Name:hydra
Category:Passwords
Publisher:trickest-mhmdiaa
Created:7/14/2023
Container:quay.io/trickest/thchydra:93abd60-patch-3
Output Type:
License:Unknown

Parameters

​
ipv4
boolean
-4use IPv4 addresses (default)
​
ipv6
boolean
-6use IPv6 addresses (put always in [] also in servers-to-attack)
​
port
string
-sif the service is on a different default port, define it here
​
debug
boolean
-ddebug mode
​
login
string
-llogin with login name
​
quiet
boolean
-qdo not print messages about connection errors
​
logins
file
required
-Lload several logins from file
​
server
string
the target: DNS, IP or 192.168.0.0/24 (this OR the servers-to-attack option)
​
old-ssl
boolean
-Ouse old SSL v2 and v3
​
servers
file
required
-MList of servers to attack, one entry per line, ':' to specify port
​
service
string
required
the service to crack. Supported: adam6500 asterisk cisco cisco-enable cvs ftp[s] http[s]-{head|get|post} http[s]-{get|post}-form http-proxy http-proxy-urlenum icq imap[s] irc ldap2[s] ldap3[-{cram|digest}md5][s] mssql mysql(v4) nntp oracle-listener oracle-sid pcanywhere pcnfs pop3[s] redis rexec rlogin rpcap rsh rtsp s7-300 sip smb smtp[s] smtp-enum snmp socks5 ssh sshkey teamspeak telnet[s] vmauthd vnc xmpp
​
verbose
boolean
-vverbose mode
​
password
string
-ptry password
​
passwords
file
required
-Pload several passwords from FILE
​
exit-found
boolean
-fexit when a login/pass pair is found per host
​
pass-gen-nsr
string
-etry n null password, s login as pass and/or r reversed login
​
output-format
string
-boutput format: text(default), json, jsonv1
​
threads-global
string
-Trun a number of connects in parallel overall (default: 64)
​
login-pass-file
file
-Ccolon separated login:pass format, instead of usernames/passwords files
​
pass-generation
string
-xMIN:MAX:CHARSET password bruteforce generation. e.g 5:8:A1 generate passwords from length 5 to 8 with uppercase characters and numbers
​
show-login-pass
boolean
-Vshow login+pass for each attempt
​
dont-redo-failed
boolean
-Kdo not redo failed attempts (good for servers-to-attack mass scanning)
​
exit-found-global
boolean
-Fexit when any login/pass pair is found globally
​
loop-arround-users
string
-uloop around users, not passwords (effective! implied with -x)
​
threads-per-target
string
-tRun a number of connects in parallel per target (default: 16)
​
pass-gen-non-random
boolean
-ruse a non-random shuffling method for option -x
​
perform-ssl-connect
boolean
-Sperform an SSL connect
​
wait-time-per-login
string
-cwait time per login attempt over all threads (enforces threads-per-target: 1)
​
wait-time-for-response
string
-wwait time for a response (default: 32)
​
pass-gen-disable-symbols
boolean
-ydisable use of symbols in bruteforce
​
wait-time-between-connects
string
-Wwait time between connects per thread (default: 0)