Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have recently came to know about hydra and i am playing with it using brute force. The number of login attempts are almost 10 attempts / second, I am trying with my password, so if my password strength is 8 characters (just a-z,A-Z,0-9) it will take days. How can i optimize the login attempts or increase the number of attempts / sec. I have ci7 hp laptop.

share|improve this question

migrated from security.stackexchange.com Apr 25 '14 at 16:33

This question came from our site for information security professionals.

(AFAIK) There is not an explicit "tries per second" config option in HYDRA, normally you can define the number of tasks that will be involved in the attack. I have checked the default option and it is 16 (in the command line utility), so I believe that the service you are trying to test against might have a big latency or some kind of delay before answering wrong attempts. Anyway you could try to tune it by increasing the number of tasks with the option "-t".

The latter is not an uncommon solution so you can expect that, also, you should consider that many services will temporary blacklist your IP if you try to log-in more than "n" times (being "n" an small number of tries like 5 or 10).

Here you have an Hydra manual for both command line and GUI utility.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.