Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 227
  • Last Modified:

Brute forcing SSH and FTP

What is the best tool to audit accounts on a ssh and ftp box? Hydra? Brutus?
This is being done for work before the HIPPA audits lol
Thanks
0
dissolved
Asked:
dissolved
  • 2
3 Solutions
 
pjcrooks2000Commented:
I am not sure you will be able to listen in on ssh as it uses Secure shell, basically the messages are encrypted.. I reckon you know that already.  ftp is a different kettle of fish.  If your running an ftp server then there should be logging capabilities included and if not then replace your ftp server so that you do have logging capabilities.

As for the ssh I will be inerested to learn if it is crackable, although I did see a security issue related to it a while back on the cert advisory website.  I think they have patched it by now so... good luck with that!  I would not imagine you can eavesdrop on it though.

:)
0
 
rsripracCommented:
I would reccomend running Nessus:

http://www.nessus.org/

I think that HIPPA cert does not go that far into bruting for weak login/password.  I'd be more worried with vurnabilities in the software.  However nessus does, I believe, do test of default/weak logins and pass.

-Ram
0
 
dissolvedAuthor Commented:
Thanks guys!
0
 
pjcrooks2000Commented:
Your welcome :)
0

Featured Post

Receive 1:1 tech help

Solve your biggest tech problems alongside global tech experts with 1:1 help.

  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now