https://cybertoolchain.io/tools/hydra New releases and features in hydra, tracked by The Cyber Toolchain. en Wed, 03 Sep 2025 08:04:06 GMT https://github.com/vanhauser-thc/thc-hydra/releases/tag/v9.6 https://github.com/vanhauser-thc/thc-hydra/releases/tag/v9.6 Wed, 03 Sep 2025 08:04:06 GMT Hydra v9.6 adds SSH legacy cipher support, PostgreSQL custom port, SMB expired-account handling, and HTTP 403 support. • Supports SSH legacy ciphers, enabling brute-force against older SSH servers that require deprecated algorithms. • Supports custom ports for PostgreSQL targets. • Improves SMB module handling of expired-credential responses. • Supports HTTP 403 responses, expanding coverage for web form attacks where targets return 403 on failure. Breaking changes: • freerdp dependency upgraded from v2 to v3; systems without freerdp v3 installed will fail to build or use the RDP module. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/hydra https://github.com/vanhauser-thc/thc-hydra/releases/tag/v9.4 https://github.com/vanhauser-thc/thc-hydra/releases/tag/v9.4 Thu, 08 Sep 2022 08:33:25 GMT Adds `2=` optional parameter to http-post-form module for handling 302 success codes • `http-post-form` module now supports the `2=` optional parameter to treat HTTP 302 responses as successful credentials. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/hydra https://github.com/vanhauser-thc/thc-hydra/releases/tag/v9.3 https://github.com/vanhauser-thc/thc-hydra/releases/tag/v9.3 Thu, 03 Feb 2022 09:35:44 GMT Adds Cobalt Strike module support and IPv6 `-M` address support in Hydra v9.3 • Adds new `cobaltstrike` module for credential testing (contributed by ultimaiiii) • Enables `-M` flag to accept IPv6 addresses or ranges • Adds `make uninstall` target for clean removal of installed binaries Full history on Cyber Toolchain: https://cybertoolchain.io/tools/hydra