Kali Linux Web Penetration Testing Cookbook - Second Edition

How to do it...

In the directory where both users and password dictionaries are stored in our Kali Linux VM, we do the following:

1. Open a terminal and run hydra, or use the Applications menu in Kali Linux Applications | 05 - Password Attacks | Online Attacks | Hydra.

2. Issuing the command without arguments displays the basic help:

Here, we can see some useful information for what we want to do. By using the -L option, we can use a file containing possible usernames. -P allows us to use a password dictionary. We need to end the command with the service we want to attack, followed by :// and the server, and, optionally, the port number and ...