Skip to content
Navigation Menu
Provide feedback
Saved searches
Use saved searches to filter your results more quickly
Sign up
Repository files navigation
THC-HYDRA-windows
Description
The THC-HYDRA tool compiled for Windows
Features
- Latest
9.1version (2020-07-29) - Compiled for
x64only from version 9.1, older releases were compiled forx86so they should work onx86andx64platforms - Compiled with SSH, MySQL, PostgreSQL and RDP optional modules
- Embedded Cygwin DLLs
Usage
- Download the whole archive
- Extract it and run
hydra.exe - Profit
Prerequisites
- Microsoft Visual C++ 2008 Redistributable Package (more info here)
Older versions
- Browse the release section to find some old versions
Disclaimer & licence
The very same as mentioned on https://github.com/vanhauser-thc/thc-hydra.
I don’t own anything on THC brand or hydra, neither am I affiliated or working on the project.
Last but not least, antivirus softwares might report some binaries as hacktools or even malwares: this is a known and common issue. If you don’t trust this compilation, just don’t download it.
Credits
- The Hackers Choice «THC» https://github.com/vanhauser-thc/thc-hydra
Reading Time: 3 minutes
Hydra, or THC-Hydra, is a powerful password-cracking tool widely used by ethical hackers and cybersecurity professionals for penetration testing. Its versatility and ability to work across multiple protocols make it a critical tool in testing the robustness of systems against brute force and dictionary attacks. Although Hydra is natively designed for Linux-based systems, it can be installed and used on Windows through methods like Windows Subsystem for Linux (WSL) or by using compatibility layers such as Cygwin.
In this guide, we’ll cover step-by-step instructions on how to install Hydra on Windows, including setup requirements and troubleshooting tips.
What is Hydra?
Hydra is a network login cracker capable of brute force and dictionary attacks across a wide range of protocols, such as SSH, FTP, HTTP, RDP, and more. It is an open-source tool developed by The Hacker’s Choice (THC) and is widely used for:
- Password auditing
- Penetration testing
- Network security assessments
However, it is essential to use Hydra ethically and only on systems for which you have explicit permission to test.
Methods to Install Hydra on Windows
Installing Hydra on Windows requires a workaround since it does not natively support the Windows operating system. The most common methods are:
- Using Windows Subsystem for Linux (WSL)
- Using Cygwin
- Using a Pre-Compiled Binary with Linux Emulation Tools
Method 1: Installing Hydra Using WSL
Windows Subsystem for Linux (WSL) allows you to run a Linux distribution natively within Windows, making it the most seamless way to install Hydra.
Step 1: Install WSL
- Open PowerShell as Administrator and run:
wsl --install
This command installs WSL along with the default Ubuntu Linux distribution. If WSL is already installed, ensure it is updated:wsl --update - Restart your system if prompted.
- Once installed, open the Ubuntu terminal from the Start Menu.
Step 2: Update and Install Dependencies
In the Ubuntu terminal, update the system and install the required dependencies for Hydra:
|
sudo apt update && sudo apt upgrade —y<br>sudo apt install build—essential libssl—dev libssh—dev libidn11—dev \<br>libpcre3—dev libgpg—error—dev libgcrypt20—dev git —y |
Step 3: Clone and Compile Hydra
- Clone the Hydra repository from GitHub:
git clone https://github.com/vanhauser-thc/thc-hydra.git - Navigate to the cloned directory:
cd thc-hydra - Compile Hydra by running:
./configure make - (Optional) Install Hydra system-wide:
sudo make install
Step 4: Verify the Installation
Run the following command to check if Hydra is installed correctly:
This displays Hydra’s help menu, confirming that the installation was successful. You can now use Hydra directly within the Ubuntu terminal on WSL.
Method 2: Installing Hydra Using Cygwin
Cygwin is a compatibility layer that provides a Linux-like environment on Windows. This method is suitable if you do not want to use WSL.
