Brute-Force Templates
21. FTP
22. SSH
25. SMTP
80. HTTP (POST)
80. HTTP (GET)
80. HTTP Basic Auth
110. POP3
139 / 445. SMB
143. IMAP
443. HTTPS (POST)
443. HTTPS (GET)
3306. MySQL
3389. RDP
5432. PostgreSQL
5900. VNC
161. SNMP
Parameters
| Parameter | Example | Description |
|---|---|---|
-l | -l admin | Attack only one user |
-L | -L users.txt | Multiple usernames |
-p | -p password123 | One password |
-P | -P rockyou.txt | Password wordlist |
-C | -C creds.txt | username:password combos |
-u | -u | Loop passwords first: try each password against all users before the next password (spray order). Default (no -u) finishes all passwords for one user first |
-e nsr | -e nsr | Try null / same / reversed password |
-t | -t 16 | Parallel connections (speed) |
-s | -s 2222 | Custom port |
-S | -S | Use SSL/TLS |
-v | -v | Show attempts |
-V | -V | Show every credential tested |
-f | -f | Stop after first valid login |
-o | -o found.txt | Save results |
-R | -R | Resume attack |
-I | -I | Ignore restore file |
-w | -w 5 | Server response timeout |
-W | -W 1 | Delay between attempts (stealth) |
-M | -M targets.txt | Multiple targets |
-m | -m | Extra module options |
-U | hydra -U ssh | Show module help |