Click on the Start tab.
182 Practical Hacking Techniques and Countermeasures
Click Start. The results will be displayed.
Hydra will attempt each password from the password file for the username
given. If the correct password is in the file, Hydra will let you know. In this
example, the password for the username kermit is 123.
Now that you know what the username/password combination is, how
do you connect to it?
The first step will be to create a directory that Linux can associate with the
target??™s share by typing:
mkdir hacker
Scanning 183
Next is to mount the shared directory on the target. In this example, I know
the share name (Personal) from the LANguard application lab (Lab 30).
Sdfds
Type in the username for the share.
184 Practical Hacking Techniques and Countermeasures
Type in the password for the share.
Verify that the Linux machine can view the contents of the target??™s shared
folder.
Scanning 185
By looking at the shared directory on the target we can verify that the
Linux machine is actually looking at the contents of the share on the target.
When you look at xhydra, the bottom of the screen will display exactly what
you would need to type if you choose to use the command-line version or if
xhydra will not install on your version of Linux. In this case, you would type:
./hydra 172.16.1.40 smb ??“s 139 ??“v ??“V ??“l kermit ??“P
passwordlist1 ??“t 36
186 Practical Hacking Techniques and Countermeasures
The results from the command line are identical to the xhydra.
Pages:
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95