Step 1: Download and Install Cygwin
- Visit the Cygwin website and download the Cygwin setup executable.
- Run the installer and select a download mirror.
- During installation, add the following development packages:
- gcc-core (C compiler)
- make (build automation tool)
- libssl-dev (SSL library development files)
- libpcre-devel (PCRE library development files)
- git (version control system)
Step 2: Clone and Compile Hydra
- Open the Cygwin terminal.
- Clone the Hydra repository:
git clone https://github.com/vanhauser-thc/thc-hydra.git - Navigate to the Hydra directory:
cd thc-hydra - Compile Hydra:
./configure make - (Optional) Install Hydra system-wide:
make install
Step 3: Verify Installation
Run the following command to verify Hydra’s installation:
If the help menu appears, Hydra has been successfully installed.
Method 3: Using a Pre-Compiled Binary
This method involves downloading a pre-compiled Hydra binary and using tools like MinGW or a Linux emulation layer.
Step 1: Download a Pre-Compiled Binary
Look for a trusted source offering pre-compiled Hydra binaries for Windows. Always verify the authenticity of the binary to avoid security risks.
Step 2: Run Hydra Using a Linux Emulator
Use tools like MinGW or Cygwin to run the binary, as it requires a Linux-like environment to execute.
Troubleshooting Common Issues
1. Missing Dependencies
If you encounter errors during the ./configure or make process, ensure all required dependencies are installed. Use:
|
sudo apt install libssl—dev libssh—dev libidn11—dev —y |
2. Permission Denied
Run commands with administrator privileges or use sudo in WSL and Cygwin to resolve permission issues.
3. Hydra Command Not Found
Ensure Hydra is added to your PATH or run it directly from the installation directory:
4. Compilation Errors
Compilation errors can occur if the required libraries are not installed or compatible. Ensure you are using the latest version of Hydra and your environment is properly configured.
Uninstalling Hydra
If you need to remove Hydra from your system, follow these steps:
For WSL Installations:
- Navigate to the Hydra directory in the Ubuntu terminal:
cd thc-hydra - Run:
sudo make uninstall
For Cygwin Installations:
- Delete the Hydra directory:
rm -rf /path/to/thc-hydra
Conclusion
Although Hydra is not natively supported on Windows, it can be installed and used effectively through WSL, Cygwin, or other compatibility tools. WSL is the most efficient and recommended method due to its native integration with Windows and seamless Linux compatibility.
Always use Hydra responsibly and within legal and ethical guidelines. With the right setup, you can leverage Hydra’s powerful capabilities for ethical hacking, password auditing, and penetration testing on your Windows system.
Disclaimer: This post may contain affiliate links. If you make a purchase through one of these links, Cyberly may earn a small commission at no extra cost to you. Your support helps us continue providing free tutorials and content. Thank you!
THC-Hydra Windows Install Guide
Ok So I had a difficult time as a beginner installing hydra so I’ll be helping
you today installing THC-Hydra in this Tutorial.
Step 1: Download the Cygwin that corresponds to your system.
DOWNLOAD
Note: you can find out if your system is either 64 or
32 bit by right clicking «Computer» in the start menu.
Step 2: Install Cygwin by clicking on your what you’ve downloaded from the
Cygwin website. Press next on everything until when asked for what server to
download from, click on anyone (I don’t think it matters which one you choose).
Stop again when you need to select packages and move to step 3.
Step 3: Press the + button besides the «Default» package (only
package that should be there) and a list of packages should show up; find the
package «devel» under the «Default» package and change
where it says «default» besides each package’s name to
«Install» only to the devel package by clicking on where it says
«default» besides devel.
Note: The «default» package I talk about sitting at the top is
not the same as the «default» installation besides each package.
Step 4: Click next, select the required packages option, go on and finish your
download
Step 5: Not really a step but you should have a Cygwin terminal on your desktop
and if not go to the install destination (usually «C:\Cygwin» or
«C:\Program Files\Cygwin») and right click the batch file labeled
Cygwin and press «Create Shortcut» and move the shortcut into
wherever you find the most convenient to have it at.
