hydra -L users.txt -P passlist.txt -u -f 192.168.1.1 smtp
While you can use rockyou.txt (a famous 14-million password list), a targeted passlist.txt is often more effective. For a focused audit (e.g., testing a single executive’s email or a departmental FTP server), create a custom list containing:
Warning: Unauthorized access using Hydra and passlist.txt is a felony in most jurisdictions (CFAA in the US, Computer Misuse Act in the UK). passlist txt hydra
You may only use these techniques on: