Update Pentesting tools News 03-Oct-2011

THC-Hydra 7.1 released!

Hydra is a very fast (multi-threaded) network logon password brute forcing, similar to the famous Medusa Password Cracker.

It was tested to work on Linux, Windows/Cygwin, Solaris 11, FreeBSD 8.1 and OSX and supports a lot of services and protocols: TELNET, FTP, HTTP-GET, HTTP-HEAD, HTTPS-GET, HTTP-HEAD, HTTP-PROXY, LDAP2, LADP3, SMB, SMBNT, MS-SQL, MYSQL, POSTGRES, REXEC, SOCKS5, VNC, POP3, IMAP, NNTP, PCNFS, ICQ, SAP/R3, Cisco auth, Cisco enable, SMTP-AUTH, SSH2, SNMP, CVS, Cisco . . . . .

Changelog for v7.1

Added HTTP Proxy URL enumeration module
Added SOCKS4/SOCKS5 proxy support with authentication
Added IPv6 support for SOCKS5 module
Added -e r option to try the reversed login as password
Rewrote -x functionality as the code caused too much trouble (thanks to murder.net7(at)gmail.com for reporting one of the issues)
Fixed a bug with multiple hosts (-M) and http modules against targets that are virtual servers. Well spotted by Tyler Krpata!
Fixed SVN IPv6 support and updated deprecated calls
Fixed RDP failed child connection returned value and false positive issues reported by Wangchaohui, thanks!
Fixed restore file functionality, was not working together with -o option
Fix in http-form module for bug introduced in 7.0
Fixed xhydra specific parameter value for http-proxy module
Minor enhancements

More details about THC-Hydra 7.1 and download can be found on the THC-Hydra official WebSite.

Enjoy, Jano