Run Hydra credential brute-forcing against network services with bounded wordlists.
npx skills add https://github.com/gongzeq/VAPT3 --skill hydra-bruteforce
Please help me install this Agent Skill. Skill: hydra-bruteforce Source: https://github.com/gongzeq/VAPT3/tree/main/secbot/skills/hydra-bruteforce Command: npx skills add https://github.com/gongzeq/VAPT3 --skill hydra-bruteforce
This skill helps security teams safely test for weak credentials by running Hydra against a single target/service with bounded username and password lists, returning any successful credential pairs.
Provide a target, service, and optional user/password lists to run Hydra against the target and enumerate weak credentials.
High-intent search queries and answers about installing and using this skill.
To brute-force weak credentials for SSH and FTP, you can test a target's authentication using bounded username and password lists. This skill runs Hydra against specified network services to verify policy effectiveness and identify successful credential pairs.
Yes, you can use custom wordlists for password brute-forcing. The skill supports flexible wordlist management, allowing you to provide optional user_dict and pass_dict inputs to extend credentials without exposing the host filesystem.
Yes, Hydra brute-forcing requires explicit authorization. The skill implements safety gating through a HighRiskGate, ensuring user authorization is obtained before executing high-risk credential testing, with all actions remaining auditable.
The safest way to automate credential testing is using a sandboxed execution environment with defined CLI inputs. This skill parses Hydra outputs into a structured list of discovered credentials and attempt counts for remediation planning.
Supported services for credential brute-forcing include SSH, FTP, Telnet, HTTP post forms, and databases. The skill targets these network services to enumerate weak credentials and verify remediation needs during security assessments.
You get structured output from Hydra by using this skill to automatically parse the results into a structured list. The output includes discovered credential pairs and attempt counts, formatted specifically for security auditing and remediation planning.
AeonDaveCrack password hashes offline using CPU resources and multiple attack modes.
vitormiziaraAudit SaaS codebases for security vulnerabilities and generate structured remediation insights.
protoLabsAIPerform passive and scoped active reconnaissance on network targets and domains.
brucesongsCrack password hashes and test authentication across Windows, Linux, and web services.
