October 2018
Intermediate to advanced
404 pages
8h 50m
English
Content preview from Kali Linux 2018: Windows Penetration Testing - Second Edition
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
Start your free trial
xHydra
xHydra is a GUI frontend for the password cracker called Hydra. Hydra can be used for both offline and online password cracking. Hydra can be used for many types of online attacks, including attacks against MySQL, SMB, MSSQL, and many types of HTTP/HTTPS logins, just to name a few.
We are going to use xHydra to attack a running MySQL service on a machine running a WordPress site. Since the machine is running a WordPress site and a MySQL service, it is an easy guess that the database login's username is wordpress, the default admin account. By default, MySQL doesn't block brute-force attacks, so we know we stand a good chance with this attack.
To start xHydra in Kali Version 1.x, you would go to 05 - Password Attacks | Online Attacks ...