💧 Hydros

WordPress security testing tool for credential validation and information gathering.

🎯 Overview

Hydros tests WordPress credentials, discovers subdomains, enumerates usernames, and extracts WooCommerce data. It supports bulk testing with proxy rotation and comprehensive subdomain scanning.

✨ Key Features

• Credential Testing: Validate WordPress login credentials
• Subdomain Discovery: Find WordPress on subdomains via CT logs and DNS
• Username Enumeration: Discover and test additional usernames
• WooCommerce Analysis: Extract payment methods and sales data
• Proxy Support: Full proxy rotation for anonymization

🚀 Quick Start

1. Launch Hydros from Quantium launcher
2. Prepare credential list (see formats below)
3. Configure testing options
4. Add proxies (optional)
5. Start testing

📥 Input Formats

Hydros accepts credentials in standard formats. See Common Data Formats for details.

• URL:Login:Password: Direct WordPress site URLs with credentials
• Email:Password: Automatically extracts domain and username

📁 Output Files

output/
├── good.txt         # ✅ Valid credentials
├── bad.txt          # ❌ Invalid credentials
├── errors.txt       # ⚠️ Failed attempts
├── info.txt         # ℹ️ Additional login info
└── woocommerce.txt  # 🛒 WooCommerce data

💡 Pro Tip: Enable subdomain discovery to find hidden WordPress installations!