Hydra
Fast online password brute-forcing tool supporting many protocols
Methods10 commands
#bruteforce#password#authentication#networking
Installation
1Install via package manager
2Or compile from source
3Verify installation
# Kali Linux
apt install hydra
# macOS
brew install hydra
# Verify
hydra --helpBasic Usage
Brute-force login credentials for various network services
# SSH bruteforce
hydra -l admin -P passwords.txt ssh://target.com
# Web form bruteforce
hydra -l user -P pass.txt target.com http-post-form "/login:user=^USER^&pass=^PASS^:F=incorrect"
# FTP bruteforce
hydra -L users.txt -P passwords.txt ftp://target.comCommand Reference
10 commands
1Single username
-l2Username wordlist
-L3Single password
-p4Password wordlist
-P5Tasks per target (threads)
-t6Verbose output
-v7Stop after first success
-f8Custom port
-s9Output file
-o10Web form attack module
http-post-formWhen to Use
1
Password auditing and recovery2
Testing weak credentials3
CTF challenges4
Post-exploitation lateral movement5
Validating password policiesNotes & Tips
1
Supports 50+ protocols (SSH, FTP, HTTP, MySQL, etc.)2
Use -f flag to stop on first valid password3
Combine with CeWL for targeted wordlists4
Rate limiting may cause false negativesCommon Errors & Solutions
Connection refused
Check if service is running on the target
Too many connections
Reduce threads with -t flag
Invalid module
Use hydra -h to list available modules