Tuxkiddos

If you have read my previous post " Bruteforce a router to hack admin password using Hydra  " then you might have learned how to brute-force attack on http authentication. Now if you just tweak the command a little then you can use the same for brute-forcing ftp too. An example is as follows: hydra -l username -P password.lst ftp://example.com Your password.lst must have the matching password. So you need to create a file that has most possible combinations. If you are unsure about the username too then you can use -L switch as follows: hydra -L user.txt -P password.list ftp://example.com You can create a user.txt file by writing the possible usernames in a single line as follows: admin administrator sysadmin webmaster root test

Hydra can be used for bruteforce attack on a router to retrieve admin's password. For this, a password list needs to be created for my case it is password.lst. The username I am using in the bruteforce attack is admin and the router's password is 192.168.1.19 which might differ for your case. The command is as follows that I used: hydra -l admin -P password.lst 192.168.1.19 http-get -m / The above image shows a screenshot of my attack used on my TP-LINK router. The found password is underlined by red underline.