Information Security Stack Exchange is a question and answer site for information security professionals. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm conducting some basic pen testing against a page protected with Basic Authentication. I've sucessfully tested with Medusa and Hydra but am struggling to get the syntax correct for ncrack.

The syntax I have been using usually gives the following error (which I am not entirely sure what it means)

Starting Ncrack 0.4ALPHA ( ) at 2014-05-10 13:37 EDT
Failed to resolve given hostname/IP: . Note that you can't use '/mask' AND '1-4,7,100-' style IP ranges*

the web page is hosted on a local vm pointing to the webpage /~alice/secret/

ncrack -m http -U users -P adobe25 http://webserver_ip -path /~alice/secret/

Any help on explaining/fixing this syntax would be greatly appreciated.

share|improve this question
just in case you copy paste that command line, you did realise you've missed the leading h off the URL? – Rоry McCune May 10 '14 at 19:47
Hi Rory, yeah I did, it was throwing errors at me saying that I couldn't post more than 2 links, so I dropped the 'http' down to 'ttp' - I should have mentioned that. Thanks :) – user46352 May 11 '14 at 11:46
pretty sure you don't put http as the target. You would just put the hostname (or IP addr/prefix) and then use -p <port number> – atdre Oct 10 '14 at 15:26

The path option needs to be used in conjunction with the -g (global) or -m (module-specific) option, like so:

ncrack -m http -U users -P adobe25 http://webserver_ip -g path=/~alice/secret/

Please note, however, that Ncrack is not maintained. You would probably be better off using Nmap's http-brute script. From the Ncrack web page:

Deprecation Notice: Ncrack was written as a "Google Summer of Code" Project in 2009. While it is useful for some purposes, it is unfinished, alpha quality software and isn't currently maintained. Instead, we generally recommend the brute force scripts included as part of Nmap's Scripting Engine (NSE).

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.