Used for performing online password cracking
# Bruteforce Service
hydra -l <username> -P <password-list> <ip-address> <service-name>
# Bruteforce Website
hydra -l <username> -P <password-list> -f -v <ip-address> -s <port> http-post-form "/login.php:pin=^PASS^:Access denied"
# Username: ^USER^
# Redirect when Match is Found
hydra -l <username> -P <password-list> -f -v <ip-address> -s <port> http-post-form "/login.php:pin=^PASS^:S=302"Flags
-L : List of Usernames
-p : Single Password
-t <num> : Number of tasks to run in parallel (Default : 16)
-f: Stop when watch is found
How to Brute Force Websites & Online Forms Using Hydra | Infinite Logins
NOTE
- For SSH set no. of parallel tasks (-t) to 4
- On Kali Linux wide compatibility mode has to be enabled for cracking of SSH passwords of old systems