Comparison of Features and Services Coverage

Contents

Introduction

Hydra is born more than 10 years ago, this page is used as a recap of the functionalities it provides, but also the differences in feature sets, services coverage and code between the most popular network authentication cracker tools available. Each feature is compared against Hydra as of the current version. This table is updated as new features are added to the project. If you find any inaccuracies on this page please do not hesitate to contact us.

Below, Yes means it is supported, No means it is not supported, Unknown means the support is partial

Code Comparison

This table just lists latest available versions and platforms compatibility.

Code Hydra Medusa Ncrack
Version 7.6 2.1 0.4 alpha
Last Update December 2014 April 2012 April 2011
Supported Platforms Linux, *BSD, Solaris, Mac OS X, any Unix, Windows (Cygwin) Linux, *BSD, Solaris and Mac OS X Linux, *BSD, Mac OS X, Windows

Features Table

This table lists the feature sets of each tools.

Feature Hydra Medusa Ncrack
License AGPLv3 GPLv2 GPLv2 + Nmap terms
IPv6 Support Yes No Yes
Graphic User Interface Yes Yes No
Internationalized support (RFC 4013) Yes No No
HTTP proxy support Yes Yes No
SOCKS proxy support Yes No No
# of supported protocols 47 22 7

Services Coverage

This table lists the services coverage of each tools. For each services, many authentication methods are possible. If you require other ways or find issues in Hydra, please contact us as the service depends on RFC implementations, some adjustements may be needed.

Service Details Hydra Medusa Ncrack
AFP Yes Yes No
Asterisk Yes No No
Cisco Password Yes No No
Cisco Enable Yes No No
CVS Yes Yes No
Firebird Yes No No
FTP Yes Yes Yes
SSL supportAUTH TLS & FTP over SSL AUTH TLS & FTP over SSL No
HTTP Method(s)GET, HEAD GET GET
Basic AuthYes Yes Yes
DIGEST-MD5 AuthYes Yes No
NTLM AuthYes Yes No
SSL supportHTTPS HTTPS HTTPS
HTTP Form Method(s)GET, POST GET, POST No
SSL supportHTTPS HTTPS No
HTTP Proxy Basic AuthYes No No
DIGEST-MD5 AuthYes No No
NTLM AuthYes No No
SSL supportHTTPS No No
HTTP PROXY URL Enumeration Yes No No
ICQ v5 Yes 1 No No
IMAP LOGIN supportYes Yes No
AUTH LOGIN supportYes No No
AUTH PLAIN supportYes Yes No
AUTH CRAM-MD5 supportYes No No
AUTH CRAM-SHA1 supportYes No No
AUTH CRAM-SHA256 supportYes No No
AUTH DIGEST-MD5 supportYes No No
AUTH NTLM supportYes Yes No
AUTH SCRAM-SHA1 supportYes No No
SSL supportIMAPS & STARTTLS IMAPS & STARTTLS No
IRC General server password Yes No No
OPER mode password Yes No No
LDAP v2, Simple supportYes No No
v3, Simple supportYes No No
v3, AUTH CRAM-MD5 supportYes No No
v3, AUTH DIGEST-MD5 supportYes No No
MS-SQL Yes Yes No
MySQL v3.x Yes Yes No
v4.x Yes Yes No
v5.x Yes Yes No
NCP Yes Yes No
NNTP USER support Yes Yes No
AUTH LOGIN support Yes No No
AUTH PLAIN support Yes No No
AUTH CRAM-MD5 support Yes No No
AUTH DIGEST-MD5 support Yes No No
AUTH NTLM support Yes No No
SSL support STARTTLS & NNTP over SSL No No
Oracle DatabaseYes Yes 2 No
TNS ListenerYes No No
SID EnumerationYes No No
PC-NFS Yes No No
pcAnywhere Native Authentication Yes 1 Yes No
OS Based Authentication (MS) No Yes No
POP3 USER supportYes Yes Yes
APOP supportYes No No
AUTH LOGIN supportYes Yes No
AUTH PLAIN supportYes Yes No
AUTH CRAM-MD5 supportYes No No
AUTH CRAM-SHA1 supportYes No No
AUTH CRAM-SHA256 supportYes No No
AUTH DIGEST-MD5 supportYes No No
AUTH NTLM supportYes Yes No
SSL SupportPOP3S & STARTTLS POP3S & STARTTLS POP3S
PostgreSQL Yes Yes No
RDP Windows Workstation Yes Yes 2 Yes
Windows Server Yes Yes 2 Partial
Domain Auth Yes Yes 2 No
REDIS Yes No No
REXEC Yes Yes No
RLOGIN Yes Yes No
RSH Yes Yes No
SAP R/3 Yes 1 No No
Siemens S7-300 Yes No No
SIP Yes 1 No No
SSL supportSIP over SSL No No
SMB NetBIOS ModeYes Yes No
W2K Native ModeYes Yes Yes
Hash modeYes Yes No
Clear Text AuthYes Yes No
LMv1 AuthYes Yes Yes
LMv2 AuthYes Yes Yes
NTLMv1 AuthYes Yes Yes
NTLMv2 AuthYes Yes Yes
SMTP AUTH LOGIN supportYes Yes No
AUTH PLAIN supportYes Yes No
AUTH CRAM-MD5 supportYes No No
AUTH DIGEST-MD5 supportYes No No
AUTH NTLM supportYes Yes No
SSL supportSMTPS & STARTTLS SMTPS & STARTTLS No
SMTP User Enum VRFY cmdYes Yes No
EXPN cmdYes No No
RCPT TO cmdYes No No
SNMP v1 Yes Yes No
v2c Yes Yes No
v3 Partial (MD5/SHA1 auth only)(MD5/SHA1 auth only) No No
SOCKS v5, Password Auth Yes No No
SSH v1Yes No No
v2Yes Yes Yes
SSH Keys v1, v2 Yes No No
Subversion (SVN) Yes Yes No
TeamSpeak TS2 Yes 1 No No
Telnet Yes Yes Yes
XMPP AUTH LOGIN supportYes No No
AUTH PLAIN supportYes No No
AUTH CRAM-MD5 supportYes No No
AUTH DIGEST-MD5 supportYes No No
AUTH SCRAM-SHA1 supportYes No No
VMware Auth Daemon v1.00 / v1.10 Yes Yes No
SSL support Yes Yes No
VNC RFB 3.x password support Yes Yes No
RFB 3.x user+password support No Partial(UltraVNC only) No
RFB 4.x password support Yes Yes No
RFB 4.x user+password support No Partial(UltraVNC only) No

Speed Comparison

This table gives some speed data (in second) for 2 popular services supported by each cracking tool (as of September 2011). The value displayed is the min value of 3 consecutive runs. Each tool was configured to run 1, 4 and 16 task(s)/job(s) at a time. A login and password lists corresponding to 20 attempts was used. The smaller the value the better.

Speed (in s) Hydra Medusa Ncrack
1 Task / FTP module 11.93 12.97 18.01
4 Tasks / FTP module 4.20 5.24 9.01
16 Tasks / FTP module 2.44 2.71 12.01
1 Task / SSH v2 module 32.56 33.84 45.02
4 Tasks / SSH v2 module 10.95 Broken Missed
16 Tasks / SSH v2 module 5.14 Broken Missed

Notes

  1. These Hydra modules have not been checked with latest version of softwares/protocols available.
  2. Medusa support is relying on a script or a wrapper.