/cbrutekrag

Penetration tests on SSH servers using brute force or dictionary attacks. Written in C.

Primary LanguageCMIT LicenseMIT

license GitHub contributors Build Status

cbrutekrag

Penetration tests on SSH servers using dictionary attacks. Written in C.

brute krag means "brute force" in afrikáans

Disclaimer

This tool is for ethical testing purpose only.
cbrutekrag and its owners can't be held responsible for misuse by users.
Users have to act as permitted by local law rules.

Requeriments

  • gcc compiler
  • libssh

Build

git clone --depth=1 https://github.com/jorge-matricali/cbrutekrag.git
cd cbrutekrag
make
make install

Then you can do

$ cbrutekrag -h
       _                _       _
      | |              | |     | |
  ___ | |__  _ __ _   _| |_ ___| | ___ __ __ _  __ _
 / __|| '_ \| '__| | | | __/ _ \ |/ / '__/ _` |/ _` |
| (__ | |_) | |  | |_| | ||  __/   <| | | (_| | (_| |
 \___||_.__/|_|   \__,_|\__\___|_|\_\_|  \__,_|\__, |
          OpenSSH Brute force tool 0.3.0        __/ |
      (c) Copyright 2014-2018 Jorge Matricali  |___/


usage: ./cbrutekrag [-h] [-v] [-T TARGETS.lst] [-C combinations.lst]
                [-t THREADS] [-o OUTPUT.txt]

  -h                This help
  -v                Verbose mode
  -T <targets>      Targets file
  -C <combinations> Username and password file
  -t <threads>      Max threads
  -o <output>       Output log file

Example usages

# Many targets, many pre-made combinations of user and password separated by space.
cbrutekrag -T targets.txt -C combinations.txt -o result.log