Note: You will be using the Cygwin terminal every time you want to use
hydra.
IMPORTANT, ONLY FOR 64-BIT USERS:
1. Go into the folder where Cygwin was installed
2. Go into the folder inside the Cygwin installation folder named
«bin»
3. Right Click on a file in «bin», Go to properties and copy the
location (Ex. C:\Program Files\Cygwin\bin) which is essentially the location of
the bin folder.
4. Go to «Control Panel\System and Security\System»
5. Click Advanced System Setting located to your left
6. Sitting at the bottom right of the screen that just popped up press the
Environment Variables button
7. On the second box of text titled System Variables scroll down until you find
the variable «Path»
8. Click the variable «Path» and click the edit button
9. Don’t mess with anything in the text box just type this besides all the
already written shit in the text box «;[Bin location Here]»
10. Press Ok
Now that we have finished installing Cygwin we can get to the fun part and
install Hydra
Step 1: Download Hydra from either directly
DOWNLOAD
Step 2: Unzip the file using a program such as Winrar (can be downloaded at www.rarlab.com) to your desktop.
Step 3: Move the file from your desktop into your main drive «C:»
Step 4: Open the Cygwin terminal which if you listened to me you made a
shortcut to already.
Error Note: If it says «cannot find mintty would you like to browse for
it» then browse to your installation folder, go to bin and look
alphabetically for mintty until you find it.
Step 5: search for cmd at the start menu (if you can’t it’s placed in «C:\Windows\System32\cmd»)
when you do find it right click it and click «run as administrator»
Step 6: type «NetSh Advfirewall set allprofiles state off» to turn
off your firewall off. manually turn off your other antiviruses such as Norton
or McAfee
Note: I understand this might sound crazy but when you’re installing a
hacking software you don’t anti-hack softwares running.
Now you can test Cygwin out by issuing a few commands that you wouldn’t normally have use to in Windows that are common Linux commands. Here is a quick view of: «pwd», «cd /», «ls», «ps»:
Step 7: on Cygwin terminal type
«cd /cygdrive/c/hydra-8.1.tar»
Once this is successful there should be yellow text besides your user name
saying «/cygdrive/c/hydra-8.1.tar»
Step 8: Type «./configure»
wait until it stops saying anything and then wait 2/3 minutes to make sure it
stopped.
step 9: Type «make»
wait until it stops saying anything and then wait 2/3 minutes to make sure it
stopped.
Step 10: Type «make install»
wait until it stops saying anything and then wait 2/3 minutes to make sure it
stopped.
Step 11: I hope by now everything has gone fine and Cygwin should be letting
you input but just close it if you’re done.
Step 12: Now right click your Cygwin shortcut, go into properties and make the
start in «C:\hydra-8.1.tar» and rename it hydra
Step 13: Turn your firewall back on by typing this in the admin cmd «NetSh
Advfirewall set allrprofiles state on» but make sure that it doesnt
intervene with hydra, google how to exclude programs from firewall and if you
have a antivirus same goes.
THC Hydra — утилита для UNIX-терминала, предназначенная для тестирования безопасности серверов, локальных сетей, веб-приложений. Имеет открытый исходный код, легко компилируется практически под любые актуальные операционные системы. То есть существует также THC Hydra для Windows, Mac OS, Android. Программа включена в базовую сборку Kali Linux. Установка в Kali NetHunter тоже возможна (без GUI).
Возможности программы
Утилита поддерживает проведение взлома через брутфорс (не по хэшу, а именно перебором ключей по словарю). Главное же её преимущество — это поддерживаемые сетевые протоколы. Их более 50, включая Rlogin, RSH, Subversion и даже XMPP. И программа может работать в параллельном режиме, выполняя взлом сразу с нескольких компьютеров (в том числе с задействованием GPU-вычислений) или по нескольким сетевым протоколам одновременно.
