Xhydra Brute Force Password Cracker
*****************DISCLAIMER************************
This tutorial is designed to show security flaws in common passwords, it is intended for educational and experimental purposes only. Using these methods on a password you do not have control over is illegal. I am not responsible for how you use this information.
***************************************************

This tutorial is for using the gui of a program called THC Hydra, the gui is called xHydra. It can be used to brute force a huge number of passwords, including Telnet and FTP.

Setup
First, install Xhydra by opening a terminal window (Applications-->Accessories-->Terminal) and typing the following command:
sudo apt-get install hydra
Next, we need to have a dictionary file for Xhydra to use when brute forcing passwords. It is easy to make one with Dictionary Maker, or you can download a fairly comprehensive dictionary here. Now, to open hydra in the GUI mode, type
sudo xhydra
Brute Force a Password With Xhydra
1.On the target tab, you will be required to select a target, it can be either an ip address, or a domain name, I am going to use the domain name of my hosting service.
2. Now, you have to pick the protocol of the password, in my case it is an FTP password.
3.Click the passwords tab, and you will be required to pick either a username, or a username list, if you know the username, enter it, if not, click in the username list box, and navigate to the dictionary file you used above, or use a name list, many of which are available on google.
4.If you know the password, enter it, if not, click inside the password list box, and navigate to the dictionary file from above.
5.There are some useful settings under the tuning and specific tags, but for our purposes, we are going to skip to the start tab. Click start at the bottom of the window to begin the brute force.
Sit back, and be patient, depending on the password, whether or not you already know the user name, the speed of your computer, the speed of your connection to the target and the size of your dictionary fiel, this process could take any where from a few seconds, to a few years, to never.