security enabled verified medium v1.0.0

ncrack

High-speed network authentication cracking tool for testing credential strength across multiple network services.

📋 Live Preview 
ncrack -u {username} -P {password-list} {target}:{service}
🌍 username → admin 🌍 password-list → 🌍 target → 🌍 service → ssh 
ncrack -u {username} -P {password-list} {target}:{service}

Sandbox: execFile · Timeout: 3600s

Capabilities

security.crack.password
security.auth.bruteforce
network.auth.test

Parameters

Name Type Required Default Description Aliases
flag-i string No - Input file with target specifications -i, --input-file
flag-u string No - Single username to test -u, --username
flag-U string No - File with list of usernames -U, --username-list
flag-p string No - Single password to test -p, --password
flag-P string No - File with list of passwords -P, --password-list
flag-s string No - Service to test (e.g. ssh, ftp, rdp) -s, --service
flag-m string No - Module-specific options -m, --module-options
flag-f boolean No - Stop after first valid credential -f, --stop-after-first
flag-F boolean No - Stop after first credential per service -F, --stop-all-first
flag-T integer No - Number of parallel threads -T, --threads
flag-t string No - Timing template (0-5, higher is faster) -t, --timing
flag-v boolean No - Verbose output -v, --verbose
flag-o string No - Output file for results -o, --output
flag-r integer No - Number of retries on connection failure -r, --retries
flag-d integer No - Delay in milliseconds between attempts -d, --delay
flag-x string No - Password generation pattern -x, --generate-password
connection-limit integer No - Maximum simultaneous connections --connection-limit
rate integer No - Maximum attempts per second --rate
flag-6 boolean No - Use IPv6 -6, --ipv6
ssl boolean No - Use SSL/TLS for connection --ssl
log string No - Log file path --log
6 boolean No - Use IPv6 -6, --ipv6
N boolean No - Suppress Ncrack banner -N, --no-banner
m boolean No - options -m, --module-options, -specific
proxy boolean No - Use proxy (proto://host:port) --proxy
proxy_auth boolean No - Proxy authentication credentials --proxy-auth
spec boolean No - Service specific options --spec
x boolean No - Password generation pattern -x, --generate-password

Artifacts

TypeDescriptionMIMESchemaTrust
security.crack.resultsBrute-force results logtext/plain-verified

Contract

Inputs

network.target.ip

Target IP address or hostname

security.username.list

File containing usernames

security.password.list

File containing passwords

Outputs

security.valid.credentials

Successfully discovered credentials

Side effects: network_trafficfilesystem_write

Workflow Edges

Produces

security.valid.credentials

Consumes

network.target.ipsecurity.username.listsecurity.password.list

Resource Profile

ResourceValue
CPUmedium
Memory128 MB
Networkhigh
Disk I/Olow

Examples

Brute-force SSH with password list

ncrack -u root -P passwords.txt 192.168.1.100:ssh

Brute-force RDP with username list

ncrack -U users.txt -P passwords.txt 192.168.1.100:rdp

Multiple targets from input file

ncrack -i targets.txt -U users.txt -P passwords.txt

Stop after first credential found

ncrack -u admin -P passwords.txt -f 192.168.1.100:ssh

Verbose mode with timing template

ncrack -u admin -P passwords.txt -v -t 3 192.168.1.100:ssh

Custom rate limit and connection limit

ncrack -u admin -P passwords.txt --rate=50 --connection-limit=10 192.168.1.100:rdp

SSL-enabled service on custom port

ncrack -u admin -P passwords.txt --ssl 192.168.1.100:https

Save results to output file

ncrack -u admin -P passwords.txt -o results.txt 192.168.1.100:ftp

Documentation

Ncrack — High-Speed Network Cracker

Ncrack is a high-speed network authentication cracking tool built on the Nmap ecosystem. It is designed for rapid credential testing across network services with an emphasis on performance and flexibility.

Supported Services

Service Argument Default Port
SSH ssh 22
RDP rdp 3389
FTP ftp 21
HTTP(S) http / https 80/443
Telnet telnet 23
IMAP imap 143
POP3 pop3 110

Performance Tuning

  • -T — set number of parallel threads
  • --rate=N — max attempts per second
  • --connection-limit=N — max simultaneous connections
  • -t 0-5 — timing template (aggressive=5, polite=0)

Timing Templates

Template Name Description
0 Polite Slows down to avoid detection
1 Normal Default timing
2 Aggressive Faster, more noise
3 Crazy Very aggressive
4 Insane Maximum speed

Related Tools

hydramedusa

References