jueves, 16 de abril de 2020

BruteSpray: A Brute-forcer From Nmap Output And Automatically Attempts Default Creds On Found Services


About BruteSpray: BruteSpray takes nmap GNMAP/XML output or newline seperated JSONS and automatically brute-forces services with default credentials using Medusa. BruteSpray can even find non-standard ports by using the -sV inside Nmap.

BruteSpay's Installation
   With Debian users, the only thing you need to do is this command:
sudo apt install brutespray

   For Arch Linux user, you must install Medusa first: sudo pacman -S medusa

   And then, enter these commands to install BruteSpray:


Supported Services: ssh, ftp, telnet, vnc, mssql, mysql, postgresql, rsh, imap, nntpp, canywhere, pop3, rexec, rlogin, smbnt, smtp, svn, vmauthdv, snmp.

How to use BruteSpray?

   First do an Nmap scan with -oG nmap.gnmap or -oX nmap.xml.
   Command: python3 brutespray.py -h
   Command: python3 brutespray.py --file nmap.gnmap
   Command: python3 brutesrpay.py --file nmap.xml
   Command: python3 brutespray.py --file nmap.xml -i

   You can watch more details here:

Examples

   Using Custom Wordlists:
python3 brutespray.py --file nmap.gnmap -U /usr/share/wordlist/user.txt -P /usr/share/wordlist/pass.txt --threads 5 --hosts 5

   Brute-Forcing Specific Services:
python3 brutespray.py --file nmap.gnmap --service ftp,ssh,telnet --threads 5 --hosts 5

   Specific Credentials:
python3 brutespray.py --file nmap.gnmap -u admin -p password --threads 5 --hosts 5

   Continue After Success:
python3 brutespray.py --file nmap.gnmap --threads 5 --hosts 5 -c

   Use Nmap XML Output:
python3 brutespray.py --file nmap.xml --threads 5 --hosts 5

   Use JSON Output:
python3 brutespray.py --file out.json --threads 5 --hosts 5

   Interactive Mode: python3 brutespray.py --file nmap.xml -i

Data Specs
{"host":"127.0.0.1","port":"3306","service":"mysql"}
{"host":"127.0.0.10","port":"3306","service":"mysql"}
...


Changelog: Changelog notes are available at CHANGELOG.md.

You might like these similar tools:

More articles
  1. Hacker Tools For Pc
  2. Hack Tools For Pc
  3. How To Make Hacking Tools
  4. Pentest Tools Tcp Port Scanner
  5. What Is Hacking Tools
  6. Hacker Search Tools
  7. Hack Tool Apk No Root
  8. Pentest Tools Github
  9. Pentest Tools Tcp Port Scanner
  10. Hacking Tools For Kali Linux
  11. Hacking Apps
  12. Hacker Search Tools
  13. Hack Tools
  14. Hacking Tools Usb
  15. Hackrf Tools
  16. Hacking Tools For Kali Linux
  17. Pentest Tools Kali Linux
  18. Hack Tools Github
  19. Hacking Tools Github
  20. Pentest Tools Apk
  21. Hack Tool Apk
  22. Hacking Tools Windows 10
  23. Pentest Tools Kali Linux
  24. Hacker Tools List
  25. Pentest Tools Github
  26. Pentest Tools Nmap
  27. How To Install Pentest Tools In Ubuntu
  28. Pentest Tools Website

No hay comentarios:

Publicar un comentario