Thc Hydra Versions Save

Release 9.5

• http-form:
  • The help for http-form was wrong. the condition variable must always be the last parameter, not the third
  • Proxy support was not working correctly
• smb2: fix for updated libsmb2 which resulted in correct guessing attempts not being detected
• smtp: break early if the server does not allow authentication
• rdp: detect more return codes that say a user is disabled etc.

Release 9.4

• Switched from pcre/pcre3 to pcre2 as pcre/pcre3 will be dropped from Debian
• Small fix for weird RTSP servers
• Added "2=" optional parameter to http-post-form module to tell hydra that a "302" HTTP return code means success
• replaced wait3 with waitpid for better compatability

Release 9.3

• support Xcode compilation
• new module: cobaltstrike by ultimaiiii, thank you!
• fix for ssh to support -M or ip/range
• fix for rdp to detect empty passwords
• fix for http-form to no send empty headers
• fix for http on non-default ports when using with a proxy
• for vnc/cisco/... protocols that only check for a password, skip host after the password is found
• fix to support IPv6 addresses in -M
• fix to test all entries in -C files, not exiting after the first found
• make disappearing targets faster to terminate on
• added "make uninstall"

Release 9.2

• fix for http-post-form optional parameters
• enable gcc 10 support for xhydra too :)
• msys support
• removed rain mode (-r) because of inefficiency
• IPv6 support for Host: header for http based modules

Release 9.1-dev

• enable gcc 10 support for xhydra too :)
• rdb: support for libfreerdp3 (thanks to animetauren)
• new module: smb2 which also supports smb3 (uses libsmbclient-dev) (thanks to Karim Kanso for the module!)
• oracle: added success condition (thanks to kazkansouh), compile on Cygwin (thanks to maaaaz)
• rtsp: fixed crash in MD5 auth
• svn: updated to support past and new API
• http: now supports F=/S= string matching conditions (thanks to poucz@github)
• http-proxy: buffer fix, 404 success condition (thanks to kazkansouh)
• mysql: changed not to use mysql db as a default. if the user has not access to this db auth fails ...
• sasl: buffer fix (thanks to TenGbps)
• fixed help for https modules (thanks to Jab2870)
• added -K command line switch to disable redo attempts (good for mass scanning)
• forgot to have the -m option in the hydra help output
• gcc-10 support and various cleanups by Jeroen Roovers, thanks!
• added .clang-format and formatted all code

hydra v9.0

hydra v8.9.1

hydra v8.8 release

hydra v8.6