hydra

Command: -4 - use IPv4 addresses (default)

Command: -6 - use IPv6 addresses (put always in [] also in servers-to-attack)

Command: -s - if the service is on a different default port, define it here

Command: -d - debug mode

Command: -l - login with login name

Command: -q - do not print messages about connection errors

Command: -L - load several logins from file

Command: - the target: DNS, IP or 192.168.0.0/24 (this OR the servers-to-attack option)

Command: -O - use old SSL v2 and v3

Command: -M - List of servers to attack, one entry per line, ':' to specify port

Command: - the service to crack. Supported: adam6500 asterisk cisco cisco-enable cvs ftp[s] http[s]-{head|get|post} http[s]-{get|post}-form http-proxy http-proxy-urlenum icq imap[s] irc ldap2[s] ldap3[-{cram|digest}md5][s] mssql mysql(v4) nntp oracle-listener oracle-sid pcanywhere pcnfs pop3[s] redis rexec rlogin rpcap rsh rtsp s7-300 sip smb smtp[s] smtp-enum snmp socks5 ssh sshkey teamspeak telnet[s] vmauthd vnc xmpp

Command: -v - verbose mode

Command: -p - try password

Command: -P - load several passwords from FILE

Command: -f - exit when a login/pass pair is found per host

Command: -e - try n null password, s login as pass and/or r reversed login

Command: -b - output format: text(default), json, jsonv1

Command: -T - run a number of connects in parallel overall (default: 64)

Command: -C - colon separated login:pass format, instead of usernames/passwords files

Command: -x - MIN:MAX:CHARSET password bruteforce generation. e.g 5:8:A1 generate passwords from length 5 to 8 with uppercase characters and numbers

Command: -V - show login+pass for each attempt

Command: -K - do not redo failed attempts (good for servers-to-attack mass scanning)

Command: -F - exit when any login/pass pair is found globally

Command: -u - loop around users, not passwords (effective! implied with -x)

Command: -t - Run a number of connects in parallel per target (default: 16)

Command: -r - use a non-random shuffling method for option -x

Command: -S - perform an SSL connect

Command: -c - wait time per login attempt over all threads (enforces threads-per-target: 1)

Command: -w - wait time for a response (default: 32)

Command: -y - disable use of symbols in bruteforce

Command: -W - wait time between connects per thread (default: 0)