_ ReconLab
Commands  / Password Attacks  / Patator

Patator

Modular, multi-protocol brute-forcer.

KaliParrothigh

pkg: patator

Patator brute-forces many services with fine-grained response filtering — flexible where Hydra struggles.

Syntax

patator {module} host=.. user=.. password=FILE0 0={list}

Example

patator ssh_login host=10.0.0.5 user=root password=FILE0 0=pw.txt

Brute-forces SSH for root using the wordlist.

Options & flags

What each switch does. Toggle them in the builder below to assemble a command.

{module}Module, e.g. ssh_login, http_fuzz, ftp_login.
host <10.0.0.5>Target host.
user <root>Username or FILE0.
password <FILE0>Password or FILE0=list.
-x <ignore:fgrep=fail>Action/filter rule on responses.

Command builder

Tick options (and fill any values) to build a ready-to-copy command.

patator

Usage examples

patator ssh_login host=10.0.0.5 user=root password=FILE0 0=pw.txt

Brute-force SSH.

patator http_fuzz url=https://t/FUZZ 0=words.txt -x ignore:code=404

HTTP fuzzing with filtering.

Advantages
  • Powerful response filtering
  • Many modules
Disadvantages
  • Verbose syntax
  • Loud/lockouts
Tags
#brute-force#online

Official docs: Patator ↗

Related commands

Hydra

Fast online brute-force for many protocols.

Medusa

Parallel, modular online brute-forcer.

Frequently asked questions

What is Patator used for?
Patator brute-forces many services with fine-grained response filtering — flexible where Hydra struggles.
What is an example Patator command?
A common example is: patator ssh_login host=10.0.0.5 user=root password=FILE0 0=pw.txt — Brute-forces SSH for root using the wordlist.
Is Patator part of Kali Linux?
Yes. Patator ships with Kali Linux (and Parrot OS). If missing, install it with: sudo apt install patator.
What category of security tool is Patator?
Patator is a Password Attacks tool with a high-risk profile when run against a live target.

Try recon tools live

Run real scans against a domain you control, stage by stage.

Open the lab →