Hydra Problem

[s1lang]

I've googled this problem and searched this forum.

Basically I've been trying the brilliant DeIce Pentesting CDs however when it comes to searching for the SSH password and username, I choose all the correct settings ie.

hydra 192.168.1.100 ssh2 -v -l username -p/root/Desktop/wordlist.txt -e ns -t 68 -f

username is the name of a username on the test - I do not want to spoil anything by putting the real one in.

It starts to work correctly 3000 tries a minute however as each minute passes this number is reduced by approximately a half.
5 minutes in I cannot connect to the internet, or anywhere on the network.

The only way to resolve this is by unplugging my Linksy WR54GT Router - running the latest DD-WRT firmware for 10 seconds.

Any advice would be greatly appreciated.
Cheers
Si

[streaker69]

I've googled this problem and searched this forum.

Basically I've been trying the brilliant DeIce Pentesting CDs however when it comes to searching for the SSH password and username, I choose all the correct settings ie.

hydra 192.168.1.100 ssh2 -v -l username -p/root/Desktop/wordlist.txt -e ns -t 68 -f

username is the name of a username on the test - I do not want to spoil anything by putting the real one in.

It starts to work correctly 3000 tries a minute however as each minute passes this number is reduced by approximately a half.
5 minutes in I cannot connect to the internet, or anywhere on the network.

The only way to resolve this is by unplugging my Linksy WR54GT Router - running the latest DD-WRT firmware for 10 seconds.

Any advice would be greatly appreciated.
Cheers
Si

Sounds like you've effectively DoS'ed the router. Not all devices are able to handle a brute force and sometimes they'll just kill themselves trying.

[purehate]

Try decreasing the number of tasks.

[thorin]

The following would seem to apply:

SPEED
-----
through the parallizing feature, this password cracker tool can be very fast, however it depends on the protocol. The fastest is generally POP3, then FTP, then Telnet, and the least IMAP.
Experiment with the task option (-t) to speed thinks up! The higher - the faster;-) (but too high, and it disables the service) To prevent disabling you can now use the -g option for "slow-starts".

[s1lang]

Thank you very much guys.

I'll try all the above mentioned

[PrairieFire]

Sounds like you've effectively DoS'ed the router. Not all devices are able to handle a brute force and sometimes they'll just kill themselves trying.

I got tired of it happening across my network and just took the machines out of the network to resolve the issue. Rarely have problems with:
Attacking machine --- Switch --- Victim machine.