This is a companion discussion topic for the original entry at https://linuxconfig.org/ssh-password-testing-with-hydra-on-kali-linux
let me know were to get rockyou.txt file content ?
erm3nda -> xcxc
I you where brave enough to read this content you’ll be able to find rockyou.txt file over the internet… did you even typed it on any search engine?
If you have the option, you shouldn’t use (or even enable) password login with SSH. Use a 2048-bit RSA key with a passphrase. That way, for access you need something you have (the key installed on the client) and something you know (the passphrase which decrypts the key). Stealing the client provides no value without the passphrase, and knowing the passphrase without access to the key is useless.