSH2, SNMP, CVS, Cisco . . . . .

Changelog for v6.3

Added patch by Petar(dot)Kaley(at)gmail.com which adds nice icons to cygwin hydra files
Added patch by Gauillaume Rousse which fixes a warning display
New Oracle module (for databases via OCI, for TNS Listener passwd, for SID enumeration)
New SMTP user enum module (using VRFY, EXPN or RCPT command)
Memory leak fix for -x bruteforcing option reported by Alex Lau
Fix for svn module, for some versions it needs one more lib, thanks to the Debian team for reporting!
Fix ssh module, on connection refused a credential could be lost
Fix http-form module, a redirect was not always followed
QA on all modules for memory leaks
Better gtk detection (to not even try xhydra compilation when its useless)
First blant attempt for configuring to x64 systems (Linux and *BSD)
Updated network password cracker comparison on the web page (for hydra and ncrack updates)
Indented all source code

More details about this release and download can be found on the THC-Hydra official WebSite.

Enjoy, Jano