Today, I will teach you how to dictionary attack Gmail accounts with THC Hydra Master. THC Hydra is a password cracking tool created by Marc "van Hauser" Heuse. Let's start!!
First, you need to download Hydra. Download THC Hydra Master at darknet.org.uk/2007/02/thc-hydra-the-fast-and-flexible-network-login-hacking-tool/
(Scroll down and look for the Cygwin version for THC Hydra. (Don't worry, you don't need Cygwin to download it)). Make a folder on your Desktop called "THCHydra" without the " ".
Wait for the download to finish and extract the ZIP file. Extract the ZIP file to the folder "THCHydra" that you created earlier.
To make sure THC Hydra Master is working, type in this below in the Command Prompt terminal.
It should print the THC Hydra help.
As you can see, if you type in :
It will print a more detailed help screen.
Now you can go ahead and learn how to use THC Hydra Master.
We will need a wordlist to brute force dictionary attack the Gmail FTP server.
You can download a default Kali Linux wordlist ; rockyou.txt, here :
Once you are done downloading the rockyou.txt wordlist, copy and paste rockyou.txt into the THCHydra folder. It should look like this now:
Proceed to Step 4.
Type the following into a new Command Prompt terminal:
Now, type in :
This will check if THC Hydra Master is working. If THC Hydra is working it should print out a basic hydra help screen.
Next, type in :
hydra -l email@example.com -P rockyou.txt -e nsr -s 465 -S -V gmail.com
You have to replace "firstname.lastname@example.org" with your target's username.
Everything should look like this now:
The "Tester9washacked@gmail.com" is my example Gmail account.
Click enter. THC Hydra Master will start running. It should look like this:
And this is THC Hydra brute forcing the password:
Thank you for reading this article. This is my first article so please give me feedback.