You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
240 lines
5.5 KiB
240 lines
5.5 KiB
#compdef hydra |
|
|
|
tokens=(${(z)LBUFFER}) |
|
|
|
|
|
if [[ "${LBUFFER[-1]}" == " " ]]; then |
|
previousArg="${tokens[-1]}" |
|
else |
|
previousArg="${tokens[-2]}" |
|
fi |
|
|
|
services=( |
|
"adam6500" |
|
"asterisk" |
|
"afp" |
|
"cisco" |
|
"cisco-enable" |
|
"cvs" |
|
"firebird" |
|
"ftp" |
|
"ftps" |
|
"http-head" |
|
"https-head" |
|
"http-get" |
|
"https-get" |
|
"http-post" |
|
"https-post" |
|
"http-get-form" |
|
"https-get-form" |
|
"http-post-form" |
|
"https-post-form" |
|
"http-proxy" |
|
"http-proxy-urlenum" |
|
"icq" |
|
"imap" |
|
"imaps" |
|
"irc" |
|
"ldap2" |
|
"ldap2s" |
|
"ldap3" |
|
"ldap3s" |
|
"ldap3-crammd5" |
|
"ldap3-crammd5s" |
|
"ldap3-digestmd5" |
|
"ldap3-digestmd5s" |
|
"mssql" |
|
"mysql" |
|
"nntp" |
|
"oracle-listener" |
|
"oracle-sid" |
|
"pcanywhere" |
|
"pcnfs" |
|
"pop3" |
|
"pop3s" |
|
"postgres" |
|
"radmin2" |
|
"redis" |
|
"rexec" |
|
"rlogin" |
|
"rpcap" |
|
"rsh" |
|
"rtsp" |
|
"s7-300" |
|
"sip" |
|
"smb" |
|
"smtp" |
|
"smtps" |
|
"smtp-enum" |
|
"snmp" |
|
"socks5" |
|
"ssh" |
|
"sshkey" |
|
"svn" |
|
"teamspeak" |
|
"telnet" |
|
"telnets" |
|
"vmauthd" |
|
"vnc" |
|
"xmpp" |
|
) |
|
|
|
min_max_charset(){ |
|
_message -r "$(hydra -x -h)" |
|
} |
|
|
|
service_help(){ |
|
if [ "$1" = "new" ]; then |
|
service="$( echo "${tokens[-1]}" | cut -d':' -f1)" |
|
_message -r "$(hydra -U $service)" |
|
else |
|
_message -r "$(hydra -U $previousArg)" |
|
fi |
|
} |
|
service_list(){ |
|
_describe "Services" services |
|
} |
|
|
|
|
|
|
|
args=( |
|
"-R[restore a previous aborted/crashed session]" |
|
"-I[ignore an existing restore file (don't wait 10 seconds)]" |
|
"-S[perform an SSL connect]" |
|
"-s[if the service is on a different default port, define it here]:value" |
|
"-l[login with LOGIN name]:value" |
|
"-L[load several logins from a file]:filename:_files" |
|
"-p[try password PASS]:value" |
|
"-P[load several passwords from a file]:filename:_files" |
|
"-C[colon separated \"login:pass\" format, instead of -L/-P options]:filename:_files" |
|
"-x[MIN:MAX:CHARSET password bruteforce generation, type \"-x -h\" to get help]:min-max:min_max_charset" |
|
"-y[disable use of symbols in bruteforce, see above]" |
|
"-e[Extra passowrds to try options (nsr)]:nsr:_values -s '' \"Options\" \"n[Null Password]\" \"s[Login as Password]\" \"r[Reversed Login as Password]\"" |
|
"-u[loop around users, not passwords (effective! implied with -x)]" |
|
"-M[list of servers to attack, one entry per line, ':' to specify port]:filename:_files" |
|
"-o[write found login/password pairs to FILE instead of stdout]:filename:_files" |
|
"-b[specify the format for the -o FILE]:format:_values \"Ouptut type\" text json jsonv1" |
|
"-f[exit when a login/pass pair is found (-M: -f per host)]" |
|
"-F[exit when a login/pass pair is found (-M: -F global)]" |
|
"-t[run X number of connects in parallel per target (default: 16)]:value" |
|
"-T[run X connects in parallel overall (for -M, default: 64)]:value" |
|
"-w[wait x time for a response (32)]:value" |
|
"-W[wait x time between connects per thread (0)]" |
|
