How To Install Hydra Gtk In Windows
UPDATED: Now includes video for getting XHYDRA working on Backtrack 5 at the bottom!Today I will show you how to setup the parallel threaded multi-protocol cracker known as THCHydra to work under a Windows 7 environment. In order to pull this off properly we will need to setup a Cygwin environment on our Windows machine, as there is NO supported.EXE file for Windows to make this magically work (probably a virus if you find one or it is very outdated). Cygwin is like a Linux emulator for Windows, in that it creates a Linux API environment within your windows environment to provide a lot of Linux API functionality (not 100% but close).
This is done through the cywin1.dll which allows you to run many programs not originally designed for Windows (i.e. Linux programs like THChydra). The catch is that you can't just run any Linux program you want; you have to build or compile everything you will want to use from source to get it to work in Cygwin environment properly (and even then it is not guaranteed it will work if it was never designed for Windows/Cygwin). OK with that out of the way, we can begin.
You need to start by downloading the Setup.EXE file from the main site listed above. Just double click on this when you are ready to get started. This will open the initial setup for Cygwin environment, which by default only includes the basic items needed. You can search through them and choose the ones you want/need or choose simply to include everything if you have the space and want to avoid having to troubleshoot missing items later.
For example, if for example you wanted to also compile C programs you would need to make sure you included the gcc-g package and some kind of text editor like Vi or Nano. When running setup.exe, clicking on categories and packages in the package installation screen will provide you with the ability to control what is installed or updated.
Another option is to install everything by clicking on the Default field next to the All category. If you have low bandwidth this could take some time as it downloads most of the packages from Internet (like SVN), so go have lunch and a beer, smoke or whatever your fancy and come back in a bit. This is what the process should look like for you upon opening the first time through completion with Desktop shortcut created.NOTE.: You can choose to only install the basics and add what you want in later, but to keep things easy and avoid having to trouble shoot to many issues I suggest just pick 'ALL'.
Today's HDDs are getting larger and cheaper so I doubt many will have any issues due to space if you select ALL (mine was 8.29Gb total disk space once completely installed with all packages). If you want to go more advanced and select only what you need feel free, be aware that to use the GUI for THChydra, known as XHYDRA, you will need to ensure you also chose to install the proper Cygwin/X requirements as well as the basics since it relies on x-Server and Cygwin/X consists of X server, X libraries, and nearly all of the standard X clients. This ends our brief overview and review for installing Cygwin, please spend time on the homesite and reading the user guide to figure out all the ins and outs of it. If for some reason you decide you want to remove one of the installed Cygwin packages you will simply need to re-run the Setup.EXE file.
I just bought two 12ga S X S and would like to check the numbers to see what they are.One has some light engraving on it and the other does not have any. Ithaca Guns Manufactured by ITHACA GUN COMPANY From 1880 - 1986* CLICK THE MODEL NAME TO REVEAL THE SERIAL NUMBERS & CLICK AGAIN TO CLOSE Please read the footnotes for production exceptions. For specific details on your gun, please read “The Ithaca Gun Company From the Beginning”. 
In most cases, the shotguns will have a serial number prefixes of either NS, NSG, NA, and AS. We can also help with any current production guns, manufactured in Turkey that we imported. We do not have any records from other importers of SKB manufactured shotguns: Ithaca Gun Company which imported from 1969 to.
Once it is open you simply navigate the list of packages that are already installed, and choose the category you want to edit (or click on the View button). Click on the options until it changes to Uninstall and then choose next to finalize the removal of the desired package (just click till you get there, it goes: DefaultInstallReInstallUnInstall). NOTE: The last one for make install is not required but allows it to install to the local path environment to avoid always having to navigate to the install folder to use/run. This is mainly for my Linux users as it doesn’t properly work in Cygwin environment due to the default paths being different and errors can be ignored.
You can edit this if needed to try and get it working, or simply navigate to the hydra folder before running it each time. If you want to add SSH you need to setup libssh on your machine as well (available at: and you will also need to add the '-DWITHSSH1=On' argument to the first make command (i.e./configuremake -DWITHSSH1=Onmake install). The default make will also setup the necessary requirements for Xhydra if you have all of the dependencies needed, however I should mention that it is not functional in Cygwin environment due to issues with the GTK+ front end and Cygwin X Server.
I previous had XHYDRA working but now seems to fail due to multiple errors but I am not a real programmer and don’t quite have the time to troubleshoot it. If you know anyone that is good with GTK programs then you might be able to fix the errors when it runs under Cygwin/X (just start X Server and then X-terminal and then run./xhydra at command line in X-terminal to start the GUI. It will appear to be fine until you hit start to run it), until then XHYDRA only works in a 100% real Linux environment. You can see above it found the password for the username admin. You can search the user guide or Google if you need further explanations on how to use it or how to target other protocols, but that should atleast give you enough to get started.
I must also note some important pieces of information that you should be aware of when cracking over the network with Hydra. First, if the password is not in your dictionary you will never find it (Period - the end!). Secondly, there are going to be some basic limitations that will impact your time, for example the maximum number of attempts possible per connection, protocol being attacked/used, bandwidth, size of word list and CPU power. These factors can all impact overall time it takes to exhasut all possibilities. The '-t' argument referenced aboved can be used to change the parallel thread count being used to help speed things up, but dont set it too high or will have the reverse affect. Here are some common max limits for attempts per connection, from the tools creators: telnet=4, ftp=6, pop3=1, amd imap=3, and here is the list of all supported protocols (as of the writing of this tutorial) so have fun cracking as the possibilities are limited only by your imagination. A strong word list is also very helpful when it comes to cracking, so try to keep manageable word lists or use tools to help create narrowed down word lists for better, or more targeted, results.
