{"id":1463,"date":"2023-10-02T00:00:00","date_gmt":"2023-10-01T22:00:00","guid":{"rendered":"https:\/\/demo.sidekick.be\/itenium\/hacking-tool-hydra\/"},"modified":"2025-11-28T13:31:43","modified_gmt":"2025-11-28T12:31:43","slug":"hacking-tool-hydra","status":"publish","type":"post","link":"https:\/\/demo.sidekick.be\/itenium\/blog\/security\/hacking-tool-hydra\/","title":{"rendered":"Hacking Tool: hydra"},"content":{"rendered":"<h1 id=\"how\">How<\/h1>\n<pre><code class=\"language-sh\">hydra -l user -P rockyou.txt ftp:\/\/192.168.1.6 -t8 -v -I\n<\/code><\/pre>\n<p>Flags used:<\/p>\n<ul>\n<li><code>-l user<\/code>: the vulnerable username\n<ul>\n<li><code>-L file<\/code>: load several logins from <code>file<\/code><\/li>\n<\/ul>\n<\/li>\n<li><code>-P file<\/code>: the wordlist file<\/li>\n<li><code>ftp\/\/ip<\/code>: the <code>service:\/\/server[:PORT]<\/code><\/li>\n<li><code>-t8<\/code>: amount of parallel attempts (default 16)<\/li>\n<li><code>-v<\/code>: verbose mode\n<ul>\n<li><code>-V<\/code>: show login+pass for each attempt<\/li>\n<li><code>-d<\/code>: debug mode<\/li>\n<\/ul>\n<\/li>\n<li><code>-I<\/code>: ignore an existing restore file<\/li>\n<\/ul>\n<h2 id=\"docker\">Docker<\/h2>\n<p>This assumes that you have a <code>wordlist.txt<\/code> file in your working directory.<\/p>\n<pre><code class=\"language-sh\"># Display all options\ndocker run --rm vanhauser\/hydra -h\n\n# Map a volume with a wordlist\ndocker run -v $(pwd):\/data --rm vanhauser\/hydra -l user -P \/data\/wordlist.txt ftp:\/\/ip -t8 -v -I\n<\/code><\/pre>\n<h2 id=\"wordlists\">Wordlists<\/h2>\n<p><a href=\"https:\/\/www.kali.org\/tools\/wordlists\/\">Wordlists<\/a> contain common passwords. A famous one is <code>rockyou.txt<\/code> (14M).<\/p>\n<h1 id=\"when\">When<\/h1>\n<p>Whenever you figure out that a certain protocol and user has a weak password, it\u2019s time to whip out Hydra! Check the Security Audit Blog during itenium\u2019s Security Bootcamp for such clue!<\/p>\n<h1>Also in this series<\/h1>\n<ul>\n<li>Part 1: <a href=\"\/security\/hacking-tool-nmap\/\">Hacking Tool: nmap<\/a><\/li>\n<li>This Part: Hacking Tool: hydra<\/li>\n<li>Part 3: <a href=\"\/security\/hacking-tool-sqlmap\/\">Hacking Tool: sqlmap<\/a><\/li>\n<li>Part 4: <a href=\"\/security\/introducing-the-security-bootcamp\/\">The Security Bootcamp<\/a><\/li>\n<li>Part 5: <a href=\"\/security\/security-bootcamp-prep\/\">Security Bootcamp Prep<\/a><\/li>\n<\/ul>\n<h1>Extras<\/h1>\n<p><b>Other interesting reads<\/b><\/p>\n<ul>\n<li><a href=\"https:\/\/hub.docker.com\/r\/vanhauser\/hydra\">Hydra docker image<\/a><\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"<p>Show how easy it would be to gain unauthorized access to a system remotely.<\/p>\n<h1 class=\"hide-from-excerpt\" id=\"what\">What<\/h1>\n<p>Hydra is a brute-force tool to perform dictionary attacks against protocols such as Ftp, Http(s), Cisco, Oracle, Postgres, SMTP, Telnet, SSH and many more.<\/p>\n<p><a href=\"https:\/\/github.com\/vanhauser-thc\/thc-hydra\" class=\"github\"><img decoding=\"async\" src=\"https:\/\/img.shields.io\/github\/stars\/vanhauser-thc\/thc-hydra.svg?style=social&amp;label=Star\" \/><\/a><a href=\"https:\/\/github.com\/vanhauser-thc\/thc-hydra\">vanhauser-thc\/thc-hydra<\/a>: hydra<\/p>\n","protected":false},"author":1,"featured_media":2017,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"inline_featured_image":false,"footnotes":""},"categories":[30],"tags":[31,6],"class_list":["post-1463","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-security","tag-hacking","tag-tutorial"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v26.5 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Hacking Tool: hydra - Itenium<\/title>\n<meta name=\"robots\" content=\"noindex, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Hacking Tool: hydra - Itenium\" \/>\n<meta property=\"og:description\" content=\"Show how easy it would be to gain unauthorized access to a system remotely.WhatHydra is a brute-force tool to perform dictionary attacks against protocols such as Ftp, Http(s), Cisco, Oracle, Postgres, SMTP, Telnet, SSH