Hydra (software)
From Wikipedia, the free encyclopedia
| THC Hydra | |
|---|---|
| Developer | THC |
| Stable release | 9.6
/ September 3, 2025[1] |
| Written in | C |
| Operating system | Cross-platform |
| Platform | Unix |
| Type | Password cracking |
| License | GNU General Public License (version 3 or later) |
| Website | www |
| Repository | github |
Hydra (or THC Hydra) is a parallelized network login cracker built into various operating systems like Kali Linux, Parrot and other major penetration testing environments.[2] It was created as a proof of concept tool, for security researchers to demonstrate how easy it can be to crack logins. Hydra works by using different approaches, such as brute-force attacks and dictionary attacks, in order to guess the right username and password combination. Hydra is commonly used by penetration testers together with a set of programmes like crunch,[3] cupp[4] etc, which are used to generate wordlists based on user-defined patterns.
Hydra can launch attacks on multiple targets at once using threads, called hydra heads. The tool keeps track of the threads using another structure, the hydra brain. Each target is attacked using a module that corresponds to a protocol (eg. if the target is an SSH server, the SSH module is used).