UPDATED: Now includes video for getting XHYDRA working on Backtrack 5 at the bottom! Today I will show you how to setup the parallel threaded multi-protocol cracker known as THCHydra to work under a Windows 7 environment. In order to pull this off properly we will need to setup a Cygwin environment on our Windows machine, as there is NO supported. EXE file for Windows to make this magically work probably a virus if you find one or it is very outdated. Cygwin is like a Linux emulator for Windows, in that it creates a Linux API environment within your windows environment to provide a lot of Linux API functionality not 100% but close. This is done through the cywin1. Linux programs like THChydra. OK with that out of the way, we can begin... You need to start by downloading the Setup. EXE file from the main site listed above. Just double click on this when you are ready to get started. This will open the initial setup for Cygwin environment, which by default only includes the basic items needed. For example, if for example you wanted to also compile C++ programs you would need to make sure you included the gcc-g++ package and some kind of text editor like Vi or Nano. Another option is to install everything by clicking on the Default field next to the All category. If you have low bandwidth this could take some time as it downloads most of the packages from Internet like SVN , so go have lunch and a beer, smoke or whatever your fancy and come back in a bit. Today's HDDs are getting larger and cheaper so I doubt many will have any issues due to space if you select ALL mine was 8. When you are done Setup. EXE saves everything and creates a shortcut on your desktop as well as in the start menu. You can then use the Setup. EXE file any time you want to update or install a new Cygwin package, as once you have gone through the initial install choices it will remember your final configuration options so anytime you run it again it will open and allow you to choose to update your system by selecting additional packages. This ends our brief overview and review for installing Cygwin, please spend time on the homesite and reading the user guide to figure out all the ins and outs of it. If for some reason you decide you want to remove one of the installed Cygwin packages you will simply need to re-run the Setup. Once it is open you simply navigate the list of packages that are already installed, and choose the category you want to edit or click on the View button. OK, now that it is extracted you will have a new folder called hydra-6. You can edit this if needed to try and get it working, or simply navigate to the hydra folder before running it each time. The default make will also setup the necessary requirements for Xhydra if you have all of the dependencies needed, however I should mention that it is not functional in Cygwin environment due to issues with the GTK+ front end and Cygwin X Server. It will appear to be fine until you hit start to run it , until then XHYDRA only works in a 100% real Linux environment. I will not go into great detail as the user guide is chalked full of details and there are already a lot of other tutorials on the net the cover how to use it, but not a lot on how to get it working on Windows which is why I wrote this article. You can see above it found the password for the username admin. You can search the user guide or Google if you need further explanations on how to use it or how to target other protocols, but that should atleast give you enough to get started. I must also note some important pieces of information that you should be aware of when cracking over the network with Hydra. First, if the password is not in your dictionary you will never find it Period - the end! These factors can all impact overall time it takes to exhasut all possibilities. Once you have identified the proxy you will be using you can incorporate it into THCHydra when testing. A strong word list is also very helpful when it comes to cracking, so try to keep manageable word lists or use tools to help create narrowed down word lists for better, or more targeted, results. THCHydra comes with the PW-INSPECTOR tool which can be used to trim a wordlist down based on password policy or known details. I like to use the word list tools provided by the Hashcat team as well as a tool called Shmoosh2x64. The Hashcat team has a set of tools to help with expanding, sorting, and splitting wordlists and the shmoosh tool helps to combine multiple wordlists while also sorting out duplicates so you get a new wordlist that is full of unique words. I suggest playing with them all as they can all come in handy in various occasions, and all have been documented on their respective sites if you need help with the proper command syntax to use Google is your friend. Hopefully this tutorial has showed you how you can get the latest version of THCHydra working under a Windows 7 environment. This should be another great tool to add to your collection and along with my previous post on the Hashcat tools you should be covered now for all of you password cracking needs, both local and remote. I may cover some word list techniques down the road to complete the series and create a triple threat. I also hope this tutorial helps to ignite some creativity in others to think outside the box for what tools are available to them and how they can be used. Unfortunately I have never heard about mobaxterm until your post above, seems pretty cool at first glance. I dont know enough about it to give you any real guidance, sorry. You might try using the full paths in your commands to see if it helps or seeing if there is any community support for mobaxterm where you might find a better answer as I am not sure your problem necessarily relates to Hydra itself and may be more environmental details, hope you figure it out though. What am I doing wrong? What should I do? It is hard to tell without knowing what arguments you pas when running it. For others, I'm sorry but I don't support doing the install this way and neither does HTC and I finally understand why. Please no more questions on this one, it wasn't designed for windows so dont be surprised if your stuck figuring things out as your might very well be the first. I trying uninstalling HYdra and installing all packages but still I get this error. I raised my query on stackoverflow but seems no one is interested in helping out there. Could you please help me with this? Pls help, logs are here under, Writing Makefile. Cygwin detected, if compilation fails just update your installation. Keep it up : My hydra-7. I cant tar, cd, nothing. However I can tar and cd hydra-7. My cygwin is fully operational. If I would like to completely erase and re-install all of hydra 7. Because I think I may have messed with the format of a make file while attempting to open it. What do you suggest I do? Checking for openssl libssl, libcrypto, ssl. NOT found, unicode logins and passwords will not be supported Checking for curses libcurses. NOT found, color output disabled Checking for pcre libpcre. NOT found, server response checks will be less reliable Checking for Postgres libpq. NOT found, module svn disabled Checking for firebird libfbclient. NOT found, module firebird disabled Checking for MYSQL client libmysqlclient. NOT found, module Apple Filing Protocol disabled - Apple sucks anyway Checking for NCP libncp. NOT found, optional anyway Checking for Android specialities... Cygwin detected, if compilation fails just update your installation. I have hydra installed... It doesn't have a passlist, so I downloaded it. If I were to download it onto my desktop, what would be the path I know stupid question I saw other pple putting home?.... I have this site with open ports on 21 and 23... I'm able to telnet in.... How would I enter the info into Havij... I don't even know if this makes sense. I wish people would just make it easier by putting damn examples into their programs. Also it says it can use http, ssl ect... Honestly I've been searching for weeks on how to do this. So much info out there is wrong or a just plain waste of time. I just want to be able to do this already! I'm sick of getting absolutely NO WHERE....
