Hydra

https://github.com/vanhauser-thc/thc-hydra

Hydra is a brute force online password cracking program, a quick system login password “hacking” tool.

Hydra can run through a list and “brute force” some authentication services. Imagine trying to manually guess someone’s password on a particular service (SSH, Web Application Form, FTP or SNMP) - we can use Hydra to run through a password list and speed this process up for us, determining the correct password.

Useful Commands

hydra -l user -P passlist.txt ftp://IP_ADDRESS

SSH

hydra -l <username> -P <full-path-to-pass> IP_ADDRESS -t 4 ssh

The -t 4 sets the number of threads to spawn.

Web

hydra -l username -P /path/to/rockyou.txt IP_ADDRESS http-post-form “/login:username=^USER^&password=^PASS^:F=incorrect”