Overview
Hydros uncovers valid WordPress logins even on hidden sub-installs, all at top speed.
Recovery Engine
Cycles credential variants across domains, subdomains, and alternative usernames for maximum hit-rate.
Subdomain Enumeration
Find WP installs via certificate-transparency logs plus DNS brute and wordlists.
Username Extraction
Scrape WordPress IDs from author pages, feeds, and APIs when provided creds fail.
Core Features
Everything you need for WordPress credential testing in one package.
Recovery Extras
Multiple Auth Paths
Login, XML-RPC, cookies, and subdomain permutations.
Role Detection
Identify Admin, Editor, Author, Subscriber levels.
Deep Subdomain Discovery
CT-log + DNS scrap to surface every WP endpoint.
WooCommerce Analysis
Inventory API keys, payment gateways, revenue stats.
Platform Intel
Enumerate WP version, plugin list, theme, server stack.
Detailed Reports
Structured logs for further automation or audit.
Performance
Hydros balances resource use with maximum request throughput.
Thread Pool
Adjust worker count for any hardware.
Smart Timeouts
Adaptive request timers based on server response.
Smart Retry
Configurable back-off and retry windows handle flakiness.
Proxy Support
Random or sequential rotation of HTTP/SOCKS proxies.
Configuration
Fine-tune every phase of the check process.
Auth Options
Control attempts, delays, user-agent pools, and login paths.
Subdomain Depth
Limit breadth or depth of enumeration to fit quotas.
Username Rules
Toggle scraping sources and retry cycles.
Output Format
Choose TXT, CSV, or JSON with custom fields.
