TD Cyber Labs

TrainersTool Trainers / Hydra Trainer 0 / 75 pts

hydra

Hydra

Red Team · Medium · 6 lessons

Hydra throws a list of usernames and passwords at a network login — SSH, FTP, HTTP forms and more — until one works. Its power is in four flags: lowercase -l/-p for a single value, uppercase -L/-P for a file of them. Practise against 10.10.10.10, which runs SSH and FTP. The wordlist rockyou-mini.txt is already in your home directory.

1
Brute force SSH with one user and a wordlist
The classic form: -l for a known username, -P for a password file, then service://host. Hydra tries every password in the list against that user. Here 'admin' has a weak password waiting in rockyou-mini.txt.
hydra -l admin -P rockyou-mini.txt ssh://10.10.10.10
2
Try a list of usernames with -L
When you do not know the username, feed a file with -L (uppercase). Hydra tries every user against every password — the search space grows fast, so keep lists tight.
hydra -L users.txt -P rockyou-mini.txt ssh://10.10.10.10
3
Attack a different service (FTP)
Only the protocol prefix changes. Swap ssh:// for ftp:// and Hydra speaks FTP instead. The account 'ftpuser' has a password in your list.
hydra -l ftpuser -P rockyou-mini.txt ftp://10.10.10.10
4
Point at a non-default port with -s
If a service listens somewhere other than its standard port, -s tells Hydra where. The attack is identical otherwise.
hydra -l admin -P rockyou-mini.txt -s 22 ssh://10.10.10.10
5
Control the pace with -t
-t sets how many login attempts run in parallel. More is faster but noisier and can crash fragile services; SSH often needs -t 4 or the daemon drops connections.
hydra -l admin -P rockyou-mini.txt -t 4 ssh://10.10.10.10
6
Watch every attempt with -V
-V prints each user/password pair as it is tried. Useful for confirming Hydra is actually reading your list and reaching the service.
hydra -l admin -P rockyou-mini.txt -V ssh://10.10.10.10

Applications

practice 10.10.10.10--:--

learner@kali: ~ — Terminal