OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Hydra Help

maash.rajanigmail.com
Date: Sat Apr 03 2010 - 08:47:30 CDT


I just started using Hydra. Got a successful authentication over a pop3 service.
Trying the same username and password over the smtp service using hydra's "smtp-auth" module.
My understanding was hydra can try dictionary attack over an smtp service which uses NTLM hashing, my enumerationg results over the listening smtp confirms that it uses NTLM authen type.

Yet using Hydra gives me the following results:

command: hydra -l username -p password(text) -o output.txt -v -V xxx.xxx.xxx.xxx

Output Error: SMTP AUTH LOGIN error: 504 5.7.4 unrecognized authentication type

------------------------------------------------------------------------
This list is sponsored by: Information Assurance Certification Review Board

Prove to peers and potential employers without a doubt that you can actually do a proper penetration test. IACRB CPT and CEPT certs require a full practical examination in order to become certified.

http://www.iacertification.org
------------------------------------------------------------------------