Packet Storm - Information Security News, Files, Tools, Exploits, Advisories and Whitepapers http://packetstormsecurity.org/ en-us Mon, 28 May 2012 12:04:07 GMT 144400 http://packetstormsecurity.org/ http://www.google-analytics.com/__utm.gif?utmwv=1.3&utmn=1345142367&utmcs=ISO-8859-1&utmsr=31337x31337&utmsc=32-bit&utmul=en-us&utmje=0&utmfl=-&utmcn=1&utmdt=THC%3A%20The%20Hackers%20Choice%u2248%20Packet%20Storm&utmhn=packetstormsecurity.org&utmr=-&utmp=%2Fgroups%2Fthc%2F&utmac=UA-18885198-1&utmcc=__utma%3D32867617.1345142367.1338206647.1338206647.1338206647.1%3B%2B__utmz%3D32867617.1338206647.1.1.utmccn%3D(direct)%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none) http://packetstormsecurity.org/files/109818/hydra-7.2-src.tar.gz http://packetstormsecurity.org/files/109818/hydra-7.2-src.tar.gz http://packetstormsecurity.org/files/109818/Hydra-Network-Logon-Cracker-7.2.html Thu, 16 Feb 2012 03:50:57 GMT THC-Hydra is a high quality parallelized login hacker for Samba, Smbnt, Cisco AAA, FTP, POP3, IMAP, Telnet, HTTP Auth, LDAP, NNTP, MySQL, VNC, ICQ, Socks5, PCNFS, Cisco and more. Includes SSL support, parallel scans, and is part of Nessus. http://packetstormsecurity.org/files/106155/thc-ssl-dos-1.4-win-bin.zip http://packetstormsecurity.org/files/106155/thc-ssl-dos-1.4-win-bin.zip http://packetstormsecurity.org/files/106155/THC-SSL-Denial-Of-Service-Tool-1.4-Windows-Version.html Mon, 24 Oct 2011 17:53:41 GMT THC-SSL-DOS is tool to stress test the SSL handshake by triggering processor intensive RSA_encrypt() calls on the server side. Establishing a secure SSL connection requires 15x more processing power on the server than on the client. THC-SSL-DOS exploits this asymmetric property by overloading the server and knocking it off the Internet. This problem affects all SSL implementations today. The vendors are aware of this problem since 2003 and the topic has been widely discussed. This attack further exploits the SSL secure Renegotiation feature to trigger thousands of renegotiations via a single TCP connection. Windows binary version. http://packetstormsecurity.org/files/106156/thc-ssl-dos-1.4.tar.gz http://packetstormsecurity.org/files/106156/thc-ssl-dos-1.4.tar.gz http://packetstormsecurity.org/files/106156/THC-SSL-Denial-Of-Service-Tool-1.4.html Mon, 24 Oct 2011 17:53:41 GMT THC-SSL-DOS is tool to stress test the SSL handshake by triggering processor intensive RSA_encrypt() calls on the server side. Establishing a secure SSL connection requires 15x more processing power on the server than on the client. THC-SSL-DOS exploits this asymmetric property by overloading the server and knocking it off the Internet. This problem affects all SSL implementations today. The vendors are aware of this problem since 2003 and the topic has been widely discussed. This attack further exploits the SSL secure Renegotiation feature to trigger thousands of renegotiations via a single TCP connection. http://packetstormsecurity.org/files/105502/hydra-7.1-src.tar.gz http://packetstormsecurity.org/files/105502/hydra-7.1-src.tar.gz http://packetstormsecurity.org/files/105502/Hydra-Network-Logon-Cracker-7.1.html Mon, 03 Oct 2011 17:22:22 GMT THC-Hydra is a high quality parallelized login