So, I guess you want to crack hotmail accounts? Well I'm here to show you.
Fed up of downloading bruteforcing applications? Ones that don't work? Or you're scared they may be backdoored?

Let's use a tool that is legitimate for breaking the security on logins.
This tool is called Hydra.

You can download it from..
http://www.thc.org/thc-hydra/

Because I use GNU/Linux, this tutorial will be based on Ubuntu 12.04.
Don't worry if you use Windows, the commands are pretty much the same.

Open a terminal and type...

If you prefer a GTK/GUI version.

Only the command line/terminal version is covered in this tutorial.
I want you to use less of GUI's, we are using Linux after all :)

Let's go!
So.. if you type..

You'll get a list of options to choose from,
We want to attack the SMTP - which is the mail server, for hotmail.
Because Hotmail runs on SSL connections, we need to specify the SSL port when attacking.

The full command looks like this..

Make sure you FIRST change to the wordlist directory, if you saved the 14 million pass to the Desktop..



These options mean...

Quote:hydra - We use the application name.

-V - This shows the output of passwords it checks, you can also add -Vv for extra verbosity [errors, warnings etc - Not really recommended, as it just floods the window]

-S - Use an SSL connection [Needed!]

-P The dictionary list we will use to attack the given Hotmail address [ I will post a link to a 14 million wordlist, perfect for cracking!]

-e ns - try "n" null password, "s" login as pass

-o "Cracked" - Once the password has been cracked, it will store it in a nice file called "Cracked" [Note your directory!]

-t 8 - The number of tasks to use, 8 is fine, any more could cause too many passwords checking and overload the times it gets to check each individual password.

Server - Service - pop3.live.com pop3 - We want to use Hotmail's pop3 server with the service pop3!

-s 995 - This is the SSL port [Needed!]

Upon hitting enter, it should start cracking!
If you get errors, like timeout errors, re-check your terminal command, an error isn't because the bruteforce doesn't work, it just means there is something wrong with the command (Unless Hotmail put a security lock on!)

Here is a picture of me Cracking!


Here is the 14 million wordlist.

If you want to resume the attack at a later day, use the command..

Not using this command will overwrite the recovery file and start from the beginning.

Hope you guys like.
Please, if you share this, give me credits :)