Alternatives to Hydra
Network logon testing tool that checks credentials across many protocols. The listings below can replace it for an important use case. Each note says what changes if you switch.
The original
Hydra
Network logon testing tool that checks credentials across many protocols.
Replacements
Listings that take over the same core job as Hydra.
NetExec
Assess network services during authorized enterprise security tests.
NetExec groups service checks and authentication testing for enterprise Windows networks, is BSD-2-Clause licensed and runs on Windows too, but covers fewer protocols like web forms.
Kerbrute
Enumerates Active Directory usernames and tests passwords through Kerberos.
Kerbrute tests Active Directory usernames and passwords only through Kerberos, which is fast and avoids the usual failed-logon event, instead of Hydra's many protocols.
Similar software
Related functionality, not a direct replacement.
hashcat
A GPU password recovery tool used for auditing how weak the password hashes in your own systems actually are.
John the Ripper
The long-running password auditing tool, whose community jumbo build supports hundreds of hash and cipher types.
SecLists
Find reusable test data for authorized security assessments.
CeWL
Builds a custom wordlist by spidering a target website.
Fail2ban
Log-watching daemon that bans addresses after repeated authentication failures.
Responder
LLMNR, NBT-NS and mDNS testing tool for internal network assessments.
