How to Crack SSH Password with Brute Force Attack

Run Termux :

Fast Install Linux Your Termux Your Android Devices read this Post & Articles how to Install Linux Termux App. Using Termux Linux & Using Linux Installation Commands Step by Step

Also Read : How to Install Kali NetHunter Android Termux No Root

AIso Read : How to Install & Run Ubuntu on Android Termux No Root

Run Linux:

1. Metasploit

Collaboration between open source community and Rapid 7. Helps security teams do more than verify risk, manage security surveillance, and improve security awareness. Brute force Attack

This module will check SSH entry on the machine list and report successful login. Once we have downloaded the website plugin and linked to the site this module will record the successful login and host that you can access.

But first, open the kali terminal and type “msfconsole” .Then follow these instructions.

msfconsole

 use auxiliary/scanner/ssh/ssh_login 
set rhosts 147.139.6.70
set user_file user.txt
set pass_file password.txt
run

From the screenshot provided, we can see that we have successfully captured the SSH password and username. In addition, Metasploit offers additional benefits by providing a command system shell in our unauthorized access to the victim system.

Hydra is a compatible login cracker that supports multiple attack protocols. Fast, flexible, and new modules are easy to add to attack. This tool makes it possible for the researcher and security coordinators to show how easy it can be to obtain unauthorized access to the system remotely. We use it as follows to break login. brute force attack

hydra -L user.txt -P password.txt 147.139.6.70 ssh

Where the [-L] parameter is used to provide a username list and the [-P] parameter is used to provide a password list. Once the instructions are issued it will start using the dictionary attack and you will get the correct username and password. After a few minutes, hydra breaks the identity, as we can see that we have successfully held the username “shubh” and password as “123“.

4. Medusa

Medusa is a fast, flexible, and modular tool that allows you to sign in with brutal force. Its goal is to support as many resources as possible with as much authentication as possible. Key features of this tool are web-based testing, flexible user input, Modular design, and many supported protocols. We’ll use this command to break this log.

Run the following command.

medusa -h 192.168.0.8 -U user.txt -P password.txt -M ssh

When [- h] uses to provide the victim’s Internet address, [- U] defines a user list method, [- P] defines a password list method, [- M] to select an attack method. Now, the dictionary attack process will begin. Thus, we will get our victim’s username and password.

5. Patator

this tool is a multi-purpose brute-forcer, with modular design and flexible use. Patator was written due to frustration using Hydra modules, Medusa, Ncrack, Metasploit, and Nmap NSE scripts for password guess attacks. I have chosen a different way of not creating another tool that is cruelly coercive and avoid repeating the same mistakes. Patator is a multi-threaded tool written in Python, which strives for greater reliability and flexibility than its predecessors.

It is very useful to do brute force attacks on several ports like FTP, HTTP, SMB, etc.

patator ssh_login host=147.139.6.70 user=FILE0 0=user.txt password=FILE1 1=password.txt

From the screenshot provided below, we can see that the dictionary attack process is starting, and with that, you will get our victim’s username and password.

6. Ncrack

crack -U user.txt -P password.txt 147.139.6.70:22