SSH bruteforcing

does anyone know how to bruteforce SSH usernames and passwords ?

basically the situation is that i ran a nmap scan on my ISP's gateway , and found an open SSH port. when i connect to it via Putty , it asks me for a username , and it will probably ask me for a password (duh !) .

so is there a way to bruteforce it ?

Have you tried the default username and pass for the brand of router?

[url=http://lmgtfy.com/?q=bruteforce ssh]try this[/url]

This is where scripting languages come in handy. It's a simple matter of looping through a user and pass list and socket connections. Look up how to do it in Python if this is Babby's first language, or Perl if you are glorious master race.

Arabian wrote: Look up how to do it in Python if this is Babby's first language, or Perl if you are glorious master race.

i've never tried python or perl before.

Now's the time to shine then. Have at it, and don't you dare let me catch you abusing one of the myriad bruteforcing programs build specifically for this purpose.

Arabian wrote: Now's the time to shine then. Have at it, and don't you dare let me catch you abusing one of the myriad bruteforcing programs build specifically for this purpose. I am guessing C would be good enough for this too? I need some inspiration for learning it.

goluhaque wrote: [quote]Arabian wrote: Now's the time to shine then. Have at it, and don't you dare let me catch you abusing one of the myriad bruteforcing programs build specifically for this purpose. I am guessing C would be good enough for this too? I need some inspiration for learning it.[/quote]

Hell no. Have you ever seen what it takes to write proper sockets in C? It's hell.

Arabian wrote: [quote]goluhaque wrote: [quote]Arabian wrote: Now's the time to shine then. Have at it, and don't you dare let me catch you abusing one of the myriad bruteforcing programs build specifically for this purpose. I am guessing C would be good enough for this too? I need some inspiration for learning it.[/quote]

Hell no. Have you ever seen what it takes to write proper sockets in C? It's hell.[/quote] Damn. But I have heard that many network programs still use C. If this is true, why does this happen?

Because C is fast and the more advanced can write their own Net api's with relative ease. It's nothing OP can accomplish, though.

%5bquote%5d%5bb%5dnewbee+wrote%3a%5b%2fb%5d%0adoes+anyone+know+how+to+bruteforce+SSH+usernames+and+passwords+%3f%0d%0a%0d%0abasically+the+situation+is+that+i+ran+a+nmap+scan+on+my+ISP%26%2339%3bs+gateway+%2c+and+found+an+open+SSH+port.+when+i+connect+to+it+via+Putty+%2c+it+asks+me+for+a+username+%2c+and+it+will+probably+ask+me+for+a+password+%28duh+%21%29+.%0d%0a%0d%0aso+is+there+a+way+to+bruteforce+it+%3f+%5b%2fquote%5d

Guys this is completely off topic but how would i exploit this: [url]http://www.cvedetails.com/cve/CVE-2011-4130/ [/url] vulnerability

P.S. the reason I didn't start a new thread is because whenever i post a thread the website says there is no author and when i it it doesn't show my post