hydra

Name: hydra
Availability: InStock
Author: Dave

Perform online brute-force and password spraying attacks against over 50 network protocols.

15|1|Updated Feb 12, 2026

Search Tags:#penetration testing #network security #credential attack #brute-force #hydra #password spraying

Ready to run

npx skills add https://github.com/AeonDave/malskill --skill hydra-aeondave

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: hydra
Source: https://github.com/AeonDave/malskill/tree/main/offensive-tools/cracking/hydra
Command: npx skills add https://github.com/AeonDave/malskill --skill hydra-aeondave

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill automates the process of testing login credentials against various network services, helping to identify weak or default passwords.

Core Features & Use Cases

Protocol Support: Supports over 50 protocols including SSH, HTTP, FTP, SMB, RDP, and WinRM.
Brute-Force & Spraying: Capable of performing both traditional brute-force attacks and password spraying.
Use Case: When asked to test default credentials on a newly deployed server or to check for weak passwords on a list of user accounts.

Quick Start

Use the hydra skill to brute-force SSH logins on the IP address 192.168.1.10 using the username 'admin' and a password list named 'passwords.txt'.

Frequently Asked Questions about hydra

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I brute-force SSH logins using a custom password list?▼

To brute-force SSH logins, you must specify the target protocol, IP address, a username, and a password list. The Skill validates credentials against network services to identify weak or default passwords.

What network protocols are supported for online password spraying?▼

Password spraying supports over 50 network protocols, including SSH, HTTP, FTP, SMB, RDP, and WinRM. It validates user lists and password lists against these services to find weak credentials.

Can I use this to test default credentials on a newly deployed server?▼

Yes, you can test default credentials on newly deployed servers. The Skill performs online brute-force attacks against network services to identify weak or default passwords across supported protocols.

What is the difference between brute-force and password spraying in network security?▼

Brute-force attacks test many passwords against a single account, while password spraying tests a single password against many accounts. This Skill automates both techniques to validate credentials across over 50 protocols.

Do I need to provide my own user and password lists for credential attacks?▼

Yes, you need to provide specific user lists and password lists for credential validation. The Skill requires these inputs along with the target protocol and IP address to perform the attack.

Why use a dedicated tool for online brute-force instead of manual testing?▼

A dedicated tool automates credential validation across over 50 network protocols, saving time and ensuring thorough coverage. It systematically checks user and password lists against target services to find weak credentials.