CmdID

CmdID / Commands

hydra

Online password guessing tool. tldr-pages

On several platforms 1 Sigma rule name it

Opens CmdID with your command. It is read in your browser and sent nowhere.

Several platforms

from tldr-pages, CC BY 4.0

Online password guessing tool. Protocols supported include FTP, HTTP(S), SMTP, SNMP, XMPP, SSH, and more.

Start Hydra's wizard

hydra-wizard

Guess SSH credentials using a given username and a list of passwords

hydra -l username -P path/to/wordlist.txt host_ip sshIdentify

Trips 1 Sigma rule: highLinux HackTool Execution by Nasreddine Bencherchali (Nextron Systems), Georg Lauenstein (sure[secure])

Guess HTTPS webform credentials using two specific lists of usernames and passwords ("https_post_request" can be like "username=^USER^&password=^PASS^")

hydra -L path/to/usernames.txt -P path/to/wordlist.txt host_ip https-post-form "url_without_host:https_post_request:login_failed_string"Identify

Trips 1 Sigma rule: highLinux HackTool Execution by Nasreddine Bencherchali (Nextron Systems), Georg Lauenstein (sure[secure])

Guess FTP credentials using usernames and passwords lists, specifying the number of threads

hydra -L path/to/usernames.txt -P path/to/wordlist.txt -t n_tasks host_ip ftpIdentify

Trips 1 Sigma rule: highLinux HackTool Execution by Nasreddine Bencherchali (Nextron Systems), Georg Lauenstein (sure[secure])

Guess MySQL credentials using a username and a passwords list, exiting when a username/password pair is found

hydra -l username -P path/to/wordlist.txt -f host_ip mysqlIdentify

Trips 1 Sigma rule: highLinux HackTool Execution by Nasreddine Bencherchali (Nextron Systems), Georg Lauenstein (sure[secure])

Guess RDP credentials using a username and a passwords list, showing each attempt

hydra -l username -P path/to/wordlist.txt -V rdp://host_ipIdentify

Trips 1 Sigma rule: highLinux HackTool Execution by Nasreddine Bencherchali (Nextron Systems), Georg Lauenstein (sure[secure])

Guess IMAP credentials on a range of hosts using a list of colon-separated username/password pairs

hydra -C path/to/username_password_pairs.txt imap://host_range_cidrIdentify

Trips 1 Sigma rule: highLinux HackTool Execution by Nasreddine Bencherchali (Nextron Systems), Georg Lauenstein (sure[secure])

Guess POP3 credentials on a list of hosts using usernames and passwords lists, exiting when a username/password pair is found

hydra -L path/to/usernames.txt -P path/to/wordlist.txt -M path/to/hosts.txt -F pop3Identify

Trips 1 Sigma rule: highLinux HackTool Execution by Nasreddine Bencherchali (Nextron Systems), Georg Lauenstein (sure[secure])

What detects it

Sigma process creation rules that name hydra
highLinux HackTool ExecutionNasreddine Bencherchali (Nextron Systems), Georg Lauenstein (sure[secure])