Основные возможности приложения:
- доступ к защищенным локальным сетям (как через Ethernet, так и WiFi);
- доступ к LAN по заданному диапазону портов;
- восстановление пароля к зашифрованным файлам/пакетам;
- взлом веб-серверов;
- взлом почтовых сервисов (включая Gmail, с возможностью обхода ограничений по капче);
- составление собственного словаря на основе заданной ключевой фразы.
Также THC Hydra Linux может дистанционно взламывать специфические локальные сети (в которых установлены только игровые консоли или торговые автоматы с дистанционным управлением). Утилита работает через терминал, но для неё выпустили массу неофициальных GUI (самый популярный Xhydra).
Результаты брутфорса можно экспортировать в log-файл. Это позволит выполнить взлом сети в несколько попыток (начинать всё сначала каждый раз не потребуется).
Варианты использования программы
С помощью Hydra можно восстановить забытый пароль к файлу или WiFi. Она работает заметно быстрее других приложений для брутфорса, может задействовать одновременно вычисления как на CPU, так и GPU (обязательно требуется установка проприетарного драйвера последней версии).
Скачать THC Hydra актуальной версии бесплатно можно на нашем сайте.
THC-Hydra & mdash; is one of the fastest and most reliable programs for checking the security and resistance of systems to brute force password recovery. It can also be used to recover forgotten passwords to any resource that uses a login pair and a password to login to the system.
The Hydra supports more than 50 different protocols and call formats as standard. But its main difference from the programs of this class, in addition to high speed and parallel searches in several threads & mdash; it is modularity, you can connect new components that provide support for the latest network devices and protocols. New modules can be found on the official website of the program, with third-party authors or write it yourself.
THC-Hydra offers rapid and reliable testing of system security against brute force attacks, enhancing password recovery and network protocol versatility.
As a database of logins and passwords, the program uses special dictionaries, to improve the probability of successful selection you can specify masks, length and possible symbols, which they can consist of, in addition, there is a possibility to select software-generated passwords using several algorithms. The program can perform a parallel search on several protocols simultaneously. Average brute force attack speed of 900 passwords per second.
Here is a small list of protocols and devices that THC-Hydra can work with: HTTP, FTP, SMTP, POP3, IMAP, MySQL, NCP, NNTP, SOCKS, SSH, XMPP, Cisco and Mikrotik routers, network cameras, Simatic S7-300 controllers and much more. The user has access to Hydra versions for almost all operating systems, besides it is distributed with open source code, which means that any programmer can see how this or that function is implemented and make sure that there are no malicious inclusions in the code before the pentest.
The THC-Hydra is an excellent tool for researchers and security consultants to show how easy it is to gain unauthorized remote access to the system.
— high speed of operation;
— modularity;
— parallel password recovery on several protocols;
— IPv6 address space support;
— support for very large dictionaries (up to several gigabytes in size);
— Support for over 50 different services and protocols;
— open source code;
— cross-platform.
Supports numerous network protocols for comprehensive testing.
Meticulously designed for efficient and effective brute-force attacks.
Open-source nature allows for custom modifications.
Requires advanced knowledge in ethical hacking and network security.
Potential misuse for malicious hacking purposes.
Limited customer support and documentation.
Cameron
Sun, Dec 17, 2023
Forgot your password? Don’t worry, just get THC-Hydra. This app uses brute force password recovery and most likely will solve the problem. Want to check whether your system is secure enough? The same program can do this for you.THC-Hydra is a great app which must definitely not get to the hands of computer criminals. But for those who are not planning to do anything illegal, it will become a real godsend. Not only does the app use 50 different protocols and call formats as standard, but it is also famous for its modularity. So you can add new modules to the app to make your user experience even better!
THC-Hydra works with a big amount of protocols and devices and it’s distributed with open source code so anyone can see how functions are implemented.
So, if you want to recover forgotten passwords or check the resistance of systems to brute force password recovery, you should definitely get this app.
