THC Hydra 5.7

/* * hydra v5.6 (c) 2001-2010 by van Hauser / THC <vh@thc.org> * http://www.thc.org * * Parallized network login hacker. Do only use for legal purposes. */ #ifdef NESSUS_PLUGIN #include <includes.h> #endif #include "hydra.h" #include "performance.h" void hydra_kill_arm(int arm_no, int killit, int fail); extern void service_telnet(unsigned long int ip, int sp, unsigned char options, char *miscptr, FILE * fp, int port); extern void service_ftp(unsigned long int ip, int sp, unsigned char options, char *miscptr, FILE * fp, int port); extern void service_pop3(unsigned long int ip, int sp, unsigned char options, char *miscptr, FILE * fp, int port); extern void service_vmauthd(unsigned long int ip, int sp, unsigned char options, char *miscptr, FILE * fp, int port); extern void service_imap(unsigned long int ip, int sp, unsigned char options, char *miscptr, FILE * fp, int port); extern void service_ldap2(unsigned long int ip, int sp, unsigned char options, char *miscptr, FILE * fp, int port); extern void service_ldap3(unsigned long int ip, int sp, unsigned char options, char *miscptr, FILE * fp, int port); extern void service_cisco(unsigned long int ip, int sp, unsigned char options, char *miscptr, FILE * fp, int port); extern void service_cisco_enable(unsigned long int ip, int sp, unsigned char options, char *miscptr, FILE * fp, int port); extern void service_vnc(unsigned long int ip, int sp, unsigned char options, char *miscptr, FILE * fp, int port); extern void service_socks5(unsigned long int ip, int sp, unsigned char options, char *miscptr, FILE * fp, int port); extern void service_rexec(unsigned long int ip, int sp, unsigned char options, char *miscptr, FILE * fp, int port); extern void service_rlogin(unsigned long int ip, int sp, unsigned char options, char *miscptr, FILE * fp, int port); extern void service_rsh(unsigned long int ip, int sp, unsigned char options, char *miscptr, FILE * fp, int port); extern void service_nntp(unsigned long int ip, int sp, unsigned char options, char *miscptr, FILE * fp, int port); extern void service_http_head(unsigned long int ip, int sp, unsigned char options, char *miscptr, FILE * fp, int port); extern void service_http_get(unsigned long int ip, int sp, unsigned char options, char *miscptr, FILE * fp, int port); extern void service_http_get_form(unsigned long int ip, int sp, unsigned char options, char *miscptr, FILE * fp, int port); extern void service_http_post_form(unsigned long int ip, int sp, unsigned char options, char *miscptr, FILE * fp, int port); extern void service_http_proxy(unsigned long int ip, int sp, unsigned char options, char *miscptr, FILE * fp, int port); extern void service_icq(unsigned long int ip, int sp, unsigned char options, char *miscptr, FILE * fp, int port); extern void service_pcnfs(unsigned long int ip, int sp, unsigned char options, char *miscptr, FILE * fp, int port); extern void service_smb(unsigned long int ip, int sp, unsigned char options, char *miscptr, FILE * fp, int port); extern void service_mysql(unsigned long int ip, int sp, unsigned char options, char *miscptr, FILE * fp, int port); extern void service_mssql(unsigned long int ip, int sp, unsigned char options, char *miscptr, FILE * fp, int port); extern void service_oracle_listener(unsigned long int ip, int sp, unsigned char options, char *miscptr, FILE * fp, int port); extern void service_cvs(unsigned long int ip, int sp, unsigned char options, char *miscptr, FILE * fp, int port); extern void service_snmp(unsigned long int ip, int sp, unsigned char options, char *miscptr, FILE * fp, int port); extern void service_smtpauth(unsigned long int ip, int sp, unsigned char options, char *miscptr, FILE * fp, int port); extern void service_teamspeak(unsigned long int ip, int sp, unsigned char options, char *miscptr, FILE * fp, int port); extern void