Welcome to HBH! If you had an account on hellboundhacker.org you will need to reset your password using the Lost Password system before you will be able to login.

SSH bruteforcing


newbee's Avatar
Member
0 0

does anyone know how to bruteforce SSH usernames and passwords ?

basically the situation is that i ran a nmap scan on my ISP's gateway , and found an open SSH port. when i connect to it via Putty , it asks me for a username , and it will probably ask me for a password (duh !) .

so is there a way to bruteforce it ?


techb's Avatar
Member
0 0

Have you tried the default username and pass for the brand of router?


ellipsis's Avatar
...
0 -1

[url=http://lmgtfy.com/?q=bruteforce ssh]try this[/url]


Arabian's Avatar
Member
0 0

This is where scripting languages come in handy. It's a simple matter of looping through a user and pass list and socket connections. Look up how to do it in Python if this is Babby's first language, or Perl if you are glorious master race.


newbee's Avatar
Member
0 0

Arabian wrote: Look up how to do it in Python if this is Babby's first language, or Perl if you are glorious master race.

i've never tried python or perl before.


Arabian's Avatar
Member
0 0

Now's the time to shine then. Have at it, and don't you dare let me catch you abusing one of the myriad bruteforcing programs build specifically for this purpose.


goluhaque's Avatar
Member
0 0

Arabian wrote: Now's the time to shine then. Have at it, and don't you dare let me catch you abusing one of the myriad bruteforcing programs build specifically for this purpose. I am guessing C would be good enough for this too? I need some inspiration for learning it.


Arabian's Avatar
Member
0 0

goluhaque wrote: [quote]Arabian wrote: Now's the time to shine then. Have at it, and don't you dare let me catch you abusing one of the myriad bruteforcing programs build specifically for this purpose. I am guessing C would be good enough for this too? I need some inspiration for learning it.[/quote]

Hell no. Have you ever seen what it takes to write proper sockets in C? It's hell.


goluhaque's Avatar
Member
0 0

Arabian wrote: [quote]goluhaque wrote: [quote]Arabian wrote: Now's the time to shine then. Have at it, and don't you dare let me catch you abusing one of the myriad bruteforcing programs build specifically for this purpose. I am guessing C would be good enough for this too? I need some inspiration for learning it.[/quote]

Hell no. Have you ever seen what it takes to write proper sockets in C? It's hell.[/quote] Damn. But I have heard that many network programs still use C. If this is true, why does this happen?


Arabian's Avatar
Member
0 0

Because C is fast and the more advanced can write their own Net api's with relative ease. It's nothing OP can accomplish, though.


ghost's Avatar
0 0

%5bquote%5d%5bb%5dnewbee+wrote%3a%5b%2fb%5d%0adoes+anyone+know+how+to+bruteforce+SSH+usernames+and+passwords+%3f%0d%0a%0d%0abasically+the+situation+is+that+i+ran+a+nmap+scan+on+my+ISP%26%2339%3bs+gateway+%2c+and+found+an+open+SSH+port.+when+i+connect+to+it+via+Putty+%2c+it+asks+me+for+a+username+%2c+and+it+will+probably+ask+me+for+a+password+%28duh+%21%29+.%0d%0a%0d%0aso+is+there+a+way+to+bruteforce+it+%3f+%5b%2fquote%5d


ghost's Avatar
0 0

Guys this is completely off topic but how would i exploit this: [url]http://www.cvedetails.com/cve/CVE-2011-4130/ [/url] vulnerability

P.S. the reason I didn't start a new thread is because whenever i post a thread the website says there is no author and when i it it doesn't show my post