11.1. Brute force tool

11.1.1. Hydra

  • -R restore a previous aborted/crashed session

  • -S perform an SSL connect

  • -s<PORT> specify port

  • -l<LOGIN> specify username

  • -L<FILE> specify username dict

  • -p<PASS> specify password

  • -P<FILE> specify password dict

  • -e<ns> try “n” null password, “s” login as pass and/or “r” reversed login

  • -C<FILE> colon separated “login:pass” format, instead of -L/-P options

  • -M<FILE> list of servers to attack, one entry per line, ‘:’ to specify port

  • -o<FILE> save output to file

  • -f exit when a login/pass pair is found

  • -t<TASKS> run TASKS number of connects in parallel per target (default: 16)

  • -w<TIME> max timeout time(default 30s)

  • -vV show detail progress