Hydra

What it does

THC-Hydra performs online password guessing against many protocols including SSH, RDP, HTTP, and SMB. It's used to test credential strength against live services.

Common use cases

• •Test password strength against an organization's external SSH and RDP services.
• •Perform credential-stuffing attacks on web login forms using a known user list.
• •Spray common passwords across multiple services to identify weak account credentials.

Key features

• •Supports 50+ protocols including SSH, RDP, HTTP, SMB, MySQL, and LDAP.
• •Multithreaded for concurrent login attempts across multiple targets.
• •Supports username and password lists with per-module authentication options.
• •Reports per-account results with success, failure, and error states.

Source