🌊 hydra: brute-force ssh credentials

room: basic pentesting 

hail hydra. 

hydra is a command we can use to brute-force ssh password when we've got a username. 

Pwede natin gamitin to sa Linux. For instance, we just type this:

hydra -l jan -P /usr/share/wordlists/rockyou.txt [ipaddress] ssh

The anatomy's that -l flag refers to the username jan, -P allows us to use a wordlist that's available ready with us.

Enter. We get the password from there.

Now we can use it. Tara, subukan natin.

ssh jan@ipaddress
ls -la to look into directory.