LinuxQuestions.org
Visit Jeremy's Blog.
Go Back   LinuxQuestions.org > Forums > Non-*NIX Forums > Programming
User Name
Password
Programming This forum is for all programming questions.
The question does not have to be directly related to Linux and any language is fair game.

Notices


Reply
  Search this Thread
Old 11-01-2008, 05:43 PM   #1
frenchn00b
Senior Member
 
Registered: Jun 2007
Location: E.U., Mountains :-)
Distribution: Debian, Etch, the greatest
Posts: 2,561

Rep: Reputation: 57
Code: Ssh brute forcer


Hello,

Bit difficult topic. I dont remember my password I changed. I would like to create a dictionary. Is there any tools under linux?

code :

// Removed possibly malicious script. crabboy

Last edited by crabboy; 11-05-2008 at 11:01 AM.
 
Old 11-01-2008, 06:17 PM   #2
jcookeman
Member
 
Registered: Jul 2003
Location: London, UK
Distribution: FreeBSD, OpenSuse, Ubuntu, RHEL
Posts: 417

Rep: Reputation: 33
I can think of only one valid use for that script and it's not trying to crack your own password. If you have, for instance, a web host provider and you forgot your password, then you should contact the appropriate person(s) to have it reset. Running that script could possibly get you banned very quickly.
 
Old 11-01-2008, 06:25 PM   #3
estabroo
Senior Member
 
Registered: Jun 2008
Distribution: debian, ubuntu, sidux
Posts: 1,126
Blog Entries: 2

Rep: Reputation: 124Reputation: 124
If its a local machine just boot it with a livecd and change the password directly.
 
Old 11-01-2008, 06:29 PM   #4
ta0kira
Senior Member
 
Registered: Sep 2004
Distribution: FreeBSD 9.1, Kubuntu 12.10
Posts: 3,078

Rep: Reputation: Disabled
Why don't you type a list of everything you might have used as your password and make a dictionary out of that? What if you didn't use a word? Maybe you were security-minded at the time and used an unpronounceable sequence of letters, numbers, and symbols in case someone with a script like yours wanted to crack it? Maybe you should just run a Linux install CD, chroot as root, then change your password to something you will remember. If the info you have on the machine is worth all the effort of cracking your password, I'd think that your password would be strong enough to withstand a dictionary attack. And what if you set up an RSA key instead of a password? Will a dictionary help then? It sounds like you're very unprepared to "remember" what your password is, or even what "you" have stored on the system.
ta0kira

Last edited by ta0kira; 11-01-2008 at 06:32 PM.
 
Old 11-01-2008, 07:24 PM   #5
Tinkster
Moderator
 
Registered: Apr 2002
Location: earth
Distribution: slackware by choice, others too :} ... android.
Posts: 23,067
Blog Entries: 11

Rep: Reputation: 928Reputation: 928Reputation: 928Reputation: 928Reputation: 928Reputation: 928Reputation: 928Reputation: 928
Quote:
Originally Posted by frenchn00b View Post
Hello,

Bit difficult topic. I dont remember my password I changed. I would like to create a dictionary. Is there any tools under linux?
What exactly would a dictionary creation look like?
You want to feed it a word and have it output l33T15H
variations? You just want a list of words (use vi is
the instant response)?
 
Old 11-01-2008, 07:34 PM   #6
Quakeboy02
Senior Member
 
Registered: Nov 2006
Distribution: Debian Linux 11 (Bullseye)
Posts: 3,407

Rep: Reputation: 141Reputation: 141
Are you looking for a dictionary of common passwords?
 
Old 11-01-2008, 09:42 PM   #7
ErV
Senior Member
 
Registered: Mar 2007
Location: Russia
Distribution: Slackware 12.2
Posts: 1,202
Blog Entries: 3

Rep: Reputation: 62
Quote:
Originally Posted by frenchn00b View Post
Hello,

Bit difficult topic. I dont remember my password I changed.
To my experience, there is a pause between login attempts. Something about 2 seconds. This will make bruteforcing difficult. Even with a dictionary, you'll need to wait for quite a long time. So try something different.

Quote:
Originally Posted by frenchn00b View Post
I would like to create a dictionary. Is there any tools under linux?
You can create dictionary from existing text by writing python script. It's not difficult.

Last edited by ErV; 11-01-2008 at 10:41 PM.
 
