This question already has an answer here:
I am trying to do a brute force with Hydra on a web page but it isn't DVWA so I don't have control over code.
The failed result has 200 OK response and "Area protegida" message.
I tried it with this command:
hydra -l admin -P /root/Desktop/dict.txt http://***********.net http-post-form "/:usuario=^USER^&contrasena=^PASS^:Area protegida"
What can I do?