State of network password cracker art - Comparison Of Features and Services - hydra
Keywords: Comparison Of Features,Comparison Of Services, Network Authentication Password Cracker Bruteforce THC

# Comparison of Features and Services Coverage

## Introduction

Hydra is born more than 10 years ago, this page is used as a recap of the functionalities it provides, but also the differences in feature sets, services coverage and code between the most popular network authentication cracker tools available. Each feature is compared against Hydra as of the current version. This table is updated as new features are added to the project. If you find any inaccuracies on this page please do not hesitate to contact us.

Below, means it is supported, means it is not supported, means the support is partial

### Code Comparison

This table just lists latest available versions and platforms compatibility.

Code | Hydra | Medusa | Ncrack
Version | 8.6 | 2.2 | 0.4 alpha
Last Update | July 2017 | November 2015 | April 2011
Supported Platforms | Linux, *BSD, Solaris, Mac OS X, any Unix, Windows (Cygwin) | Linux, *BSD, Solaris and Mac OS X | Linux, *BSD, Mac OS X, Windows

### Features Table

This table lists the feature sets of each tools.

Feature | Hydra | Medusa | Ncrack
License | AGPLv3 | GPLv2 | GPLv2 + Nmap terms
IPv6 Support |  |  |
Graphic User Interface |  |  |
Internationalized support (RFC 4013) |  |  |
HTTP proxy support |  |  |
SOCKS proxy support |  |  |
# of supported protocols | 51 | 22 | 7

### Services Coverage

This table lists the services coverage of each tools. For each services, many authentication methods are possible. If you require other ways or find issues in Hydra, please contact us as the service depends on RFC implementations, some adjustements may be needed.

