How to do NCrack bruteforcing for http-get service using -iL (mass scan) options where server is having different port.


Without more context we won't be able to provide exact guidance. But the following sounds like what you'll need:

ncrack -U usernames.txt -P passwords.txt -iL hosts.txt -p8080

-U defines either a single user name or a file containing user names to try. -P defines either a single password or a file containing passwords to try -iL options allows you to define multiple hosts names in a file -p allows you to select a different port for the hosts than default port 80(for http-get) - in this case port 8080.

Remember to only use this tool with explicit permissions from system owners.

  • For each target ip there is different port so how can we assign port. example , , ..... – user180053 Aug 8 '19 at 8:17
  • however In hydra we can use -M option where we can assign port and ip together,but in ncrack is it possible. – user180053 Aug 8 '19 at 8:19
  • In that case you could write a loop that runs something like this: foreach( $server in $serverlist ){ ncrack -U usernames.txt -P passwords.txt host-ip -p$portNumber } – QuantumSec Aug 8 '19 at 8:22
  • it will become very slow – user180053 Aug 8 '19 at 8:24
  • "ncrack -U usernames.txt -P passwords.txt -iL hosts.txt -p8080" with this how ncrack will find service http – user180053 Aug 8 '19 at 8:26

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.