1.前言
1.1 关于法律
本文仅从安全角度去探讨测试,请勿非法使用,遵守法律法规。
1.2 Hydra介绍
Hydra是一款基于协议的在线连接测试密码安全工具,支持多款协议。
1.3 测试环境
Linux多使用SSH协议进行登录管理,所以本文仅介绍Hydra关于SSH方面的使用,从而进行测试、破解密码。
Linux版本:
[root@legend_never_dies opt]# uname -a
Linux legend_never_dies 3.10.0-1127.el7.x86_64 #1 SMP Tue Mar 31 23:36:51 UTC 2020 x86_64 x86_64 x86_64 GNU/Linux
2.准备工作
2.1安装Hydra
官方安装原文(文末有Hydra的GitHub链接):
type "./configure", then "make" and finally "sudo make install"
For special modules you need to install software packages before
you run "./configure":
Ubuntu/Debian: apt-get install libssl-dev libssh-dev libidn11-dev libpcre3-dev libgtk2.0-dev libmysqlclient-dev libpq-dev libsvn-dev firebird-dev libncurses5-dev
Redhat/Fedora: yum install openssl-devel pcre-devel ncpfs-devel postgresql-devel libssh-devel subversion-devel libncurses-devel
OpenSuSE: zypper install libopenssl-devel pcre-devel libidn-devel ncpfs-devel libssh-devel postgresql-devel subversion-devel libncurses-devel
For the Oracle login module, install