Hydra Cheatsheet

Options

  • -l <USERNAME> - Define single username
  • -L <WORDLIST> - Path to username wordlist
  • -p <PASSWORD> - Define single password
  • -P <WORDLIST> - Path to password wordlist
  • -s <PORT - Specify non default port
  • -o <FILENAME> - Outputs found credentials to file`
  • -v - Verbose mode. Shows each password attempt.

Example Commands

HTTP GET

hydra -l/-L <USERNAME/WORDLIST> -p/-P <PASSWORD/WORDLIST>  -f <IP> http-get <URI>

HTTP POST Form

hydra -l/-L <USERNAME/WORDLIST> -p/-P <PASSWORD/WORDLIST>  -f <IP> http-post-form "<URI>:<POST STATEMENT>:<FAILURE MESSAGE>"

pop3

hydra -l/-L <USERNAME/WORDLIST> -p/-P <PASSWORD/WORDLIST> -s <PORT> -f <IP> -pop3 -v