From b375bbc33264f3cedd0b75096a663c36c88b3770 Mon Sep 17 00:00:00 2001
From: vanhauser-thc <vh@thc.org>
Date: Tue, 29 Jun 2021 12:15:03 +0200
Subject: [PATCH] skip host when password is found on password-only checks

---
 CHANGES | 2 ++
 hydra.c | 3 +++
 2 files changed, 5 insertions(+)

diff --git a/CHANGES b/CHANGES
index b481211..1afb314 100644
--- a/CHANGES
+++ b/CHANGES
@@ -3,6 +3,8 @@ Changelog for hydra
 
 Release 9.3-dev
 * fix for ssh to support -M or ip/range
+* for vnc/cisco/... protocols that only check for a password, skip host
+  after the password is found
 
 
 Release 9.2
diff --git a/hydra.c b/hydra.c
index 0c889f8..6c5b82f 100644
--- a/hydra.c
+++ b/hydra.c
@@ -3310,6 +3310,9 @@ int main(int argc, char *argv[]) {
       hydra_options.port = port;
     }
 
+    if (hydra_options.login == NULL && hydra_options.loginfile == NULL)
+      hydra_options.exit_found = 1;
+
     if (hydra_options.ssl == 0 && hydra_options.port == 443)
       fprintf(stderr, "[WARNING] you specified port 443 for attacking a http "
                       "service, however did not specify the -S ssl switch nor "