Hydra

Overview

Brute force network protocols

Resources

GitHub - vanhauser-thc/thc-hydra: hydraGitHub

Installation

sudo apt install hydra

Usage

Commands

Help

hydra -h

HTTP-Get username:pass

hydra -C <wordlist> <ip> -s <port> http-get /

HTTP-Get username

hydra -L <username-list> -p <password> -f <ip> -s <port> http-get /

HTTP-Get password

hydra -l <username> -P <password-list> -f <ip> -s <port> http-get /

POST Form

hydra -l <username> -P <password-list> <ip> -s <port> http-post-form "/<page>:<username-post-data>=^USER^&<password-post-data>=^PASS^:F=<string-logged-out>"

SSH

hydra -L <username-list> -P <password-list> ssh://<ip> -t 4

FTP

hydra -l <username> -P <password-list> ftp://<ip>

RDP

hydra -L <username-list> -P <password-list> rdp://<ip>

SMB

hydra -L <username-list> -P <password-list> smb://<ip>

Another useful options

stop after successful login

-f

Try all users on each password

-u

Set username

-l test

Set Password

-p test