I was performing a Hydra attack on my TP-Link router and for that I prepared a passwords.txt file with 288 passwords.
hydra -l webadmin -P test_creds/passwords.txt xxx.xxx.xxx.xxx ftp
A minute after I set Hydra off it showed me the following message:
[STATUS] 405.00 tries/min, 405 tries in 00:01h, 18446744073709551500 todo in 5124095576030430:60h
What I don't understand is what
405 tries in 00:01h and
18446744073709551500 todo in 5124095576030430:60h mean. As I understand it, Hydra is telling me that it's about to make 5124095576030430 login attempts in 60 hours. But mathematically speaking when you combine 288 passwords with 1 username you get a total of
288 * 1 credentials and if, as shown in it's first output, it is attempting
405.00 tries/min it should only take around 43 seconds to try all of them. Now, that's not what's happening. So what do those numbers mean?