Hydra in Termux – Installation, Usage & Basic Commands

Hydra is a popular password auditing and authentication testing tool that is used to test login security on different network services and protocols. It is commonly used by cybersecurity learners and penetration testers for practicing brute-force techniques and checking weak credentials in authorized environments. You can also run Hydra on Android devices using the Termux terminal application without root access.

Here’s what you can do with Hydra in Termux:

Test login forms and network services.
Practice password auditing commands.
Perform basic authentication testing.
Learn brute-force tool usage.
Run cybersecurity tools directly on Android.
Practice Linux terminal commands.

Installation

Install required packages:

pkg update && pkg install -y git build-essential cmake

pkg update && pkg install -y git build-essential cmake

Download the Hydra source code:

git clone https://github.com/vanhauser-thc/thc-hydra.git

git clone https://github.com/vanhauser-thc/thc-hydra.git

Enter the folder:

cd thc-hydra

cd thc-hydra

Configure Hydra for Termux:

./configure --prefix=$PREFIX --disable-xhydra

./configure --prefix=$PREFIX --disable-xhydra

Compile Hydra:

make

make

Install Hydra:

make install

make install

Check if it installed successfully:

hydra -h

hydra -h

Usage Commands

Below are some important usage commands that you can use in Termux to perform different Hydra authentication testing tasks.

Brute-force SSH login:

hydra -l username -P passwords.txt ssh://192.168.1.10

hydra -l username -P passwords.txt ssh://192.168.1.10

Brute-force FTP login:

hydra -l admin -P passlist.txt ftp://192.168.1.20

hydra -l admin -P passlist.txt ftp://192.168.1.20

Brute-force HTTP login form:

hydra -l admin -P rockyou.txt 192.168.1.30 http-post-form "/login.php:user=^USER^&pass=^PASS^:F=incorrect"

hydra -l admin -P rockyou.txt 192.168.1.30 http-post-form "/login.php:user=^USER^&pass=^PASS^:F=incorrect"

Brute-force MySQL login:

hydra -l root -P pass.txt mysql://192.168.1.40

hydra -l root -P pass.txt mysql://192.168.1.40

Brute-force RDP login:

hydra -l admin -P pass.txt rdp://192.168.1.50

hydra -l admin -P pass.txt rdp://192.168.1.50

Test multiple services at once:

hydra -L users.txt -P passwords.txt 192.168.1.60 ssh ftp smb

hydra -L users.txt -P passwords.txt 192.168.1.60 ssh ftp smb

Limit attack speed (threads):

hydra -t 4 -l admin -P pass.txt ssh://192.168.1.10

hydra -t 4 -l admin -P pass.txt ssh://192.168.1.10

Save results to a file:

hydra -l admin -P pass.txt ssh://192.168.1.10 -o results.txt

hydra -l admin -P pass.txt ssh://192.168.1.10 -o results.txt

Show all supported protocols:

hydra -U

hydra -U

Basic TermuxHydra Commands

Hydra basic commands are used to perform login testing, manage password lists, and control different authentication testing options directly from the terminal.

Show Hydra help menu:

hydra -h

hydra -h

Show Hydra version:

hydra -vV

hydra -vV

Use a single password for testing:

hydra -l admin -p 123456 ssh://192.168.1.10

hydra -l admin -p 123456 ssh://192.168.1.10

Use username and password lists together:

hydra -L users.txt -P passwords.txt ssh://192.168.1.10

hydra -L users.txt -P passwords.txt ssh://192.168.1.10

Stop after finding valid password:

hydra -f -l admin -P passwords.txt ssh://192.168.1.10

hydra -f -l admin -P passwords.txt ssh://192.168.1.10

Run verbose mode:

hydra -V -l admin -P passwords.txt ssh://192.168.1.10

hydra -V -l admin -P passwords.txt ssh://192.168.1.10

Limit connection attempts:

hydra -t 2 -l admin -P passwords.txt ssh://192.168.1.10

hydra -t 2 -l admin -P passwords.txt ssh://192.168.1.10

End Note

Hydra is one of the most popular password auditing and authentication testing tools used in cybersecurity learning and penetration testing practice. You can install and use Hydra on Android using the Termux application, where you can practice different login testing commands and learn Linux-based cybersecurity tools directly from your mobile device without root access.