hacker for Samba, Smbnt, Cisco AAA, FTP, POP3, IMAP, Telnet, HTTP Auth, LDAP, NNTP, MySQL, VNC, ICQ, Socks5, PCNFS, Cisco and more. Includes SSL support, parallel scans, and is part of Nessus. http://packetstormsecurity.org/files/105503/thc_hydra_article_r3.pdf http://packetstormsecurity.org/files/105503/thc_hydra_article_r3.pdf http://packetstormsecurity.org/files/105503/Password-Authentication-Cracking.html Mon, 03 Oct 2011 16:44:44 GMT This article will show how to use Hydra to check for weak passwords. Hydra tries all possible password combination against a server on the Internet until one valid one is found to log in to the server. It is a powerful tool for hackers and network administrators alike. http://packetstormsecurity.org/files/105501/hydra-7.0-src.tar.gz http://packetstormsecurity.org/files/105501/hydra-7.0-src.tar.gz http://packetstormsecurity.org/files/105501/Hydra-Network-Logon-Cracker-7.0.html Sun, 25 Sep 2011 12:12:12 GMT THC-Hydra is a high quality parallelized login hacker for Samba, Smbnt, Cisco AAA, FTP, POP3, IMAP, Telnet, HTTP Auth, LDAP, NNTP, MySQL, VNC, ICQ, Socks5, PCNFS, Cisco and more. Includes SSL support, parallel scans, and is part of Nessus. http://packetstormsecurity.org/files/104203/thc-ipv6-1.8.tar.gz http://packetstormsecurity.org/files/104203/thc-ipv6-1.8.tar.gz http://packetstormsecurity.org/files/104203/THC-IPV6-Attack-Tool-1.8.html Fri, 19 Aug 2011 01:59:37 GMT THC-IPV6 is a toolkit that attacks the inherent protocol weaknesses of IPv6 and ICMP6 and it includes an easy to use packet factory library. http://packetstormsecurity.org/files/103114/hydra-6.5-src.tar.gz http://packetstormsecurity.org/files/103114/hydra-6.5-src.tar.gz http://packetstormsecurity.org/files/103114/Hydra-Network-Logon-Cracker-6.5.html Sun, 17 Jul 2011 14:46:23 GMT THC-Hydra is a high quality parallelized login hacker for Samba, Smbnt, Cisco AAA, FTP, POP3, IMAP, Telnet, HTTP Auth, LDAP, NNTP, MySQL, VNC, ICQ, Socks5, PCNFS, Cisco and more. Includes SSL support, parallel scans, and is part of Nessus. http://packetstormsecurity.org/files/104204/thc-ipv6-1.6.tar.gz http://packetstormsecurity.org/files/104204/thc-ipv6-1.6.tar.gz http://packetstormsecurity.org/files/104204/THC-IPV6-Attack-Tool-1.6.html Thu, 12 May 2011 19:22:22 GMT THC-IPV6 is a toolkit that attacks the inherent protocol weaknesses of IPv6 and ICMP6 and it includes an easy to use packet factory library. http://packetstormsecurity.org/files/101007/hydra-6.3-src.tar.gz http://packetstormsecurity.org/files/101007/hydra-6.3-src.tar.gz http://packetstormsecurity.org/files/101007/Hydra-Network-Logon-Cracker-6.3.html Sat, 30 Apr 2011 19:45:27 GMT THC-Hydra is a high quality parallelized login hacker for Samba, Smbnt, Cisco AAA, FTP, POP3, IMAP, Telnet, HTTP Auth, LDAP, NNTP, MySQL, VNC, ICQ, Socks5, PCNFS, Cisco and more. Includes SSL support, parallel scans, and is part of Nessus. http://packetstormsecurity.org/files/100163/hydra-6.2-src.tar.gz http://packetstormsecurity.org/files/100163/hydra-6.2-src.tar.gz http://packetstormsecurity.org/files/100163/Hydra-Network-Logon-Cracker-6.2.html Thu, 07 Apr 2011 16:02:08 GMT THC-Hydra is a high quality parallelized login hacker for Samba, Smbnt, Cisco