"-c[wait x time per login attempt over all threads (enforces -t 1)]" |
|
"-4[use IPv4 (default)]" |
|
"-6[use IPv6 addresses (put always in \[\] also in -M)]" |
|
"-v[verbose mode]" |
|
"-V[show login+pass for each attempt]" |
|
"-d[debug mode]" |
|
"-O[use old SSL v2 and v3]" |
|
"-q[do not print messages about connection errors]" |
|
"-U[service module usage details]:services:service_list" |
|
"-h[COMPLETE HELP]" |
|
) |
|
|
|
declare -a delete |
|
if (( ${tokens[(I)-l]} )); then |
|
delete=("-L" "-C") |
|
elif (( ${tokens[(I)-L]} )); then |
|
delete=("-l" "-C") |
|
elif (( ${tokens[(I)-p]} )); then |
|
delete=("-P" "-C") |
|
elif (( ${tokens[(I)-P]} )); then |
|
delete=("-p" "-C") |
|
elif (( ${tokens[(I)-C]} )); then |
|
delete=("-l" "-L" "-p" "-P") |
|
fi |
|
|
|
for target in "${delete[@]}"; do |
|
args=("${(f)$(echo -e "${(pj:\n:)args}" | grep -v "^${target}")}") |
|
done |
|
#&& fzf_dirs "$current" || fzf_files "$current" |
|
|
|
|
|
local -a line expl |
|
local -i ret=1 |
|
typeset -A opt_args |
|
|
|
|
|
# Hydra has 2 syntaxes. They are: |
|
# |
|
# hydra [some command line options] [-s PORT] TARGET PROTOCOL [MODULE-OPTIONS] |
|
# or |
|
# hydra [some command line options] PROTOCOL://TARGET:PORT/MODULE-OPTIONS |
|
# |
|
# The protocol:// option is considered the new version but can only be used if there is 1 target |
|
|
|
newSyntax="either" |
|
targetNeeded="true" |
|
|
|
# If the -M option is given, we need to use the old syntax |
|
if (( ${tokens[(I)-M]} )); then |
|
newSyntax="false" |
|
targetNeeded="false" |
|
fi |
|
|
|
if $(echo "$BUFFER" | grep -Eq "(${(j:|:)services}) "); then |
|
newSyntax="false" |
|
fi |
|
|
|
|
|
#if [ "$newSyntax" != "false" ]; then |
|
# _arguments -C -s "${args[@]}" ':service:->hydra_service' && return |
|
# case $state in |
|
# hydra_service) |
|
# if compset -P "(${(j:|:)services})://*/"; then |
|
# service_help "new" |
|
# elif compset -P "(${(j:|:)services})://*:"; then |
|
# _message -r "service://host:port/options" |
|
# elif compset -P "(${(j:|:)services})://"; then |
|
# _hosts -S ':' && ret=0 |
|
# else |
|
# compadd -S '://' -q -a services && ret=0 |
|
# fi |
|
# ;; |
|
# esac |
|
#else |
|
_arguments -C -s "${args[@]}" ':target:->param1' ':service:->param2' ':options:->param3' && return |
|
case $state in |
|
param1) |
|
if [ "$newSyntax" != "false" ]; then |
|
if compset -P "(${(j:|:)services})://*/"; then |
|
newSyntax="true" |
|
service_help "new" |
|
elif compset -P "(${(j:|:)services})://*:"; then |
|
_message -r "service://host:port/options" |
|
newSyntax="true" |
|
elif compset -P "(${(j:|:)services})://"; then |
|
_hosts -S ':' |
|
newSyntax="true" |
|
else |
|
compadd -S '://' -q -a services |
|
fi |
|
fi |
|
|
|
if [ "$newSyntax" != "true" ]; then |
|
if [ "$targetNeeded" = "true" ]; then |
|
_hosts |
|
else |
|
compadd -q -a services |
|
fi |
|
fi |
|
;; |
|
param2) |
|
if [ "$newSyntax" != "true" ]; then |
|
if [ "$targetNeeded" = "true" ]; then |
|
compadd -q -a services |
|
else |
|
service_help |
|
fi |
|
fi |
|
;; |
|
param3) |
|
if [ "$newSyntax" != "true" ]; then |
|
if [ "$targetNeeded" = "true" ]; then |
|
service_help |
|
fi |
|
fi |
|
;; |
|
esac |
|
#fi
|
|
|