Nmap Development mailing list archives

Ncrack and the flexibility of its core engine


From: ithilgore <ithilgore.ryu.l () gmail com>
Date: Sat, 21 May 2011 02:45:59 +0300

Hello nmap-dev,
I just happened to come across this blog-post by HackerTarget security firm
and wanted to share:

http://hackertarget.com/2011/05/brute-forcing-passwords-with-ncrack-hydra-and-medusa/

The results: Ncrack wins. Notice in the last section that Medusa and Hydra
essentially DoS the FTP service and fail, while Ncrack with its dynamic
engine (even with the fastest template -T5) manages to finish successfully
and finds the account reliably. This is the power of Ncrack's dynamic engine.

Finally, I have some new ideas (heuristic algorithms involved) in the
making, with the goal of extending and improving the core engine even more.

Regards,
ithilgore

-- 
http://sock-raw.org
https://twitter.com/ithilgore
_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://seclists.org/nmap-dev/


Current thread: