Update Pentesting tools News 12-Sep-2011
THC-Hydra 7.0 released!
Hydra is a very fast (multi-threaded) network logon password brute forcing, similar to the famous Medusa Password Cracker.
It was tested to work on Linux, Windows/Cygwin, Solaris 11, FreeBSD 8.1 and OSX and supports a lot of services and protocols:
TELNET, FTP, HTTP-GET, HTTP-HEAD, HTTPS-GET, HTTP-HEAD, HTTP-PROXY, LDAP2, LADP3, SMB, SMBNT, MS-SQL, MYSQL, POSTGRES, REXEC, SOCKS5, VNC, POP3, IMAP, NNTP, PCNFS, ICQ, SAP/R3, Cisco auth, Cisco enable, SMTP-AUTH, SSH2, SNMP, CVS, Cisco . . . . .
Changelog for v7.0
-
New main engine for hydra: better performance, flexibility and stability
-
New option -u - loop around users, not passwords
-
Option -e now also works with -x and -C
-
Added RDP module, domain can be passed as argument
-
Added other_domain option to smb module to test trusted domains
-
Small enhancement for http and http-proxy module for standard ignoring servers
-
Lots of bugfixes, especially with many tasks, multiple targets and restore file
-
Fixes for a few http-form issues
-
Fix smb module NTLM hash use
-
Fixed Firebird module deprecated API call
-
Fixed for dpl4hydra to work on old sed implementations (OS/X ...)
-
Fixed makefile to install dpl4hydra (thx @sitecrea)
-
Fixed local buffer overflow in debug output function (required -d to be used)
-
Fixed xhydra running warnings and correct quit action event
More details about THC-Hydra 7.0 and download can be found on the THC-Hydra official WebSite.
Enjoy, Jano