Blog ini non-partisan dan terbuka kepada semua tanpa mengira fahaman politik. Emel atau MMS ucapan / rayuan / keluhan / pengumuman anda ke tamanperpaduan.terusblog@blogger.com untuk tulisan anda tersiar di blog ini serta merta. Gambar juga boleh disertakan dan tertakluk kepada syarat.
Posting tidak sepatutnya akan dinyahsiarkan.

Jumaat, 21 Ogos 2020

BruteSpray: A Brute-forcer From Nmap Output And Automatically Attempts Default Creds On Found Services


About BruteSpray: BruteSpray takes nmap GNMAP/XML output or newline seperated JSONS and automatically brute-forces services with default credentials using Medusa. BruteSpray can even find non-standard ports by using the -sV inside Nmap.

BruteSpay's Installation
   With Debian users, the only thing you need to do is this command:
sudo apt install brutespray

   For Arch Linux user, you must install Medusa first: sudo pacman -S medusa

   And then, enter these commands to install BruteSpray:


Supported Services: ssh, ftp, telnet, vnc, mssql, mysql, postgresql, rsh, imap, nntpp, canywhere, pop3, rexec, rlogin, smbnt, smtp, svn, vmauthdv, snmp.

How to use BruteSpray?

   First do an Nmap scan with -oG nmap.gnmap or -oX nmap.xml.
   Command: python3 brutespray.py -h
   Command: python3 brutespray.py --file nmap.gnmap
   Command: python3 brutesrpay.py --file nmap.xml
   Command: python3 brutespray.py --file nmap.xml -i

   You can watch more details here:

Examples

   Using Custom Wordlists:
python3 brutespray.py --file nmap.gnmap -U /usr/share/wordlist/user.txt -P /usr/share/wordlist/pass.txt --threads 5 --hosts 5

   Brute-Forcing Specific Services:
python3 brutespray.py --file nmap.gnmap --service ftp,ssh,telnet --threads 5 --hosts 5

   Specific Credentials:
python3 brutespray.py --file nmap.gnmap -u admin -p password --threads 5 --hosts 5

   Continue After Success:
python3 brutespray.py --file nmap.gnmap --threads 5 --hosts 5 -c

   Use Nmap XML Output:
python3 brutespray.py --file nmap.xml --threads 5 --hosts 5

   Use JSON Output:
python3 brutespray.py --file out.json --threads 5 --hosts 5

   Interactive Mode: python3 brutespray.py --file nmap.xml -i

Data Specs
{"host":"127.0.0.1","port":"3306","service":"mysql"}
{"host":"127.0.0.10","port":"3306","service":"mysql"}
...


Changelog: Changelog notes are available at CHANGELOG.md.

You might like these similar tools:

More information
  1. Top Pentest Tools
  2. Hack And Tools
  3. Free Pentest Tools For Windows
  4. Hacking Tools 2019
  5. How To Install Pentest Tools In Ubuntu
  6. Pentest Tools Download
  7. Pentest Tools Tcp Port Scanner
  8. Hack Tools Online
  9. Pentest Automation Tools
  10. Pentest Tools Linux
  11. