Forum Thread: How to Brute Force Dictionary Attack Gmail Accounts with THC Hydra Master on Windows 7 and Above

Today, I will teach you how to dictionary attack Gmail accounts with THC Hydra Master. THC Hydra is a password cracking tool created by Marc "van Hauser" Heuse. Let's start!!

Step 1: Downloading THC Hydra Master

First, you need to download Hydra. Download THC Hydra Master at darknet.org.uk/2007/02/thc-hydra-the-fast-and-flexible-network-login-hacking-tool/

(Scroll down and look for the Cygwin version for THC Hydra. (Don't worry, you don't need Cygwin to download it)). Make a folder on your Desktop called "THCHydra" without the " ".

Wait for the download to finish and extract the ZIP file. Extract the ZIP file to the folder "THCHydra" that you created earlier.

Step 2: Activate THC Hydra

To make sure THC Hydra Master is working, type in this below in the Command Prompt terminal.

Click enter.
It should print the THC Hydra help.

As you can see, if you type in :
hydra -h
It will print a more detailed help screen.

Now you can go ahead and learn how to use THC Hydra Master.

Step 3: Downloading the Wordlist File

We will need a wordlist to brute force dictionary attack the Gmail FTP server.
You can download a default Kali Linux wordlist ; rockyou.txt, here :
github.com/brannondorsey/naive-hashcat/releases/download/data/rockyou.txt

Once you are done downloading the rockyou.txt wordlist, copy and paste rockyou.txt into the THCHydra folder. It should look like this now:

Proceed to Step 4.

Step 4: Starting the Brute Force Attack

Type the following into a new Command Prompt terminal:

Now, type in :

hydra

This will check if THC Hydra Master is working. If THC Hydra is working it should print out a basic hydra help screen.

Step 5: Attacking the Gmail Account

Next, type in :

hydra -l user@gmail.com -P rockyou.txt -e nsr -s 465 -S -V gmail.com

You have to replace "user@gmail.com" with your target's username.

Everything should look like this now:

The "Tester9washacked@gmail.com" is my example Gmail account.

Click enter. THC Hydra Master will start running. It should look like this:

And this is THC Hydra brute forcing the password:

Thank You!!!

Thank you for reading this article. This is my first article so please give me feedback.

Be the First to Respond

Share Your Thoughts

  • Hot
  • Active