Ncrack

Password cracker for online cracking (protocols). Similar to Hydra.

Help

man ncrack

Protocols

ftp:21 ssh:22 telnet:23 http:80 pop3:110 imap:143 netbios-ssn:445 smb:445 smb:139 https:443 owa:443l sip:5060 pop3s:995 mssql:1433 mysql:3306 ms-wbt-server:3389 rdp:3389 psql:5432 vnc:5801 vnc:5900 vnc:5901 vnc:6001 redis:6379 winrm:5985 winrm:5986 cassandra:9160 cassandra:9042 mongodb:27017

Bruteforce RDP

RDP does not reliably handle multiple threads. Use CL=1.

IP=x.x.x.x
WL=/usr/share/seclists/Passwords/Common-Credentials/best1050.txt
#WL=/usr/share/wordlists/rockyou.txt
ncrack -v -f --user administrator -P $WL rdp://${IP},CL=1

Bruteforce Oracle Weblogic

IP=x.x.x.x
WL=/usr/share/wordlists/rockyou.txt
ncrack -u weblogic -P $WL https://${IP}:7879