AAA, FTP, POP3, IMAP, Telnet, HTTP Auth, LDAP, NNTP, MySQL, VNC, ICQ, Socks5, PCNFS, Cisco and more. Includes SSL support, parallel scans, and is part of Nessus. http://packetstormsecurity.org/files/98123/hydra-6.1-src.tar.gz http://packetstormsecurity.org/files/98123/hydra-6.1-src.tar.gz http://packetstormsecurity.org/files/98123/Hydra-Network-Logon-Cracker-6.1.html Thu, 03 Feb 2011 15:20:55 GMT THC-Hydra is a high quality parallelized login hacker for Samba, Smbnt, Cisco AAA, FTP, POP3, IMAP, Telnet, HTTP Auth, LDAP, NNTP, MySQL, VNC, ICQ, Socks5, PCNFS, Cisco and more. Includes SSL support, parallel scans, and is part of Nessus. http://packetstormsecurity.org/files/97903/hydra-6.0-src.tar.gz http://packetstormsecurity.org/files/97903/hydra-6.0-src.tar.gz http://packetstormsecurity.org/files/97903/Hydra-Network-Logon-Cracker-6.0.html Wed, 26 Jan 2011 22:21:23 GMT THC-Hydra is a high quality parallelized login hacker for Samba, Smbnt, Cisco AAA, FTP, POP3, IMAP, Telnet, HTTP Auth, LDAP, NNTP, MySQL, VNC, ICQ, Socks5, PCNFS, Cisco and more. Includes SSL support, parallel scans, and is part of Nessus. http://packetstormsecurity.org/files/97129/hydra-5.9-src.tar.gz http://packetstormsecurity.org/files/97129/hydra-5.9-src.tar.gz http://packetstormsecurity.org/files/97129/Hydra-Network-Logon-Cracker-5.9.html Tue, 28 Dec 2010 18:22:22 GMT THC-Hydra is a high quality parallelized login hacker for Samba, Smbnt, Cisco AAA, FTP, POP3, IMAP, Telnet, HTTP Auth, LDAP, NNTP, MySQL, VNC, ICQ, Socks5, PCNFS, Cisco and more. Includes SSL support, parallel scans, and is part of Nessus. http://packetstormsecurity.org/files/97128/thc-ipv6-1.4.tar.gz http://packetstormsecurity.org/files/97128/thc-ipv6-1.4.tar.gz http://packetstormsecurity.org/files/97128/THC-IPV6-Attack-Tool-1.4.html Tue, 28 Dec 2010 16:33:33 GMT THC-IPV6 is a toolkit that attacks the inherent protocol weaknesses of IPv6 and ICMP6 and it includes an easy to use packet factory library. http://packetstormsecurity.org/files/91050/thc-ipv6-1.2.tar.gz http://packetstormsecurity.org/files/91050/thc-ipv6-1.2.tar.gz http://packetstormsecurity.org/files/91050/THC-IPV6-Attack-Tool-1.2.html Sat, 26 Jun 2010 00:48:14 GMT THC-IPV6 is a toolkit that attacks the inherent protocol weaknesses of IPv6 and ICMP6 and it includes an easy to use packet factory library. http://packetstormsecurity.org/files/90674/hydra-5.7-src.tar.gz http://packetstormsecurity.org/files/90674/hydra-5.7-src.tar.gz http://packetstormsecurity.org/files/90674/Hydra-Network-Logon-Cracker-5.7.html Wed, 16 Jun 2010 01:39:08 GMT THC-Hydra is a high quality parallelized login hacker for Samba, Smbnt, Cisco AAA, FTP, POP3, IMAP, Telnet, HTTP Auth, LDAP, NNTP, MySQL, VNC, ICQ, Socks5, PCNFS, Cisco and more. Includes SSL support, parallel scans, and is part of Nessus. http://packetstormsecurity.org/files/90673/thc-ipv6-1.1.tar.gz http://packetstormsecurity.org/files/90673/thc-ipv6-1.1.tar.gz http://packetstormsecurity.org/files/90673/THC-IPV6-Attack-Tool-1.1.html Wed, 16 Jun 2010 01:36:57 GMT THC-IPV6 is a toolkit that attacks the inherent protocol weaknesses of IPv6 and ICMP6 and it includes an easy to use packet factory library. http://packetstormsecurity.org/files/70447/thc-rfidiot.zip