Hydra Brute Force: Quick Login Testing Guide
Hydra tests password security by brute-forcing logins.
SSH Brute Force
hydra -l root -P rockyou.txt ssh://192.168.1.100
HTTP Form Login
hydra -l admin -P rockyou.txt target.com http-post-form "/login:user=^USER^&pass=^PASS^:Invalid"
Control Speed
hydra -t 16 -l admin -P rockyou.txt ssh://target
Common Protocols
- ssh://target
- ftp://target
- smb://target
- rdp://target
Save Results
hydra -l admin -P rockyou.txt ssh://target -o results.txt
Bottom Line
Only test systems you own. Unauthorized brute-forcing is illegal.
