Attackers constantly try to crack the passwords of other people in order to gain access to their accounts. The dictionary attack is one of the most common ways of attempting to crack a user's password. The attack works by attempting to use all of the words in a given dictionary file as the password for the user. If the user's password is in the dictionary used in the attack, the attacker is able to gain access. Hydra is a well-known tool for performing dictionary attacks.
In this lab, you will use Hydra to perform a dictionary attack on a locally hosted website.
Upon completion of this lab you will be able to:
This lab is intended for:
This lab has no prerequisites.
August 13th, 2024 - Updated the instructions and screenshots to reflect the latest UI
September 21st, 2021 - Updated HyperV VMs to not used save state to avoid an issue with Azure VMs in the same SKU not all having the same processor features
September 7th, 2021 - Upgraded underlying disk, and Kali Hyper-V VM configuration for improved performance
July 9th, 2020 - Enabled direct browser RDP connection for a streamlined experience