-
Notifications
You must be signed in to change notification settings - Fork 2.3k
Open
Description
IMPORTANT
Failed to brute sqlserver 2014 when using correct username and password.
To Reproduce
Steps to reproduce the behavior:
- download latest docker image:
docker pull vanhauser/hydra
- run command:
I confirm that the username and password are correct.
docker run -it vanhauser/hydra:latest -l sa -p 123456 mssql://10.10.20.9:1433
- get response:
0 valid password found
Expected behavior
Can correctly identify sqlserver Weak password.
Screenshots
leen@leenPC:~/Downloads$ docker run -it vanhauser/hydra:latest -l sa -p 123456 mssql://10.10.20.9:1433
Hydra v9.6dev (c) 2023 by van Hauser/THC & David Maciejak - Please do not use in military or secret service organizations, or for illegal purposes (this is non-binding, these *** ignore laws and ethics anyway).
Hydra (https://github.com/vanhauser-thc/thc-hydra) starting at 2024-05-13 07:29:18
[DATA] max 1 task per 1 server, overall 1 task, 1 login try (l:1/p:1), ~1 try per task
[DATA] attacking mssql://10.9.20.69:1433/
[ERROR] all children were disabled due too many connection errors
0 of 1 target completed, 0 valid password found
Hydra (https://github.com/vanhauser-thc/thc-hydra) finished at 2024-05-13 07:29:19
Desktop (please complete the following information):
- OS: [e.g. Ubuntu 20.04]
- hydra version [e.g. current github state]
Additional context
SQLServer version:
Microsoft SQL Server 2014 - 12.0.2000.8 (X64)
Feb 20 2014 20:04:26
Copyright (c) Microsoft Corporation
Enterprise Edition (64-bit) on Windows NT 6.1 <X64> (Build 7601: Service Pack 1) (Hypervisor)
Metadata
Metadata
Assignees
Labels
No labels