Step by step guide to password hacking

Password Hacking

Although password hacking or cracking is not an ultimate goal of an

expert hacker, It is very import in the aspect of security.A newbie who just search google for password hacking & drop into this blog, pls note that you are not going to learn this in a second. 

Before you start reading further, be sure you really know what is password, how & where they can be used.Before we jump into the topic we need to streamline our task.
password attack can be divided into two type:
a) Online Password Attack
b) Offline Password Attack

Note: From now on keep the word "Ethical" in mind & use this knowledge to improve your security, not try these
one corporate network.If you got caught, I will be not there to save you. :)

Coming back to the topic, password attack can be done using  bellow methods:
1) Bruteforce Method :- Trying randomly generated password & 

                                        test them against the server.
2) Dictinory Method:- In this method, all probable password are 

                                    listed in file, each of them tested against

                                   the server.Its faster & having a good dictinory

                                   file can make the task really easy.
3) Rainbow Attack:- This method quite a newer, basically use to crack hash password. To know more about
                                Password hashes go back to Google or request an article here.
Now straight back into the business.
Online password attack:- Do the test in a test network or virtual pc, with simple passwords at the beginning.

I will discuss about two interesting tool for online password attack, Brutus & Hydra. The second one is my fav.

You can download them using below link:

Download Brutus

Hydra [Windows] Hydra [Linux source code]

Brutus: Brutus is one of the fastest, most flexible remote password crackers you can get your hands on - it's also free. It is available for Windows 9x, NT and 2000, there is no UN*X version available. Brutus was first made publicly available in October 1998.

So its very simple to launch the attack Just type your target IP & select the service type & attack method.

Click on start to launch the attack.If lucky the password will be displayed in few moment.

Try on your local ftp server with a shorter password which make you believe this can work & keep trying.

Hydra: Originally developped by thc, Its better because it bcan run on unix platform & support a lot of protocol then its competitor. Its faster, If you familiar with the command line version with a bit effort you surely fall in love with it. For those, who hate commands, luckily GUI version is also available.But a friendly reminder if you really want to be a hacker start loving command line. Believe me, there is no other alternative. For help regarding it visit http://www.thc.org/thc-hydra/ for detail documentation. If you found it difficult to understand, ask for a post here.

Will continue the topic in my next post. till then happy cracking.

Be a member for more interesting topic.Thank you For reading.