Security Tools - Hydra


Hydra is a network logon cracker for many different services.

Http Post Form

General syntax:

$ hydra -l <username> -P <wordlist> <Target IP> http-post-form "<URL Path>:<Post Arg>=^<KEY>^:<TAGS>"

Example:

  • hydra -l molly -P /usr/share/wordlists/rockyou.txt 10.10.10.10 http-post-form "/login:username^USER^&password=^PASS^:F=incorrect"

Ssh

General syntax:

$ hydra -l <username> -P <absolute path to passwords file> <Target IP> -t <thread count> ssh