Hydra is a network authentication brute-force tool.

  • Run hydra with no options to see supported services.
  • Run hydra <service> -U to see service attack options.

SSH example:

hydra -l kali -P /usr/share/wordlists/rockyou.txt ssh://127.0.0.1

HTTP POST example:

hydra 10.11.0.22 http-form-post "/form/frontpage.php:user=admin&pass=^PASS^:INVALID LOGIN" -l admin -P /usr/share/wordlists/rockyou.txt -vV -f