[bug#59759] [PATCH] gnu: Add hydra.

[bug#59759] [PATCH] gnu: Add hydra.

[phodina via Guix-patches via]

[-- Attachment #1.1: Type: text/plain, Size: 112 bytes --]

Hi,

here's hydra package for doing parallel login cracking. Please use for legitimate purposes only.

----
Petr

[-- Attachment #1.2: Type: text/html, Size: 290 bytes --]

[-- Warning: decoded text below may be mangled, UTF-8 assumed --]
[-- Attachment #2: 0001-gnu-Add-hydra.patch --]
[-- Type: text/x-patch; name=0001-gnu-Add-hydra.patch, Size: 2677 bytes --]

From 34a6f226063c49d326966d01e78092a40177a05f Mon Sep 17 00:00:00 2001
From: Petr Hodina <phodina@protonmail.com>
Date: Thu, 24 Feb 2022 19:29:14 +0100
Subject: [PATCH] gnu: Add hydra.

* gnu/packages/password-utils.scm (hydra): New variable.

diff --git a/gnu/packages/password-utils.scm b/gnu/packages/password-utils.scm
index c74ffe5242..cb4c2a3667 100644
--- a/gnu/packages/password-utils.scm
+++ b/gnu/packages/password-utils.scm
@@ -38,6 +38,7 @@
 ;;; Copyright © 2022 Maxime Devos <maximedevos@telenet.be>
 ;;; Copyright © 2022 ( <paren@disroot.org>
 ;;; Copyright © 2022 Nicolas Graves <ngraves@ngraves.fr>
+;;; Copyright © 2022 Petr Hodina <phodina@protonmail.com>
 ;;;
 ;;; This file is part of GNU Guix.
 ;;;
@@ -67,6 +68,7 @@ (define-module (gnu packages password-utils)
   #:use-module (guix gexp)
   #:use-module (guix git-download)
   #:use-module (guix packages)
+  #:use-module (guix utils)
   #:use-module (gnu packages)
   #:use-module (gnu packages admin)
   #:use-module (gnu packages aidc)
@@ -103,6 +105,7 @@ (define-module (gnu packages password-utils)
   #:use-module (gnu packages python)
   #:use-module (gnu packages python-web)
   #:use-module (gnu packages python-xyz)
+  #:use-module (gnu packages rdesktop)
   #:use-module (gnu packages readline)
   #:use-module (gnu packages ruby)
   #:use-module (gnu packages security-token)
@@ -1351,6 +1354,32 @@ (define-public hashcat-utils
 group them into chains.")
     (license license:expat)))
 
+(define-public hydra
+  (package
+    (name "hydra")
+    (version "9.4")
+    (source (origin
+              (method url-fetch)
+              (uri (string-append
+                    "https://salsa.debian.org/pkg-security-team/hydra/-/archive/upstream/"
+                    version "/hydra-upstream-" version ".tar.gz"))
+              (sha256
+               (base32
+                "12m5w2rf2821gl8libbsd7pfz4dqn3g4jxh3mcg4qd2hk1c19qns"))))
+    (build-system gnu-build-system)
+    (arguments
+     `(#:tests? #f ;no test suite
+       #:make-flags (list (string-append "CC="
+                                         ,(cc-for-target)))))
+    (native-inputs (list pkg-config))
+    (inputs (list freerdp gtk+ openssl zlib))
+    (home-page "https://salsa.debian.org/pkg-security-team/hydra")
+    (synopsis "Tool to gain unauthorized access from remote to a system")
+    (description
+     "This package provides a tool to gain unauthorized
+access from remote to a system.  This tool is only for LEGAL purposes!")
+    (license license:agpl3+)))
+
 (define-public bruteforce-luks
   (package
     (name "bruteforce-luks")

base-commit: 437718442ca758a3857702cecfe5c80aa5df272b
-- 
2.38.1

[bug#59759] [PATCH] gnu: Add hydra.

[Ludovic Courtès]

Hi,

phodina <phodina@protonmail.com> skribis:

> From 34a6f226063c49d326966d01e78092a40177a05f Mon Sep 17 00:00:00 2001
> From: Petr Hodina <phodina@protonmail.com>
> Date: Thu, 24 Feb 2022 19:29:14 +0100
> Subject: [PATCH] gnu: Add hydra.
>
> * gnu/packages/password-utils.scm (hydra): New variable.

[...]

> +              (uri (string-append
> +                    "https://salsa.debian.org/pkg-security-team/hydra/-/archive/upstream/"
> +                    version "/hydra-upstream-" version ".tar.gz"))

This is a generated tarball.  Please use ‘git-fetch’ instead and make
sure to check ‘guix lint’.

> +    (home-page "https://salsa.debian.org/pkg-security-team/hydra")

According to ‘README’, upstream is actually
<https://github.com/vanhauser-thc/thc-hydra>, no?

