> For the complete documentation index, see [llms.txt](https://red.infiltr8.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://red.infiltr8.io/redteam/credentials/passwd/brute-force/online-attacking-services.md).

# Online - Attacking Services

## Theory

Online password attacks target publicly-exposed network services by submitting many passwords or passphrases with the hope of eventually guessing correctly.

## Practice

Depending on the target service, different tools can be used

* [Hydra](https://github.com/vanhauser-thc/thc-hydra) (C) can be used against **a lot (50+)** of services like FTP, [HTTP/HTTPs](/web-pentesting/web-vulnerabilities/server-side/brute-force.md), IMAP, LDAP, MS-SQL, MYSQL, RDP, SMB, SSH and many many more.
* [NetExec](https://github.com/Pennyw0rth/NetExec) (Python) can be used against LDAP, WinRM, SMB, SSH and MS-SQL.
* [Kerbrute](https://github.com/ropnop/kerbrute) (Go) and [smartbrute](https://github.com/ShutdownRepo/smartbrute) (Python) can be used against [Kerberos pre-authentication](/ad/movement/kerberos/pre-auth-bruteforce.md).

{% hint style="info" %}
For brute-force techniques against a specific protocol, you may have a look on the [following pages (Network Services)](/network-pentesting/protocols.md) or [this page for HTTP/HTTPS](/web-pentesting/web-vulnerabilities/server-side/brute-force.md).
{% endhint %}

We may use these tools with a [specifically generated wordlists](/redteam/credentials/passwd/generate-wordlists.md), or using [common, default, weak or leaked passwords](/redteam/credentials/passwd/default-weak-and-leaked-passwords.md).