Hydros

Hydros is an advanced WordPress credential validation and recovery tool that processes url:log:pass or email:pass data with intelligent enumeration capabilities. Featuring subdomain discovery, username enumeration, and comprehensive WooCommerce analysis, Hydros maximizes recovery success rates through sophisticated techniques and proxy support.

Key Features

Multi-Format Support

Processes both url:log:pass and email:pass credentials, automatically extracting domains from email addresses

Subdomain Enumeration

Discovers subdomains via certificate transparency logs (crt.sh) and DNS brute-forcing for comprehensive coverage

Username Discovery

Six different enumeration techniques including author queries, REST API, XML sitemaps, and RSS feeds

WooCommerce Analysis

Extracts sales statistics, payment gateways, and API keys (Stripe/Braintree) from WooCommerce installations

Proxy Integration

Full support for HTTP, HTTPS, SOCKS4, and SOCKS5 proxies with intelligent rotation

Advanced Configuration

Configurable threads (1-5000), timeouts, retries, and behavior settings for optimal performance

Role Detection

Identifies user privileges (Administrator, Editor, Author, Contributor, Subscriber) for recovered accounts

Smart Continuation

Option to continue testing subdomains and usernames even after finding valid credentials

Hydros is designed with both performance and usability in mind, offering an intuitive interface alongside powerful processing capabilities.

Supported Input Formats

Hydros accepts credentials in multiple formats:

URL-based: https://example.com:username:password or example.com:username:password
Email-based: [email protected]:password (automatically constructs WordPress URLs)
With paths: https://example.com/wp-admin:username:password
Subdomain support: blog.example.com:username:password

The tool automatically normalizes URLs and handles various WordPress installation paths.

Output Files

Hydros generates comprehensive results organized in separate files:

good.txt: Valid credentials in url:login:pass format
bad.txt: Invalid credential attempts
errors.txt: Failed connection attempts
errors_details.txt: Detailed error information (base64 encoded)
info.txt: Account roles and basic information
woocommerce.txt: Detailed e-commerce data including sales statistics and payment gateway information

For optimal performance, ensure your system meets the minimum requirements and use quality proxies to avoid IP blocks.

Getting Started

Ready to validate WordPress credentials with advanced enumeration capabilities? Check out our detailed user guide for step-by-step instructions on configuring and using Hydros effectively.