👨💻️ USER REVIEWS AND COMMENTS 💬
image/svg+xmlBotttsPablo Stanleyhttps://bottts.com/Florian Körner
Aidan
THC-Hydra seems to be a good software for security companies. however, for personal use or rather if this software got into the wrong hands i can see it causing some major problems for all kinds of people, businesses and relationships.
image/svg+xmlBotttsPablo Stanleyhttps://bottts.com/Florian Körner
Kai
This program is great for the IT specialist in the company as a means of testing and working with password protection systems. A company’s security depends on its ability to resist attacks from maleware and password hacks. THC-Hydra can operate on the most common protocols and has a deep library of commonly-used phrases to test your system. THC-Hydra is open source and supported by a robust community which further reduces its ability to be compromised.
image/svg+xmlBotttsPablo Stanleyhttps://bottts.com/Florian Körner
Lewis
THC-Hydra can operate on the most common protocols and has a deep library of commonly-used phrases to test your system, THC-Hydra is open source and supported by a robust community which further reduces its ability to be compromised.THC-Hydra seems to be a good software for security companies. lastly A company’s security depends on its ability to resist attacks from malware and password hacks.
image/svg+xmlBotttsPablo Stanleyhttps://bottts.com/Florian Körner
Jude
If you need a quick and easy way to make sure that your systems are secure, then you should check out THC-Hydra. This is a super-efficient tool that will crack any password combination so you will be able to use it if you’ve lost your password as well. THC-Hydra distinguishes itself from competitors by working at very high speeds that can’t be beat.
image/svg+xmlBotttsPablo Stanleyhttps://bottts.com/Florian Körner
Noah
THC Hydra is a brute-force cracking tool with Free and open-source software. It is a very fast multi-threaded network which is pretty much the most up to date and currently developed password brute with numerous Hacking tools features. This tool is a proof of concept code and has the higher possibility to show how easy it will be to gain unauthorized access from remote to a system.
image/svg+xmlBotttsPablo Stanleyhttps://bottts.com/Florian Körner
Sam
Need a network logon cracker? THC-Hydra for Windows got you covered. It is a command line and GUI to help lower the learning curve for brute force entry. Recommended for anyone new to cyber security or the seasoned expert who is looking for an easy logon cracker.
image/svg+xmlBotttsPablo Stanleyhttps://bottts.com/Florian Körner
Samuel
THC-Hydra is a standardized software that can enhance and aid the security algorithm of any device. This software is a sure bet for security companies and people who have their specialty in I.T.
As a matter of efficiency, it would be a cool software for every company whose major service or product relies on the internet as it helps to resist any cyber attack on the company password.
It is also a good tool to secure and retrieve your password if installed on your device.
image/svg+xmlBotttsPablo Stanleyhttps://bottts.com/Florian Körner
Jamie
I love using THC-Hydra for Windows because it can crack just about any system if you’ve somehow forgotten or misplaced your password, but it won’t compromise the security of your device otherwise. Even if you need to get into your device remotely, you can count on Hydra to get the job done, as remote authentication is not a problem for this program.
image/svg+xmlBotttsPablo Stanleyhttps://bottts.com/Florian Körner
Mason
It is used for finding the correct login name or username and their corresponding password, that has been in various operating systems inbuilt. They use the brute force attack which is helpful in finding the login name and password. They support many protocols in the websites like the FTP,SMP,POP3 and IMPS.
image/svg+xmlBotttsPablo Stanleyhttps://bottts.com/Florian Körner
Lewis
For anyone wondering if their network password and safety features are safe enough and would like to put it to the test, this program provides a worthy opponent. This program is the leading and strongest brute force power recovery programs used to test the safety of network. Its strength comes from the 50 protocols its able to work with as well as its speed due to its high speed and parallel search features. A great tool to test your network!