http://packetstormsecurity.org/files/70447/thc-rfidiot.zip http://packetstormsecurity.org/files/70447/thc-rfidiot.zip.html Mon, 29 Sep 2008 18:53:15 GMT This is a customized THC version of RFIDIOt that allows you to read a chip's content and write it to an emulator. RFIDIOt is a python library for exploring RFID devices. It currently drives a couple of RFID readers made by ACG, called the HF Dual ISO and the LFX. Includes sample programs to read/write tags and the beginnings of library routines to handle the data structures of specific tags like MIFARE(r). http://packetstormsecurity.org/files/69000/blog-scan.txt http://packetstormsecurity.org/files/69000/blog-scan.txt http://packetstormsecurity.org/files/69000/blog-scan.txt.html Wed, 13 Aug 2008 02:47:28 GMT An anonymous blog regarding the scanning of the Internet by someone that is part of THC. http://packetstormsecurity.org/files/63324/hydra-http-form.patch http://packetstormsecurity.org/files/63324/hydra-http-form.patch http://packetstormsecurity.org/files/63324/hydra-http-form.patch.html Wed, 06 Feb 2008 19:33:56 GMT The http-form module for hydra 5.4 has a problem which causes incorrect pieces of memory to be free'd. This is as a result of the memory leak plugs which have been applied to this module for this release. This patch removes the unneeded free's and allows the module to work correctly. http://packetstormsecurity.org/files/63323/hydra-patch.txt http://packetstormsecurity.org/files/63323/hydra-patch.txt http://packetstormsecurity.org/files/63323/hydra-patch.txt.html Wed, 06 Feb 2008 19:32:41 GMT This is a patch for THC Hydra that fixes a status code parsing error for the HTTP protocol. http://packetstormsecurity.org/files/59613/thc-orakelcrackert11g.tar.gz http://packetstormsecurity.org/files/59613/thc-orakelcrackert11g.tar.gz http://packetstormsecurity.org/files/59613/thc-orakelcrackert11g.tar.gz.html Wed, 26 Sep 2007 17:53:55 GMT OrakelCrackert is a tool that can crack passwords which are stored using the latest SHA1 based password hashing algorithm. To speed up cracking, the tool exploits a weakness in the Oracle password storage strategy. Therefore, cracking - for most passwords - is still just as fast as it was before the introduction of Oracle 11g. http://packetstormsecurity.org/files/59065/dma-hydra-5.4-src_plus.txt http://packetstormsecurity.org/files/59065/dma-hydra-5.4-src_plus.txt http://packetstormsecurity.org/files/59065/dma-hydra-5.4-src_plus.txt.html Wed, 05 Sep 2007 04:55:18 GMT Patch for THC's Hydra that adds a dependency checks for openssl needed for the SIP module, modifies checks for libpq.so for Postgresql module, adds a new module for Netware NCP and for Firebird database. http://packetstormsecurity.org/files/59057/thc-surrender.txt http://packetstormsecurity.org/files/59057/thc-surrender.txt http://packetstormsecurity.org/files/59057/thc-surrender.txt.html Wed, 05 Sep 2007 04:24:26 GMT The German fraction of THC stops all activities that have been labeled illegal under the German anti hacker law. The law forbids German citizens to research, discuss or disclose security problems. THC is an independent non-commercial security research organization with over 10 years of experience.