Hi All,

So I'm trying to use hydra to bruteforce a login on a system that uses custom http headers to receive the username and password. Hydra does not seem to be doing substitution of ^USER^ and ^PASS^ when used as HTTP headers. If I issue issuing a call to hydra like this:

hydra "http-post://0.0.0.0:8000/:H=username\:^USER^:H=password\:^PASS^" -l admin -p admin

I see the following r

"Credential confirmation" should be replaced with "Combolist".

We might want to rename the subcommand as well, from badtouch creds to badtouch combo, but if we do this we should still accept creds as an alias.