hydra -t 4 -l $USER_NAME -P $WORDLIST \
-f $TARGET_IP_ADDRESS $SERVICEHere $SERVICE is “ssh”, “ftp”, etc. Note that “http” is not used directly; instead use “http-get-form”, “http-post-form”, etc.
-f— Stop after the first successful match. Useful if you are just trying to brute-force a single username!-l— Specify the username whose password you want to brute force.-L— Specify a file listing of usernames (one per line) you want to brute force.-p— Specify the password you want to attempt. Most useful in conjunction with-Lfor password spraying attacks.-P— Specify a file listing of passwords (one per line) you want to brute force.-s— Use a non-default port for$SERVICE.-t— Specifies the number of threads (parallel connection attempts) that Hydra should make at any one time. By default, Hydra uses 16 threads, but many services don’t seem to play well with this;-t 4is a much more sane value.-V— Verbose output. Use-vVfor even more verbose output, or-dfor debugging output.