ncrack

high-speed network authentication cracking tool

TLDR

Crack SSH login

$ ncrack -p [22] --user [root] -P [wordlist.txt] [192.168.1.1]

Crack multiple services

$ ncrack [ssh://192.168.1.1,ftp://192.168.1.2]

Use username list

$ ncrack -U [users.txt] -P [passwords.txt] [ssh://target]

Set timing template

$ ncrack -T[4] [ssh://target]

Read targets from file

$ ncrack -iL [hosts.txt] -p [22] --user [admin]

Save results to file

$ ncrack -oN [results.txt] [ssh://target] -U [users.txt] -P [passwords.txt]

Ncrack is a high-speed network authentication cracking tool. It supports multiple protocols including SSH, RDP, FTP, Telnet, HTTP, and more.Designed by Nmap developers, ncrack uses a modular architecture allowing new protocol modules.

PARAMETERS

-p ports

Target ports.

--user user

Single username.

-U file

Username list.

-P file

Password list.

-T 0-5

Timing template.

-iL file

Input target list.

-oN file

Normal output.

-oX file

XML output.

-v

Verbose.

SUPPORTED PROTOCOLS

$ ssh, rdp, ftp, telnet
http, https, pop3, imap
smb, vnc, sip, redis
mongodb, cassandra, mssql

INSTALL

sudo apt install ncrack

sudo dnf install ncrack

sudo pacman -S ncrack

brew install ncrack

nix profile install nixpkgs#ncrack

CAVEATS

Use only with authorization. May trigger security alerts. Account lockouts possible. Rate limiting recommended.

HISTORY

Ncrack was developed by the Nmap Project team, initially released in 2009 as a network authentication cracking tool complementing Nmap.