LinuxCommandLibrary

hydra

TLDR

Brute force SSH

$ hydra -l [user] -P [passwords.txt] ssh://[target]
copy
HTTP form brute force
$ hydra -l [admin] -P [pass.txt] [target] http-post-form "/login:user=^USER^&pass=^PASS^:Invalid"
copy
FTP brute force
$ hydra -L [users.txt] -P [pass.txt] ftp://[target]
copy
Specify threads
$ hydra -t [4] -l [user] -P [pass.txt] [target] [service]
copy
Verbose output
$ hydra -v -l [user] -P [pass.txt] [target] ssh
copy

SYNOPSIS

hydra [options] target service

DESCRIPTION

Hydra is a fast network login cracker supporting many protocols. It performs brute force attacks against remote authentication services.
The tool supports SSH, FTP, HTTP, SMB, databases, and many more protocols. It's used for authorized penetration testing and security auditing.
Hydra brute forces network logins.

PARAMETERS

TARGET

Target host.
SERVICE
Service to attack (ssh, ftp, http-post-form).
-l LOGIN
Single username.
-L FILE
Username list.
-p PASS
Single password.
-P FILE
Password list.
-t NUM
Parallel connections.
-v
Verbose output.
--help
Display help information.

CAVEATS

Authorized testing only. May trigger lockouts. Use responsibly.

HISTORY

Hydra was developed by THC (The Hacker's Choice) as a comprehensive network authentication testing tool.

SEE ALSO

ncrack(1), medusa(1), john(1)

Copied to clipboard