image/svg+xmlBotttsPablo Stanleyhttps://bottts.com/Florian Körner
Cooper
THC-Hydra is used to not only check how resistance a system is to break ins but is can also be used to recover forgotten passwords. This program not only supports over 50 protocols and call formats, but it is also upgradeable. New modules are available on the official website or you can purchase from third-party authors or write them yourself. The program also allows the user to set masks, length and symbols that passwords can consist of, or you can auto-generate passwords using several algorithms. This tool is a must have for researchers and security consultants who want to see how easy it is for others to obtain unauthorized access to their systems.
image/svg+xmlBotttsPablo Stanleyhttps://bottts.com/Florian Körner
Josh
I love using THC-Hydra for Windows because it helps me log into any UNIX system on the planet even if that system is protected by a password or authentication code that seems tough to break. It works quickly and efficiently and you won’t find a faster logon tool out there on the market. Best of all, it’s easy for beginners to use as well.
image/svg+xmlBotttsPablo Stanleyhttps://bottts.com/Florian Körner
Angus C.
THC-Hydra is a very fast network logon cracker which supports many different services. It can perform rapid dictionary attacks against more than 30 protocols, including telnet, FTP, HTTP, HTTPS, SMB, several databases, and much more. It is very versatile and can be easily expanded with additional modules for other protocols and services.
image/svg+xmlBotttsPablo Stanleyhttps://bottts.com/Florian Körner
Harrison I*****d
THC-Hydra is a very powerful and convenient software for cracking passwords. It has a great set of options and can be used to attack various protocols. I recently used it to crack a few passwords with great success. It was very fast and efficient. The user interface is intuitive and easy to use. The documentation is thorough and provides good examples. Overall, I was very pleased with the performance of THC-Hydra.
image/svg+xmlBotttsPablo Stanleyhttps://bottts.com/Florian Körner
Cameron Moscoe
THC-Hydra is a powerful and comprehensive password cracking tool. It has a wide range of features and protocols that allow users to customize their approach to penetration testing. It runs fast and is easy to use, with intuitive menus and options. The documentation is thorough and easy to understand. Overall, it’s a great tool for password cracking.
image/svg+xmlBotttsPablo Stanleyhttps://bottts.com/Florian Körner
Caleb R********a
THC-Hydra is a poweful tool for bruteforcing, it’s easy to use and has a lot of customizablity options. I usd it for a few projcts and was impressed with its speed and efficency
image/svg+xmlBotttsPablo Stanleyhttps://bottts.com/Florian Körner
Ethan K**********b
THC-Hydra is a powerfull and easy to use tool that I’ve used succesffuly in the past, but it can be a litle tricky to configure somtimes.
image/svg+xmlBotttsPablo Stanleyhttps://bottts.com/Florian Körner
Harris A.
This software is a powerful network login cracker tool that can perform brute-force attacks on various protocols and services. It supports a wide range of protocols, including HTTP, FTP, SSH, Telnet, and more. It also has the capability to perform dictionary attacks and supports multi-threading, making it efficient and fast. Additionally, it allows for custom password lists and automatic retries. Overall, it is a useful tool for security testing and penetration testing purposes.
image/svg+xmlBotttsPablo Stanleyhttps://bottts.com/Florian Körner
Benjamin Shayler
THC-Hydra software is a powerful and versatile tool for performing brute-force attacks on various network protocols and services.
image/svg+xmlBotttsPablo Stanleyhttps://bottts.com/Florian Körner
Murray
THC-Hydra is a widely recognized network logon cracker, featuring robust capability in password guessing. The software stands out for its speed, as it is one of the fastest login crackers available. This efficiency is due to its ability to test multiple passwords simultaneously, across various protocols, a feature that sets it apart from its competitors.
image/svg+xmlBotttsPablo Stanleyhttps://bottts.com/Florian Körner
Alexander
A robust, fast, and flexible tool for network logon cracking and testing.
image/svg+xmlBotttsPablo Stanleyhttps://bottts.com/Florian Körner
Nathan
Robust, versatile tool for password cracking.
Efficient tool for testing security.
Password cracking tool with multiple functionalities, great for hacking.