Service | Details | Hydra | Medusa | Ncrack
ADAM-6500 |  |  |  |
AFP |  |  |  |
Asterisk |  |  |  |
Cisco Password |  |  |  |
Cisco Enable |  |  |  |
CVS |  |  |  |
Firebird |  |  |  |
FTP |  |  |  |
SSL support | AUTH TLS & FTP over SSL | AUTH TLS & FTP over SSL |
HTTP | Method(s) | GET, HEAD, POST | GET | GET
Basic Auth |  |  |
DIGEST-MD5 Auth |  |  |
NTLM Auth |  |  |
SSL support | HTTPS | HTTPS | HTTPS
HTTP Form | Method(s) | GET, POST | GET, POST |
SSL support | HTTPS | HTTPS |
HTTP Proxy | Basic Auth |  |  |
DIGEST-MD5 Auth |  |  |
NTLM Auth |  |  |
SSL support | HTTPS |  |
HTTP PROXY URL Enumeration |  |  |  |
ICQ | v5 | 1 |  |
IMAP | LOGIN support |  |  |
AUTH LOGIN support |  |  |
AUTH PLAIN support |  |  |
AUTH CRAM-MD5 support |  |  |
AUTH CRAM-SHA1 support |  |  |
AUTH CRAM-SHA256 support |  |  |
AUTH DIGEST-MD5 support |  |  |
AUTH NTLM support |  |  |
AUTH SCRAM-SHA1 support |  |  |
SSL support | IMAPS & STARTTLS | IMAPS & STARTTLS |
IRC | General server password |  |  |
OPER mode password |  |  |
LDAP | v2, Simple support |  |  |
v3, Simple support |  |  |
v3, AUTH CRAM-MD5 support |  |  |
v3, AUTH DIGEST-MD5 support |  |  |
MS-SQL |  |  |  |
MySQL | v3.x |  |  |
v4.x |  |  |
v5.x |  |  |
NCP |  |  |  |
NNTP | USER support |  |  |
AUTH LOGIN support |  |  |
AUTH PLAIN support |  |  |
AUTH CRAM-MD5 support |  |  |
AUTH DIGEST-MD5 support |  |  |
AUTH NTLM support |  |  |
SSL support | STARTTLS & NNTP over SSL |  |
Oracle | Database |  | 2 |
TNS Listener |  |  |
SID Enumeration |  |  |
PC-NFS |  |  |  |
pcAnywhere | Native Authentication | 1 |  |
OS Based Authentication (MS) |  |  |
POP3 | USER support |  |  |
APOP support |  |  |
AUTH LOGIN support |  |  |
AUTH PLAIN support |  |  |
AUTH CRAM-MD5 support |  |  |
AUTH CRAM-SHA1 support |  |  |
AUTH CRAM-SHA256 support |  |  |
AUTH DIGEST-MD5 support |  |  |
AUTH NTLM support |  |  |
SSL Support | POP3S & STARTTLS | POP3S & STARTTLS | POP3S
PostgreSQL |  |  |  |
Asterisk |  |  |  |
RDP | Windows Workstation |  | 2 |
Windows Server |  | 2 |
Domain Auth |  | 2 |
REDIS |  |  |  |
REXEC |  |  |  |
RLOGIN |  |  |  |
RPCAP |  |  |  |
RSH |  |  |  |
RTSP |  |  |  |
SAP R/3 |  | 1 |  |
Siemens S7-300 |  |  |  |
SIP |  | 1 |  |
SSL support | SIP over SSL |  |
SMB | NetBIOS Mode |  |  |
W2K Native Mode |  |  |
Hash mode |  |  |
Clear Text Auth |  |  |
LMv1 Auth |  |  |
LMv2 Auth |  |  |
NTLMv1 Auth |  |  |
NTLMv2 Auth |  |  |
SMTP | AUTH LOGIN support |  |  |
AUTH PLAIN support |  |  |
AUTH CRAM-MD5 support |  |  |
AUTH DIGEST-MD5 support |  |  |
AUTH NTLM support |  |  |
SSL support | SMTPS & STARTTLS | SMTPS & STARTTLS |
SMTP User Enum | VRFY cmd |  |  |
EXPN cmd |  |  |
RCPT TO cmd |  |  |
SNMP | v1 |  |  |
v2c |  |  |
v3 | (MD5/SHA1 auth only) |  |
SOCKS | v5, Password Auth |  |  |
SSH | v1 |  |  |
v2 |  |  |
SSH Keys | v1, v2 |  |  |
Subversion (SVN) |  |  |  |
TeamSpeak | TS2 | 1 |  |
Telnet |  |  |  |
XMPP | AUTH LOGIN support |  |  |
AUTH PLAIN support |  |  |
AUTH CRAM-MD5 support |  |  |
AUTH DIGEST-MD5 support |  |  |
AUTH SCRAM-SHA1 support |  |  |
VMware Auth Daemon | v1.00 / v1.10 |  |  |
SSL support |  |  |
VNC | RFB 3.x password support |  |  |
| RFB 3.x user+password support |  | (UltraVNC only) |
RFB 4.x password support |  |  |
RFB 4.x user+password support |  | (UltraVNC only) |

### Speed Comparison

This table gives some speed data (in second) for 2 popular services supported by each cracking tool (as of September 2011). The value displayed is the min value of 3 consecutive runs. Each tool was configured to run 1, 4 and 16 task(s)/job(s) at a time. A login and password lists corresponding to 20 attempts was used. The smaller the value the better.

Speed (in s) | Hydra | Medusa | Ncrack
1 Task / FTP module | 11.93 | 12.97 | 18.01
4 Tasks / FTP module | 4.20 | 5.24 | 9.01
16 Tasks / FTP module | 2.44 | 2.71 | 12.01
1 Task / SSH v2 module | 32.56 | 33.84 | 45.02
4 Tasks / SSH v2 module | 10.95 | Broken | Missed
16 Tasks / SSH v2 module | 5.14 | Broken | Missed

### Notes

1. These Hydra modules have not been checked with latest version of softwares/protocols available.
2. Medusa support is relying on a script or a wrapper.