service_pcanywhere(unsigned long int ip, int sp, unsigned char options, char *miscptr, FILE * fp, int port); extern void service_sip(unsigned long int ip, int sp, unsigned char options, char *miscptr, FILE * fp, int port); extern void service_pop3_ntlm(unsigned long int ip, int sp, unsigned char options, char *miscptr, FILE * fp, int port); extern void service_imap_ntlm(unsigned long int ip, int sp, unsigned char options, char *miscptr, FILE * fp, int port); extern void service_smtpauth_ntlm(unsigned long int ip, int sp, unsigned char options, char *miscptr, FILE * fp, int port); extern void service_http_proxy_auth_ntlm(unsigned long int ip, int sp, unsigned char options, char *miscptr, FILE * fp, int port); #ifdef LIBPOSTGRES extern void service_postgres(unsigned long int ip, int sp, unsigned char options, char *miscptr, FILE * fp, int port); #endif #ifdef LIBOPENSSL extern void service_smbnt(unsigned long int ip, int sp, unsigned char options, char *miscptr, FILE * fp, int port); #endif #ifdef LIBSAPR3 extern void service_sapr3(unsigned long int ip, int sp, unsigned char options, char *miscptr, FILE * fp, int port); #endif #ifdef LIBFIREBIRD extern void service_firebird(unsigned long int ip, int sp, unsigned char options, char *miscptr, FILE * fp, int port); #endif #ifdef LIBNCP extern void service_ncp(unsigned long int ip, int sp, unsigned char options, char *miscptr, FILE * fp, int port); #endif #ifdef LIBSSH extern void service_ssh2(unsigned long int ip, int sp, unsigned char options, char *miscptr, FILE * fp, int port); #endif #ifdef LIBSVN extern void service_svn(unsigned long int ip, int sp, unsigned char options, char *miscptr, FILE * fp, int port); #endif /* ADD NEW SERVICES HERE */ #define SERVICES "telnet ftp pop3[-ntlm] imap[-ntlm] smb smbnt http[s]-{head|get} http-{get|post}-form http-proxy cisco cisco-enable vnc ldap2 ldap3 mssql mysql oracle-listener postgres nntp socks5 rexec rlogin pcnfs snmp rsh cvs svn icq sapr3 ssh2 smtp-auth[-ntlm] pcanywhere teamspeak sip vmauthd firebird ncp" /* ADD NEW SERVICES HERE */ #define MAXBUF 520 #define MAXLINESIZE ( ( MAXBUF / 2 ) - 4 ) #define MAXTASKS 255 #define MAXSERVERS 16 #define MAXFAIL 3 #define MAXENDWAIT 20 #define RESTOREFILE "./hydra.restore" #define PROGRAM "Hydra" #define VERSION "v5.7" #define AUTHOR "van Hauser / THC" #define EMAIL "<vh@thc.org>" #define RESSOURCE "http://www.thc.org" #define WAITTIME 30 #define TASKS 16 extern void hydra_tobase64(unsigned char *buf, int buflen, int bufsize); int fck=0; char *sck=NULL; /* some structure definitions */ typedef struct { pid_t pid; int sp[2]; int target_no; char *current_login_ptr; char *current_pass_ptr; int active; int redo; time_t last_seen; } hydra_arm; typedef struct { char *target; unsigned long int ip; char *login_ptr; char *pass_ptr; unsigned long int login_no; unsigned long int pass_no; unsigned long int sent; int pass_state; int use_count; int max_use_count; int done; /* 0 if active, 1 if finished scanning, 2 if error (for RESTOREFILE) */ int fail_count; } hydra_target; typedef struct { int active; /* active tasks of hydra_options.tasks */ int targets; int finished; unsigned long int todo_all; unsigned long int todo; unsigned long int sent; unsigned long int found; size_t countlogin; size_t sizelogin; size_t countpass; size_t sizepass; FILE *ofp; } hydra_brain; typedef struct { int mode; /* valid modes: 0 = -l -p 1 = -l -P 2 = -L -p 3 = -L -P +16 if try_null_password +32 if try_password_same_as_login 64 = -C */ int ssl; int restore; int debug; /* is external - for restore */ int verbose; /* is external - for restore */ int showAttempt; int tasks; int try_null_password; int try_password_same_as_login; int exit_found; int max_use; char *login; char *loginfile; char *pass; char *passfile; char *outfile_ptr; char *infile_ptr; char *colonfile; int waittime; /* is external - for resto