Update Pentesting tools News 12-Sep-2011

THC-Hydra 7.0 released!

Hydra is a very fast (multi-threaded) network logon password brute forcing, similar to the famous Medusa Password Cracker.

It was tested to work on Linux, Windows/Cygwin, Solaris 11, FreeBSD 8.1 and OSX and supports a lot of services and protocols: TELNET, FTP, HTTP-GET, HTTP-HEAD, HTTPS-GET, HTTP-HEAD, HTTP-PROXY, LDAP2, LADP3, SMB, SMBNT, MS-SQL, MYSQL, POSTGRES, REXEC, SOCKS5, VNC, POP3, IMAP, NNTP, PCNFS, ICQ, SAP/R3, Cisco auth, Cisco enable, SMTP-AUTH, SSH2, SNMP, CVS, Cisco . . . . .

Changelog for v7.0

New main engine for hydra: better performance, flexibility and stability
New option -u - loop around users, not passwords
Option -e now also works with -x and -C
Added RDP module, domain can be passed as argument
Added other_domain option to smb module to test trusted domains
Small enhancement for http and http-proxy module for standard ignoring servers
Lots of bugfixes, especially with many tasks, multiple targets and restore file
Fixes for a few http-form issues
Fix smb module NTLM hash use
Fixed Firebird module deprecated API call
Fixed for dpl4hydra to work on old sed implementations (OS/X ...)
Fixed makefile to install dpl4hydra (thx @sitecrea)
Fixed local buffer overflow in debug output function (required -d to be used)
Fixed xhydra running warnings and correct quit action event

More details about THC-Hydra 7.0 and download can be found on the THC-Hydra official WebSite.

Enjoy, Jano