Old 11-02-2008, 01:44 AM   #8
frenchn00b
Senior Member
 
Registered: Jun 2007
Location: E.U., Mountains :-)
Distribution: Debian, Etch, the greatest
Posts: 2,561

Original Poster
Rep: Reputation: 57
Quote:
Originally Posted by Quakeboy02 View Post
Are you looking for a dictionary of common passwords?
thx
no no, I know more or less my password, but would of course need a way other to make a dictionary of it, like word association, (because it can be long trying manually) and to run it through the ssh try... well if possible
 
Old 11-02-2008, 04:32 AM   #9
unSpawn
Moderator
 
Registered: May 2001
Posts: 29,415
Blog Entries: 55

Rep: Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600
Quote:
Originally Posted by frenchn00b View Post
thx
no no, I know more or less my password, but would of course need a way other to make a dictionary of it, like word association, (because it can be long trying manually) and to run it through the ssh try... well if possible
You posted some code found elsewhere. Like the first reply stated there is only one reason for using such a tool and like the second and third reply stated there are ways to change or (procedures you should follow to) have it changed. Instead you chose to respond to all valuable and correct replies in a very selective way, focussing only on the dictionary part.

Since addressing those replies will gain us info on what you're actually trying to do and givent he fact you've posted a tool I'd rather not see here I am asking you to please post details of the situation and the reason why you won't consider the second and third response.
 
Old 11-02-2008, 06:53 AM   #10
frenchn00b
Senior Member
 
Registered: Jun 2007
Location: E.U., Mountains :-)
Distribution: Debian, Etch, the greatest
Posts: 2,561

Original Poster
Rep: Reputation: 57
Quote:
Originally Posted by unSpawn View Post
You posted some code found elsewhere. Like the first reply stated there is only one reason for using such a tool and like the second and third reply stated there are ways to change or (procedures you should follow to) have it changed. Instead you chose to respond to all valuable and correct replies in a very selective way, focussing only on the dictionary part.

Since addressing those replies will gain us info on what you're actually trying to do and givent he fact you've posted a tool I'd rather not see here I am asking you to please post details of the situation and the reason why you won't consider the second and third response.
I knew I flew on the thread, because there was so much asking for details. Sorry I didnt have much time to give more because I had to rush to be on time for a meeting this morning.

I have only remote access to the machine
no possibility to boot any cdrom hence
It is via ssh on a machine that is just no security installed, you arent banned up to 3 trials, eg fail2ban or whatever scripting
i can try 2 then try again
the port is although specific
it was a fast installation

i know the password more or less
i wanna generate a dictioanry file that content several passwords,
and run it, it tries 2 passwords; and continues until it tries all pswd of dictionary.

please is there a code for that ?
the upper code I found, isnt workign.

that's not big in depth difficult thing, but i am not good much in linux and all coding no time much for that, just user like 50pct of those linux users guys
 
Old 11-02-2008, 09:03 AM   #11
unSpawn
Moderator
 
Registered: May 2001
Posts: 29,415
Blog Entries: 55

Rep: Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600
Quote:
Originally Posted by frenchn00b View Post
I have only remote access to the machine (..) it was a fast installation
So who owns the remote? Is it in colo?


Quote:
Originally Posted by frenchn00b View Post
please is there a code for that ?
I'd rather see you try legitimate methods first.
 
Old 11-02-2008, 11:13 AM   #12
ErV
Senior Member
 
Registered: Mar 2007
Location: Russia
Distribution: Slackware 12.2
Posts: 1,202
Blog Entries: 3

Rep: Reputation: 62
Quote:
Originally Posted by frenchn00b View Post
I have only remote access to the machine
In this case contact machine owner or system administrator first.
 
Old 11-02-2008, 02:17 PM   #13
frenchn00b
Senior Member
 
Registered: Jun 2007
Location: E.U., Mountains :-)
Distribution: Debian, Etch, the greatest
Posts: 2,561

Original Poster
Rep: Reputation: 57
Quote:
Originally Posted by ErV View Post
In this case contact machine owner or system administrator first.
it is done, even
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
brute-force-ssh-attack saavik Linux - Security 6 09-05-2008 01:01 AM
I have been brute forced (ssh) jsm Linux - Security 2 09-13-2006 03:20 PM
ssh brute force attempts coolb Linux - Security 4 06-04-2006 04:53 AM
ssh brute force, how do they work? galle Linux - Security 3 03-10-2006 06:58 AM
SSH brute force.... compromised? heri0n Linux - Security 15 11-21-2004 05:51 PM

LinuxQuestions.org > Forums > Non-*NIX Forums > Programming

All times are GMT -5. The time now is 10:33 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration