Which of the following tools is used to perform a credential brute force attack?

Hydra is specifically designed to perform credential brute force attacks against live network services such as SSH, FTP, HTTP, and RDP by systematically trying username and password combinations against a running authentication endpoint.

John the Ripper is an offline password cracking tool that operates against captured password hashes, not against live authentication services.

Hashcat is a GPU-accelerated offline hash cracking tool used to recover plaintext passwords from captured hashes rather than to attack live login services.

Peach is a fuzzing framework used to discover software vulnerabilities by sending malformed or unexpected input to applications, not to perform credential brute force attacks.