{"id":123,"date":"2023-03-14T16:50:45","date_gmt":"2023-03-14T08:50:45","guid":{"rendered":"https:\/\/mianka.xyz\/?p=122"},"modified":"2023-03-15T10:04:18","modified_gmt":"2023-03-15T02:04:18","slug":"hydra","status":"publish","type":"post","link":"https:\/\/www.mianka.xyz\/?p=123","title":{"rendered":"hydra\u547d\u4ee4\u7528\u6cd5"},"content":{"rendered":"

Hydra\u662f\u4e00\u4e2a\u975e\u5e38\u6d41\u884c\u7684\u7f51\u7edc\u767b\u5f55\u7834\u89e3\u5de5\u5177\uff0c\u5b83\u53ef\u4ee5\u4f7f\u7528\u591a\u79cd\u534f\u8bae\u548c\u591a\u79cd\u65b9\u5f0f\u6765\u5c1d\u8bd5\u7834\u89e3\u7528\u6237\u7684\u5bc6\u7801\u3002\u4e0b\u9762\u662f\u4e00\u4e9b\u5e38\u7528\u7684Hydra\u547d\u4ee4\u7528\u6cd5\uff1a<\/p>\n

    \n
  1. \n

    \u57fa\u672c\u7528\u6cd5<\/p>\n<\/li>\n<\/ol>\n

    hydra -l <\u7528\u6237\u540d> -P <\u5bc6\u7801\u5b57\u5178> <\u76ee\u6807IP> <\u534f\u8bae> <\u670d\u52a1\u7aef\u53e3><\/pre>\n
    \u793a\u4f8b\uff1ahydra -l admin -P password.txt 192.168.1.1 http-post-form "\/login.php:username=^USER^&password=^PASS^:Invalid username or password"<\/code><\/p>\n
    \u8fd9\u4e2a\u547d\u4ee4\u5c06\u5c1d\u8bd5\u4f7f\u7528password.txt\u4e2d\u7684\u5bc6\u7801\u5b57\u5178\u5bf9192.168.1.1\u4e0a\u7684HTTP POST\u767b\u5f55\u8868\u5355\u8fdb\u884c\u66b4\u529b\u7834\u89e3\uff0c\u7528\u6237\u540d\u4e3aadmin\uff0c\u767b\u5f55\u8868\u5355\u7684\u7528\u6237\u540d\u5b57\u6bb5\u4e3ausername\uff0c\u5bc6\u7801\u5b57\u6bb5\u4e3apassword\uff0c\u5982\u679c\u767b\u5f55\u5931\u8d25\u5219\u663e\u793a\u201cInvalid username or password\u201d\u3002<\/p>\n
      \n
    1. \n
      \u66b4\u529b\u7834\u89e3\u591a\u4e2a\u8d26\u53f7<\/p>\n<\/li>\n<\/ol>\n
      hydra -L <\u7528\u6237\u540d\u5b57\u5178> -P <\u5bc6\u7801\u5b57\u5178> <\u76ee\u6807IP> <\u534f\u8bae> <\u670d\u52a1\u7aef\u53e3><\/pre>\n
      \u793a\u4f8b\uff1ahydra -L users.txt -P password.txt 192.168.1.1 ftp<\/code><\/p>\n
      \u8fd9\u4e2a\u547d\u4ee4\u5c06\u4f7f\u7528users.txt\u4e2d\u7684\u7528\u6237\u540d\u5b57\u5178\u548cpassword.txt\u4e2d\u7684\u5bc6\u7801\u5b57\u5178\u5bf9192.168.1.1\u4e0a\u7684FTP\u670d\u52a1\u5668\u8fdb\u884c\u66b4\u529b\u7834\u89e3\u3002<\/p>\n
        \n
      1. \n
        \u4f7f\u7528\u6307\u5b9a\u7684\u7528\u6237\u540d\u548c\u5bc6\u7801\u7834\u89e3<\/p>\n<\/li>\n<\/ol>\n
        hydra -C <\u7528\u6237\u540d:\u5bc6\u7801\u6587\u4ef6> <\u76ee\u6807IP> <\u534f\u8bae> <\u670d\u52a1\u7aef\u53e3><\/pre>\n
        \u793a\u4f8b\uff1ahydra -C users_passwords.txt 192.168.1.1 ssh<\/code><\/p>\n
        \u8fd9\u4e2a\u547d\u4ee4\u5c06\u4f7f\u7528users_passwords.txt\u6587\u4ef6\u4e2d\u6307\u5b9a\u7684\u7528\u6237\u540d\u548c\u5bc6\u7801\u5bf9192.168.1.1\u4e0a\u7684SSH\u670d\u52a1\u5668\u8fdb\u884c\u66b4\u529b\u7834\u89e3\u3002<\/p>\n
          \n
        1. \n
          \u5e38\u89c1\u7684\u670d\u52a1\u6a21\u5757<\/p>\n<\/li>\n<\/ol>\n
          Hydra\u652f\u6301\u591a\u79cd\u534f\u8bae\u548c\u670d\u52a1\uff0c\u5e38\u89c1\u7684\u670d\u52a1\u6a21\u5757\u5305\u62ec\uff1aFTP\u3001SSH\u3001Telnet\u3001SMTP\u3001POP3\u3001IMAP\u3001HTTP\u3001HTTPS\u3001SMB\u3001MySQL\u3001PostgreSQL\u7b49\u3002<\/p>\n
