Ravi Sir's Cyber Security Cards › Revision Cards
Hydra: Online Login Testing
Hydra: Online Login Testing Hydra tries many username/password pairs against a live service: SSH, FTP, web forms. This is an online attack , so it is slow and noisy. -l one user, -L a list. -p one password, -P a list. Online guessing is easy to detect and block. Defence: lockouts, rate limits, MFA,
Read card text
What this card says
What it is
Hydra tries many username/password pairs against a live service: SSH, FTP, web forms.
How it works
This is an online attack, so it is slow and noisy.
-l one user, -L a list. -p one password, -P a list.
Why it matters for security
Online guessing is easy to detect and block.
Defence: lockouts, rate limits, MFA, and fail2ban.
Learn more in the lesson: 22.5 Hydra: Online Login Testing