hydra

Brute force SSH

$ hydra -l [user] -P [passwords.txt] ssh://[target]

$ hydra -l [admin] -P [pass.txt] [target] http-post-form "/login:user=^USER^&pass=^PASS^:Invalid"

$ hydra -L [users.txt] -P [pass.txt] ftp://[target]

$ hydra -t [4] -l [user] -P [pass.txt] [target] [service]

$ hydra -v -l [user] -P [pass.txt] [target] ssh

hydra [options] target service

Hydra is a parallelized network login cracker used in authorized penetration testing and security auditing. It systematically attempts username and password combinations against remote authentication services, drawing credentials from user-supplied wordlists or single values. Multiple connection threads run in parallel (configurable with `-t`), allowing it to test a large number of combinations efficiently.
Hydra supports over 50 protocols and services out of the box, including SSH, FTP, HTTP/HTTPS (basic auth, form-based, and digest), SMB, RDP, MySQL, PostgreSQL, SMTP, IMAP, LDAP, VNC, and many more. For web applications, its `http-post-form` and `http-get-form` modules accept custom request templates with placeholder markers for injecting credentials. Results can be saved to a file for later analysis, and the tool can resume interrupted sessions.

TARGET

Target host.

Service to attack (ssh, ftp, http-post-form).

Single username.

Username list.

Single password.

Password list.

Parallel connections.

Verbose output.

Display help information.

Authorized testing only. May trigger lockouts. Use responsibly.

Hydra was developed by THC (The Hacker's Choice) as a comprehensive network authentication testing tool.

ncrack(1), medusa(1), john(1)