> +    (synopsis "Tool to gain unauthorized access from remote to a system")

What about “Gain access to a remote system by trying logins and passwords”?

> +    (description
> +     "This package provides a tool to gain unauthorized
> +access from remote to a system.  This tool is only for LEGAL purposes!")

How about something like this:

  This package provides a tool to demonstrate how easy it is to gain
  unauthorized access to a system by automatically attempting logins and
  passwords.  It supports a wide range of protocols, including SSH,
  SMTP, and HTTP.

Could you send an updated patch?

Thanks,
Ludo’.

[bug#59759] [PATCH] gnu: Add hydra.

[phodina via Guix-patches via]

[-- Attachment #1: Type: text/plain, Size: 223 bytes --]

Hi Ludo’,

thanks for the review. Here's updated patch. 

Regarding the github tarball checksum I encountered this in some other patch and review discussion. So I'll stick with git-fetch in new and updated patches :-)

[-- Warning: decoded text below may be mangled, UTF-8 assumed --]
[-- Attachment #2: v2-0001-gnu-Add-hydra.patch --]
[-- Type: text/x-patch; name=v2-0001-gnu-Add-hydra.patch, Size: 2715 bytes --]

From 1d23cf1460d701b96ab28feb980876540aca40dd Mon Sep 17 00:00:00 2001
From: Petr Hodina <phodina@protonmail.com>
Date: Thu, 24 Feb 2022 19:29:14 +0100
Subject: [PATCH v2] gnu: Add hydra.

* gnu/packages/password-utils.scm (hydra): New variable.

diff --git a/gnu/packages/password-utils.scm b/gnu/packages/password-utils.scm
index 410c92d268..7de53cc6a4 100644
--- a/gnu/packages/password-utils.scm
+++ b/gnu/packages/password-utils.scm
@@ -38,6 +38,7 @@
 ;;; Copyright © 2022 Maxime Devos <maximedevos@telenet.be>
 ;;; Copyright © 2022 ( <paren@disroot.org>
 ;;; Copyright © 2022 Nicolas Graves <ngraves@ngraves.fr>
+;;; Copyright © 2022 Petr Hodina <phodina@protonmail.com>
 ;;;
 ;;; This file is part of GNU Guix.
 ;;;
@@ -67,6 +68,7 @@ (define-module (gnu packages password-utils)
   #:use-module (guix gexp)
   #:use-module (guix git-download)
   #:use-module (guix packages)
+  #:use-module (guix utils)
   #:use-module (gnu packages)
   #:use-module (gnu packages admin)
   #:use-module (gnu packages aidc)
@@ -103,6 +105,7 @@ (define-module (gnu packages password-utils)
   #:use-module (gnu packages python)
   #:use-module (gnu packages python-web)
   #:use-module (gnu packages python-xyz)
+  #:use-module (gnu packages rdesktop)
   #:use-module (gnu packages readline)
   #:use-module (gnu packages ruby)
   #:use-module (gnu packages security-token)
@@ -1348,6 +1351,35 @@ (define-public hashcat-utils
 group them into chains.")
     (license license:expat)))
 
+(define-public hydra
+  (package
+    (name "hydra")
+    (version "9.4")
+    (home-page "https://github.com/vanhauser-thc/thc-hydra")
+    (source (origin
+              (method git-fetch)
+              (uri (git-reference
+                    (url home-page)
+                    (commit (string-append "v" version))))
+              (file-name (git-file-name name version))
+              (sha256
+               (base32
+                "0dbx7yaqf4nl63pi8wmr19cxnp5v4w7fsd369krdy8hlc8k0qjgr"))))
+    (build-system gnu-build-system)
+    (arguments
+     `(#:tests? #f ;no test suite
+       #:make-flags (list (string-append "CC="
+                                         ,(cc-for-target)))))
+    (native-inputs (list pkg-config))
+    (inputs (list freerdp gtk+ openssl zlib))
+    (synopsis "Gain acces to a remote sustem by trying logins and passwords")
+    (description
+     "This package provides a tool to demonstrate how esay it is to gain
+unauthorized access to a system by automatically attempting logins
+and passwords.  It supports a wide range of protocols including SSH, SMTP
+and HTTP.")
+    (license license:agpl3+)))
+
 (define-public bruteforce-luks
   (package
     (name "bruteforce-luks")
-- 
2.38.1

bug#59759: [PATCH] gnu: Add hydra.

[Ludovic Courtès]

phodina <phodina@protonmail.com> skribis:

> From 1d23cf1460d701b96ab28feb980876540aca40dd Mon Sep 17 00:00:00 2001
> From: Petr Hodina <phodina@protonmail.com>
> Date: Thu, 24 Feb 2022 19:29:14 +0100
> Subject: [PATCH v2] gnu: Add hydra.
>
> * gnu/packages/password-utils.scm (hydra): New variable.

Fixed a couple of typos and applied, thanks!

Ludo’.