LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Programming (https://www.linuxquestions.org/questions/programming-9/)
-   -   Code: Ssh brute forcer (https://www.linuxquestions.org/questions/programming-9/code-ssh-brute-forcer-680532/)

frenchn00b 11-01-2008 05:43 PM

Code: Ssh brute forcer
 
Hello,

Bit difficult topic. I dont remember my password I changed. I would like to create a dictionary. Is there any tools under linux?

code :

// Removed possibly malicious script. crabboy

jcookeman 11-01-2008 06:17 PM

I can think of only one valid use for that script and it's not trying to crack your own password. If you have, for instance, a web host provider and you forgot your password, then you should contact the appropriate person(s) to have it reset. Running that script could possibly get you banned very quickly.

estabroo 11-01-2008 06:25 PM

If its a local machine just boot it with a livecd and change the password directly.

ta0kira 11-01-2008 06:29 PM

Why don't you type a list of everything you might have used as your password and make a dictionary out of that? What if you didn't use a word? Maybe you were security-minded at the time and used an unpronounceable sequence of letters, numbers, and symbols in case someone with a script like yours wanted to crack it? Maybe you should just run a Linux install CD, chroot as root, then change your password to something you will remember. If the info you have on the machine is worth all the effort of cracking your password, I'd think that your password would be strong enough to withstand a dictionary attack. And what if you set up an RSA key instead of a password? Will a dictionary help then? It sounds like you're very unprepared to "remember" what your password is, or even what "you" have stored on the system.
ta0kira

Tinkster 11-01-2008 07:24 PM

Quote:

Originally Posted by frenchn00b (Post 3328587)
Hello,

Bit difficult topic. I dont remember my password I changed. I would like to create a dictionary. Is there any tools under linux?

What exactly would a dictionary creation look like?
You want to feed it a word and have it output l33T15H
variations? You just want a list of words (use vi is
the instant response)?

Quakeboy02 11-01-2008 07:34 PM

Are you looking for a dictionary of common passwords?

ErV 11-01-2008 09:42 PM

Quote:

Originally Posted by frenchn00b (Post 3328587)
Hello,

Bit difficult topic. I dont remember my password I changed.

To my experience, there is a pause between login attempts. Something about 2 seconds. This will make bruteforcing difficult. Even with a dictionary, you'll need to wait for quite a long time. So try something different.

Quote:

Originally Posted by frenchn00b (Post 3328587)
I would like to create a dictionary. Is there any tools under linux?

You can create dictionary from existing text by writing python script. It's not difficult.

frenchn00b 11-02-2008 01:44 AM

Quote:

Originally Posted by Quakeboy02 (Post 3328667)
Are you looking for a dictionary of common passwords?

thx
no no, I know more or less my password, but would of course need a way other to make a dictionary of it, like word association, (because it can be long trying manually) and to run it through the ssh try... well if possible

unSpawn 11-02-2008 04:32 AM

Quote:

Originally Posted by frenchn00b (Post 3328833)
thx
no no, I know more or less my password, but would of course need a way other to make a dictionary of it, like word association, (because it can be long trying manually) and to run it through the ssh try... well if possible

You posted some code found elsewhere. Like the first reply stated there is only one reason for using such a tool and like the second and third reply stated there are ways to change or (procedures you should follow to) have it changed. Instead you chose to respond to all valuable and correct replies in a very selective way, focussing only on the dictionary part.

Since addressing those replies will gain us info on what you're actually trying to do and givent he fact you've posted a tool I'd rather not see here I am asking you to please post details of the situation and the reason why you won't consider the second and third response.

frenchn00b 11-02-2008 06:53 AM

Quote:

Originally Posted by unSpawn (Post 3328943)
You posted some code found elsewhere. Like the first reply stated there is only one reason for using such a tool and like the second and third reply stated there are ways to change or (procedures you should follow to) have it changed. Instead you chose to respond to all valuable and correct replies in a very selective way, focussing only on the dictionary part.

Since addressing those replies will gain us info on what you're actually trying to do and givent he fact you've posted a tool I'd rather not see here I am asking you to please post details of the situation and the reason why you won't consider the second and third response.

I knew I flew on the thread, because there was so much asking for details. Sorry I didnt have much time to give more because I had to rush to be on time for a meeting this morning.

I have only remote access to the machine
no possibility to boot any cdrom hence
It is via ssh on a machine that is just no security installed, you arent banned up to 3 trials, eg fail2ban or whatever scripting
i can try 2 then try again
the port is although specific
it was a fast installation

i know the password more or less
i wanna generate a dictioanry file that content several passwords,
and run it, it tries 2 passwords; and continues until it tries all pswd of dictionary.

please is there a code for that ?
the upper code I found, isnt workign. :(

that's not big in depth difficult thing, but i am not good much in linux and all coding :( no time much for that, just user like 50pct of those linux users guys :(

unSpawn 11-02-2008 09:03 AM

Quote:

Originally Posted by frenchn00b (Post 3329023)
I have only remote access to the machine (..) it was a fast installation

So who owns the remote? Is it in colo?


Quote:

Originally Posted by frenchn00b (Post 3329023)
please is there a code for that ?

I'd rather see you try legitimate methods first.

ErV 11-02-2008 11:13 AM

Quote:

Originally Posted by frenchn00b (Post 3329023)
I have only remote access to the machine

In this case contact machine owner or system administrator first.

frenchn00b 11-02-2008 02:17 PM

Quote:

Originally Posted by ErV (Post 3329195)
In this case contact machine owner or system administrator first.

it is done, even :) :) :)


All times are GMT -5. The time now is 01:47 PM.