hydra_bruteforce
Brute-force network login services (SSH, FTP, HTTP, etc.) to test credential strength against authorized targets, using username or userlist and password or passwordlist.
Instructions
Brute-force a network login service (hydra). GATED — active exploitation.
TOOL_NAME=hydra_bruteforce DISPLAY_NAME=Hydra Login Brute-Forcer USECASE=Test credential strength against an in-scope network service (ssh, ftp, http-*, etc.) INSTRUCTIONS=1. Enable ALLOW_EXPLOITATION, 2. Ensure target in scope, 3. Provide service + username(s) + password(s)/list, 4. Call INPUT_DESCRIPTION=target (host/IP); service (e.g. ssh, ftp, http-post-form); username OR userlist path; password OR passwordlist path; port (optional) OUTPUT_DESCRIPTION=Dict with status, any valid credentials found, command and mode; blocked if exploitation disabled EXAMPLES=hydra_bruteforce("10.0.0.5", "ssh", username="admin", passwordlist="/wordlists/pw.txt") PREREQUISITES=ALLOW_EXPLOITATION=true AND target authorized and in scope RELATED_TOOLS=nmap_scan, hash_crack
Args: target: Host/IP running the service (must be in scope). service: hydra service module name. username: Single username to try. userlist: Path to a username wordlist (alternative to username). password: Single password to try. passwordlist: Path to a password wordlist (alternative to password). port: Optional service port.
Returns:
Structured result dict (blocked if exploitation is disabled).
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| port | No | ||
| target | Yes | ||
| service | Yes | ||
| password | No | ||
| userlist | No | ||
| username | No | ||
| passwordlist | No |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
No arguments | |||