hydra -L USE.txt -P wordlist.txt 44.228.249.3 http-post-form "/login.php:username=^USER^&password=^PASS^&Login=Login:Invalid credentials" -V -t 64  -f

I'm having problems with hydra and I don't understand why [Enlace externo eliminado para invitados] doesn't say any message if the password is wrong.

 As it wouldn't let me, I put in "Incorrect Password" and then "Invalid credentials" but it's not working because I put it in the wordlist (test) which is the password
.
[DATA] attacking http-post-form://44.228.249.3:80/login.php:username=^USER^&password=^PASS^&Login=Login:Invalid credentials
[ATTEMPT] target 44.228.249.3 - login "test" - pass "t472" - 1 of 17 [child 0] (0/0)
[ATTEMPT] target 44.228.249.3 - login "test" - pass "t501" - 2 of 17 [child 1] (0/0)
[ATTEMPT] target 44.228.249.3 - login "test" - pass "t502" - 3 of 17 [child 2] (0/0)
[ATTEMPT] target 44.228.249.3 - login "test" - pass "t503" - 4 of 17 [child 3] (0/0)
[ATTEMPT] target 44.228.249.3 - login "test" - pass "t504" - 5 of 17 [child 4] (0/0)
[ATTEMPT] target 44.228.249.3 - login "test" - pass "t505" - 6 of 17 [child 5] (0/0)
[ATTEMPT] target 44.228.249.3 - login "test" - pass "t506" - 7 of 17 [child 6] (0/0)
[ATTEMPT] target 44.228.249.3 - login "test" - pass "t507" - 8 of 17 [child 7] (0/0)
[ATTEMPT] target 44.228.249.3 - login "test" - pass "t508" - 9 of 17 [child 8] (0/0)
[ATTEMPT] target 44.228.249.3 - login "test" - pass "t509" - 10 of 17 [child 9] (0/0)
[ATTEMPT] target 44.228.249.3 - login "test" - pass "t510" - 11 of 17 [child 10] (0/0)
[ATTEMPT] target 44.228.249.3 - login "test" - pass "t511" - 12 of 17 [child 11] (0/0)
[ATTEMPT] target 44.228.249.3 - login "test" - pass "t512" - 13 of 17 [child 12] (0/0)
[ATTEMPT] target 44.228.249.3 - login "test" - pass "t513" - 14 of 17 [child 13] (0/0)
[ATTEMPT] target 44.228.249.3 - login "test" - pass "t514" - 15 of 17 [child 14] (0/0)
[ATTEMPT] target 44.228.249.3 - login "test" - pass "t515" - 16 of 17 [child 15] (0/0)
[ATTEMPT] target 44.228.249.3 - login "test" - pass "test" - 17 of 17 [child 16] (0/0)
1 of 1 target completed, 0 valid password found
 

hydra -L USE.txt -P wordlist.txt testphp.vulnweb.com http-post-form "/userinfo.php:uname=^USER^&pass=^PASS^:login page" -V -t 4 -f

[Enlace externo eliminado para invitados]

Test Successful

É a primeira vez que mexo na hidra mas se alguém experiente pudesse me explicar se é normal ele errar nas passwords  quando está sintaxe está bem ou é provável que eu esteja a fazer alguma coisa errado?

0 a 10 qual a credibilidade do programa? tem algum melhor?

Acho que já entendi como usar e configurar, embora não consiga usar H=cookies porque dá
erro