Subject: [bug#59759] [PATCH] gnu: Add hydra.

From: Ludovic Courtès <[email-masked]>
Date: Sun, 08 Jan 2023 12:20:04 +0100

Hi,

phodina <[email-masked]> skribis:

> From 34a6f226063c49d326966d01e78092a40177a05f Mon Sep 17 00:00:00 2001
> From: Petr Hodina <[email-masked]>
> Date: Thu, 24 Feb 2022 19:29:14 +0100
> Subject: [PATCH] gnu: Add hydra.
>
> * gnu/packages/password-utils.scm (hydra): New variable.

[...]

> +              (uri (string-append
> +                    "https://salsa.debian.org/pkg-security-team/hydra/-/archive/upstream/"
> +                    version "/hydra-upstream-" version ".tar.gz"))

This is a generated tarball.  Please use ‘git-fetch’ instead and make
sure to check ‘guix lint’.

> +    (home-page "https://salsa.debian.org/pkg-security-team/hydra")

According to ‘README’, upstream is actually
<https://github.com/vanhauser-thc/thc-hydra>, no?

> +    (synopsis "Tool to gain unauthorized access from remote to a system")

What about “Gain access to a remote system by trying logins and passwords”?

> +    (description
> +     "This package provides a tool to gain unauthorized
> +access from remote to a system.  This tool is only for LEGAL purposes!")

How about something like this:

  This package provides a tool to demonstrate how easy it is to gain
  unauthorized access to a system by automatically attempting logins and
  passwords.  It supports a wide range of protocols, including SSH,
  SMTP, and HTTP.

Could you send an updated patch?

Thanks,
Ludo’.