          \u793a\u4f8b\uff1ahydra -L users.txt -P password.txt 192.168.1.1 smb<\/code><\/p>\n
          \u8fd9\u4e2a\u547d\u4ee4\u5c06\u4f7f\u7528users.txt\u4e2d\u7684\u7528\u6237\u540d\u5b57\u5178\u548cpassword.txt\u4e2d\u7684\u5bc6\u7801\u5b57\u5178\u5bf9192.168.1.1\u4e0a\u7684SMB\u670d\u52a1\u5668\u8fdb\u884c\u66b4\u529b\u7834\u89e3\u3002<\/p>\n
            \n
          1. \n
            \u663e\u793a\u8be6\u7ec6\u8f93\u51fa<\/p>\n<\/li>\n<\/ol>\n
            hydra -v -V -l <\u7528\u6237\u540d> -P <\u5bc6\u7801\u5b57\u5178> <\u76ee\u6807IP> <\u534f\u8bae> <\u670d\u52a1\u7aef\u53e3><\/pre>\n
            -v\u9009\u9879\u5c06\u8f93\u51fa\u8be6\u7ec6\u4fe1\u606f\uff0c-V\u9009\u9879\u5c06\u8f93\u51fa\u66f4\u8be6\u7ec6\u7684\u4fe1\u606f\u3002<\/p>\n
            \u793a\u4f8b\uff1ahydra -v -l admin -P password.txt 192.168.1.1 http-post-form "\/login.php:username=^USER^&password=^PASS^:Invalid username or password"<\/code><\/p>\n
            \u8fd9\u4e2a\u547d\u4ee4\u5c06\u4f7f\u7528password.txt\u4e2d\u7684\u5bc6\u7801\u5b57\u5178\u5bf9192.168.1.1\u4e0a\u7684HTTP POST\u767b\u5f55\u8868\u5355\u8fdb\u884c\u66b4\u529b\u7834\u89e3\uff0c\u7528\u6237\u540d\u4e3aadmin\uff0c\u767b\u5f55\u8868\u5355\u7684\u7528\u6237\u540d\u5b57\u6bb5\u4e3ausername\uff0c\u5bc6\u7801\u5b57\u6bb5\u4e3apassword\uff0c\u5982\u679c\u767b\u5f55\u5931\u8d25\u5219\u663e\u793a\u201cInvalid username or password\u201d\uff0c\u540c\u65f6\u8fd8\u4f1a\u8f93\u51fa\u8be6\u7ec6\u9519\u8bef\u4fe1\u606f<\/p>\n
            <\/p>\n","protected":false},"excerpt":{"rendered":"
            Hydra\u662f\u4e00\u4e2a\u975e\u5e38\u6d41\u884c\u7684\u7f51\u7edc\u767b\u5f55\u7834\u89e3\u5de5\u5177\uff0c\u5b83\u53ef\u4ee5\u4f7f\u7528\u591a\u79cd\u534f\u8bae\u548c\u591a\u79cd\u65b9\u5f0f\u6765\u5c1d\u8bd5\u7834\u89e3\u7528\u6237\u7684\u5bc6…<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[5],"tags":[35,13,11],"class_list":["post-123","post","type-post","status-publish","format-standard","hentry","category-cmd","tag-hydra","tag-linux","tag-post-1776407685"],"_links":{"self":[{"href":"https:\/\/www.mianka.xyz\/index.php?rest_route=\/wp\/v2\/posts\/123","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.mianka.xyz\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.mianka.xyz\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.mianka.xyz\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.mianka.xyz\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=123"}],"version-history":[{"count":0,"href":"https:\/\/www.mianka.xyz\/index.php?rest_route=\/wp\/v2\/posts\/123\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.mianka.xyz\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=123"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.mianka.xyz\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=123"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.mianka.xyz\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=123"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}