Password Cracking Tools

Hydra

 //ssh attack
 hydra -l [username] -P [password file] [IP address] -t 4 ssh
//http attack
 hydra -l [username] -P [password file] [IP address] -m /admin/ http-get

Medusa

medusa -h [target IP] -u [username] -P [password list] -M [module] -t [threads]
  • -h: Specifies the target host (IP address or domain name).

  • -u: Sets the username to use during the brute-force attack.

  • -P: Specifies the path to the password list file.

  • -M: Select the module or protocol (such as SSH, FTP, or HTTP).

  • -t: Sets the number of threads for parallel connections (default is 16).

Last updated