THCHydra comes with the PW-INSPECTOR tool which can be used to trim a wordlist down based on password policy or known details. I like to use the word list tools provided by the Hashcat team as well as a tool called Shmoosh2x64.exe. The Hashcat team has a set of tools to help with expanding, sorting, and splitting wordlists and the shmoosh tool helps to combine multiple wordlists while also sorting out duplicates so you get a new wordlist that is full of unique words. I suggest playing with them all as they can all come in handy in various occasions, and all have been documented on their respective sites if you need help with the proper command syntax to use (Google is your friend). If you need to find a good wordlist just search around Google as there are many out there, and I also highly suggest tools like CeWL, CUPP (Common User Passwords Profiler), or WyD (Who's Your Daddy Password Profiler) which can be used to spider sites to help create wordlists based on unique words found on the site that you can then turn around and use to performing bruteforce attacks with (as mentioned above start focused if you can and then broaden your search/attempts to increase your effectiveness). Hopefully this tutorial has showed you how you can get the latest version of THCHydra working under a Windows 7 environment.
This should be another great tool to add to your collection and along with my previous post on the Hashcat tools you should be covered now for all of you password cracking needs, both local and remote. I may cover some word list techniques down the road to complete the series and create a triple threat. I also hope this tutorial helps to ignite some creativity in others to think outside the box for what tools are available to them and how they can be used. After long search I found this page with instructions of how to install and compile hydra.
When I key in 'make' the command is run showing some library and then it fails. I trying uninstalling HYdra and installing all packages but still I get this error.I raised my query on stackoverflow but seems no one is interested in helping out there. Could you please help me with this?
Below is the link to my query with detailed error.http://stackoverflow.com/questions/16202373/configure-hydra-7-4-2-on-windows-7-using-cygwin. Hey, first off, amazing tutorial! Keep it up:)My hydra-7.6-src.tar.gz file is having problems. I cant tar, cd, nothing. However I can tar and cd hydra-7.6.tar.gz. Doing that works fine until I have to use the 'make' command.
My cygwin is fully operational. If I would like to completely erase and re-install all of hydra 7.6, what file in my cygwin library do I delete?
Because I think I may have messed with the format of a make file while attempting to open it. What do you suggest I do?Thanks in advance,Marcus. $./configureStarting hydra auto configuration.Checking for openssl (libssl, libcrypto, ssl.h, sha.h). NOT found, SSL support disabledGet it from for idn (libidn.so). NOT found, unicode logins and passwords will not be supportedChecking for curses (libcurses.so / term.h).
Gtk For Windows
NOT found, color output disabledChecking for pcre (libpcre.so, pcre.h). NOT found, server response checks will be less reliableChecking for Postgres (libpq.so, libpq-fe.h). DISABLED - postgres is buggy in Cygwin at the momentChecking for SVN (libsvnclient-1 libapr-1.so libaprutil-1.so). NOT found, module svn disabledChecking for firebird (libfbclient.so). NOT found, module firebird disabledChecking for MYSQL client (libmysqlclient.so, math.h).
NOT found, module Mysql will not support version 4.xChecking for AFP (libafpclient.so). NOT found, module Apple Filing Protocol disabled - Apple sucks anywayChecking for NCP (libncp.so / nwcalls.h). NOT found, module NCP disabledChecking for SAP/R3 (librfc/saprfc.h).
NOT found, module sapr3 disabledGet it from for libssh (libssh/libssh.h). NOT found, module ssh disabledGet it from for Oracle (libocci.so libclntsh.so / oci.h and libaio.so). NOT found, module Oracle disabledGet basic and sdk package from for GUI req's (pkg-config, gtk+-2.0). NOT found, optional anywayChecking for Android specialities. Rindex not foundHydra will be installed into./bin of: /usr/local(change this by running./configure -prefix=path)Writing Makefile.in.Cygwin detected, if compilation fails just update your installation.which: no windres in (/usr/local/bin:/usr/bin:/cygdrive/c/Windows Microsoft SQL strver/80/toolsbinn:/usr/bin)Windres NOT found, you will not have pretty icon files in the hydra cygwin executablesnow type 'make'$ make-bash: make: command not foundWHat is the problem? I'm so confused.I have hydra installed.It doesn't have a passlist, so I downloaded it.
If I were to download it onto my desktop, what would be the path (I know stupid question) I saw other pple putting home?next issue.hydra gives us an example of how you would use against an FTP server, but won't show other examples. I have this site with open ports on 21 and 23.I'm able to telnet in.now what do I do? How would I enter the info into Havij.that includes where my admin list, passwords list in and that connects over telnet on ports 21 or 23.I don't even know if this makes sense. I'm so frustrated.
I wish people would just make it easier by putting damn examples into their programs. Also it says it can use http, ssl ect.how would you write those up? Honestly I've been searching for weeks on how to do this.
So much info out there is wrong or a just plain waste of time. I just want to be able to do this already! I'm sick of getting absolutely NO WHERE.please help.