and many more.vanhauser-thc\/thc-hydra: hydra\" \/>\n<meta property=\"og:url\" content=\"https:\/\/demo.sidekick.be\/itenium\/blog\/security\/hacking-tool-hydra\/\" \/>\n<meta property=\"og:site_name\" content=\"Itenium\" \/>\n<meta property=\"article:published_time\" content=\"2023-10-01T22:00:00+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2025-11-28T12:31:43+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/demo.sidekick.be\/itenium\/wp-content\/uploads\/2025\/11\/hacking-hydra.png\" \/>\n\t<meta property=\"og:image:width\" content=\"360\" \/>\n\t<meta property=\"og:image:height\" content=\"300\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Usdevelop\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Usdevelop\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"1 minute\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/demo.sidekick.be\/itenium\/blog\/security\/hacking-tool-hydra\/\",\"url\":\"https:\/\/demo.sidekick.be\/itenium\/blog\/security\/hacking-tool-hydra\/\",\"name\":\"Hacking Tool: hydra - Itenium\",\"isPartOf\":{\"@id\":\"https:\/\/demo.sidekick.be\/itenium\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/demo.sidekick.be\/itenium\/blog\/security\/hacking-tool-hydra\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/demo.sidekick.be\/itenium\/blog\/security\/hacking-tool-hydra\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/demo.sidekick.be\/itenium\/wp-content\/uploads\/2025\/11\/hacking-hydra.png\",\"datePublished\":\"2023-10-01T22:00:00+00:00\",\"dateModified\":\"2025-11-28T12:31:43+00:00\",\"author\":{\"@id\":\"https:\/\/demo.sidekick.be\/itenium\/#\/schema\/person\/6ab401ce01e858184ee4a8667fe0f022\"},\"breadcrumb\":{\"@id\":\"https:\/\/demo.sidekick.be\/itenium\/blog\/security\/hacking-tool-hydra\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/demo.sidekick.be\/itenium\/blog\/security\/hacking-tool-hydra\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/demo.sidekick.be\/itenium\/blog\/security\/hacking-tool-hydra\/#primaryimage\",\"url\":\"https:\/\/demo.sidekick.be\/itenium\/wp-content\/uploads\/2025\/11\/hacking-hydra.png\",\"contentUrl\":\"https:\/\/demo.sidekick.be\/itenium\/wp-content\/uploads\/2025\/11\/hacking-hydra.png\",\"width\":360,\"height\":300,\"caption\":\"a three-headed fire hydra breaking through castle walls\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/demo.sidekick.be\/itenium\/blog\/security\/hacking-tool-hydra\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/demo.sidekick.be\/itenium\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Hacking Tool: hydra\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/demo.sidekick.be\/itenium\/#website\",\"url\":\"https:\/\/demo.sidekick.be\/itenium\/\",\"name\":\"Itenium\",\"description\":\"We build software. We build careers.\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/demo.sidekick.be\/itenium\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/demo.sidekick.be\/itenium\/#\/schema\/person\/6ab401ce01e858184ee4a8667fe0f022\",\"name\":\"Usdevelop\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/demo.sidekick.be\/itenium\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/cc8cf9b9e9d5bbe7e8d247907cc9ac8457bbfa2854b52eaddf6529adfe88ceab?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/cc8cf9b9e9d5bbe7e8d247907cc9ac8457bbfa2854b52eaddf6529adfe88ceab?s=96&d=mm&r=g\",\"caption\":\"Usdevelop\"},\"sameAs\":[\"https:\/\/demo.sidekick.be\/itenium\"]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Hacking Tool: hydra - Itenium","robots":{"index":"noindex","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"og_locale":"en_US","og_type":"article","og_title":"Hacking Tool: hydra - Itenium","og_description":"Show how easy it would be to gain unauthorized access to a system remotely.WhatHydra is a brute-force tool to perform dictionary attacks against protocols such as Ftp, Http(s), Cisco, Oracle, Postgres, SMTP, Telnet, SSH and many more.vanhauser-thc\/thc-hydra: hydra","og_url":"https:\/\/demo.sidekick.be\/itenium\/blog\/security\/hacking-tool-hydra\/","og_site_name":"Itenium","article_published_time":"2023-10-01T22:00:00+00:00","article_modified_time":"2025-11-28T12:31:43+00:00","og_image":[{"width":360,"height":300,"url":"https:\/\/demo.sidekick.be\/itenium\/wp-content\/uploads\/2025\/11\/hacking-hydra.png","type":"image\/png"}],"author":"Usdevelop","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Usdevelop","Est. reading time":"1 minute"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/demo.sidekick.be\/itenium\/blog\/security\/hacking-tool-hydra\/","url":"https:\/\/demo.sidekick.be\/itenium\/blog\/security\/hacking-tool-hydra\/","name":"Hacking Tool: hydra - Itenium","isPartOf":{"@id":"https:\/\/demo.sidekick.be\/itenium\/#website"},"primaryImageOfPage":{"@id":"https:\/\/demo.sidekick.be\/itenium\/blog\/security\/hacking-tool-hydra\/#primaryimage"},"image":{"@id":"https:\/\/demo.sidekick.be\/itenium\/blog\/security\/hacking-tool-hydra\/#primaryimage"},"thumbnailUrl":"https:\/\/demo.sidekick.be\/itenium\/wp-content\/uploads\/2025\/11\/hacking-hydra.png","datePublished":"2023-10-01T22:00:00+00:00","dateModified":"2025-11-28T12:31:43+00:00","author":{"@id":"https:\/\/demo.sidekick.be\/itenium\/#\/schema\/person\/6ab401ce01e858184ee4a8667fe0f022"},"breadcrumb":{"@id":"https:\/\/demo.sidekick.be\/itenium\/blog\/security\/hacking-tool-hydra\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/demo.sidekick.be\/itenium\/blog\/security\/hacking-tool-hydra\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/demo.sidekick.be\/itenium\/blog\/security\/hacking-tool-hydra\/#primaryimage","url":"https:\/\/demo.sidekick.be\/itenium\/wp-content\/uploads\/2025\/11\/hacking-hydra.png","contentUrl":"https:\/\/demo.sidekick.be\/itenium\/wp-content\/uploads\/2025\/11\/hacking-hydra.png","width":360,"height":300,"caption":"a three-headed fire hydra breaking through castle walls"},{"@type":"BreadcrumbList","@id":"https:\/\/demo.sidekick.be\/itenium\/blog\/security\/hacking-tool-hydra\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/demo.sidekick.be\/itenium\/"},{"@type":"ListItem","position":2,"name":"Hacking Tool: hydra"}]},{"@type":"WebSite","@id":"https:\/\/demo.sidekick.be\/itenium\/#website","url":"https:\/\/demo.sidekick.be\/itenium\/","name":"Itenium","description":"We build software. We build careers.","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/demo.sidekick.be\/itenium\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/demo.sidekick.be\/itenium\/#\/schema\/person\/6ab401ce01e858184ee4a8667fe0f022","name":"Usdevelop","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/demo.sidekick.be\/itenium\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/cc8cf9b9e9d5bbe7e8d247907cc9ac8457bbfa2854b52eaddf6529adfe88ceab?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/cc8cf9b9e9d5bbe7e8d247907cc9ac8457bbfa2854b52eaddf6529adfe88ceab?s=96&d=mm&r=g","caption":"Usdevelop"},"sameAs":["https:\/\/demo.sidekick.be\/itenium"]}]}},"_links":{"self":[{"href":"https:\/\/demo.sidekick.be\/itenium\/wp-json\/wp\/v2\/posts\/1463","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/demo.sidekick.be\/itenium\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/demo.sidekick.be\/itenium\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/demo.sidekick.be\/itenium\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/demo.sidekick.be\/itenium\/wp-json\/wp\/v2\/comments?post=1463"}],"version-history":[{"count":2,"href":"https:\/\/demo.sidekick.be\/itenium\/wp-json\/wp\/v2\/posts\/1463\/revisions"}],"predecessor-version":[{"id":2173,"href":"https:\/\/demo.sidekick.be\/itenium\/wp-json\/wp\/v2\/posts\/1463\/revisions\/2173"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/demo.sidekick.be\/itenium\/wp-json\/wp\/v2\/media\/2017"}],"wp:attachment":[{"href":"https:\/\/demo.sidekick.be\/itenium\/wp-json\/wp\/v2\/media?parent=1463"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/demo.sidekick.be\/itenium\/wp-json\/wp\/v2\/categories?post=1463"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/demo.sidekick.be\/itenium\/wp-json\/wp\/v2\/tags?post=1463"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}