Hydra vs. Kali Linux

One scenario that fits well Hydra's ability is to test the strength of Drupal usernames and passwords. So, as an example, if we have a Drupal site at some HTTP web address, we could use lots of methods in order to collect a list with some valid users. After we create the list and also the list of some possible passwords we can try to initiate a Hydra brute force attack. Hydra for example is not suited for finding the vulnerabilities of a host, for this other solutions can be used.

Incentivized

Kali is well suited for the following:

• Analyzing SSL certs to verify
  they are installed correctly
• Analyzing SSL configuration on
  servers to confirm correct ciphers are enabled
• Scanning our web servers for
  vulnerabilities as part of our regular security testing
• Scanning wordpress sites to
  identify out of date plugins and other potential security issues.
• Running port scans on our servers
  to make sure only certain ports are open

It is not appropriate for users who aren't already familiar with cybersecurity. Kali is an advanced OS geared for cybersecurity applications.

Incentivized

• One of most important thing is that Hydra's ability to perform HTTP post form attacks.
• The tool also can be used to attack a great number of protocols.
• The source code of the tool/software is also available for others (so it is not a closed source one).
• A good thing about this tool is also the support available and it also has a high ranking on GitHub (over 1000 stars).

Incentivized

• Open source
• Suite of tools for PT
• NEtHunter

Incentivized

• It is not a straightforward tool to use, it needs certain dependencies to be installed so it can function as intended by its creators. This is one of the most important steps that need to be done while configuring the tool as one needs.
• Sometimes the tool gives False Positives passwords.
• There are some issues in the functionality of the tool itself (like some bugs, for example affecting the running and hanging process after a number of tries), but most of them have a solution and there is big community support for the tool.

Incentivized

• Usage wise, it is tough for use by beginners. Can be improved.
• With Kali Linux have noticed driver related issues especially with Nvidia graphics cards.
• Kali Linux can be improved for use as a day to day OS.

Incentivized

There are many other tools similar to Hydra, one of them being "John the Ripper ". Notable differences are that while John the Ripper works offline, Hydra works online; also Hydra is more popular and with a wider usage as it supports Windows, Linux, and macOSX. An important thing is that both software are free to use, making both very useful tools. We can note that JTR has also a "pro" version that is not free to use and it is more optimized for speed and performance and focused on a specific operating system, while Hydra is free and offers all features at no cost.

Incentivized

As Parrot security OS is relatively new to the game, Kali Linux has an edge as it is in the market since 2013. Kali Linux has an advantage that it is opensource and has good back end technical support by open source developers worldwide. Also Parrot security OS is based on cloud environments and Kali Linux OS is made to run in house.

Incentivized

• Our business objectives are accomplished using the tool as Hydra covers our needs for a free password cracking tool.
• The tool is a free one that has a lot of advantages because it is a powerful one to use for the specific task of performing some activities that are related to penetration testing.
• The services that our business provides for several clients in the field of penetration testing are at the level our customers are expecting.

Incentivized

• Kali is a free OS which makes it very useful to install so many tools while not paying a premium

Incentivized