> For the complete documentation index, see [llms.txt](https://parul-kaushik.gitbook.io/ceh-practical-notes/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://parul-kaushik.gitbook.io/ceh-practical-notes/hydra-and-nikto.md).

# Hydra & Nikto

***HYDRA***

-l : Pass single username/login 

-L : Pass multiple usernames/logins 

-p : Pass single known password 

-P : Pass a password list or wordlist (ex.: rockyou.txt) 

-s : Use custom port 

-f: Exit as soon as at least one a login and a password combination is found 

-R: Restore previous session (if crashed/aborted)

hydra -l user -P /usr/share/wordlists/rockyou.txt $IP -t 4 ssh

hydra -L /usr/share/wordlists/rockyou.txt -P /usr/share/wordlists/rockyou.txt $IP -t 4 ssh

hydra -l user -P /usr/share/wordlists/rockyou.txt $IP http-post-form "::"

hydra -l user -P /usr/share/wordlists/rockyou.txt $IP http-post-form "/login.php:username=^USER^\&password=^PASS^:Login Failed"

***

***NIKTO***

nikto -h IP nikto -h domains.txt (.txt file contains multiple domain ) 

nikto -h <https://nmap.org> -ssl (scanning domaine wtih ssl enabled)&#x20;

nikto -h -port (Port Number1),(Port Number2) nikto -h IP -Display 1

**Display options**&#x20;

1 = Display redirects&#x20;

2= Display cookies&#x20;

3 = Display 200 ok response&#x20;

4= Display Web URLs requiring authentication D Display debug output E Show HTTP errors P Print to STDOUT V Verbose output display

Nikto -h (Hostname) -tuning (Option)

**Tuning options**&#x20;

0 Upload files&#x20;

7 Remote File Retrieval - Server Wide&#x20;

1 View specific file in log&#x20;

8 Command Execution / Remote Shell&#x20;

2 Default file misconfiguration&#x20;

9 SQL Injection&#x20;

3 Display information disclosure a Authentication Bypass&#x20;

4 Injection (XSS/Script/HTML) b Software Identification&#x20;

5 Remote File Retrieval - Inside Web Root c Remote Source Inclusion&#x20;

6 Denial of Service x Reverse Tuning Options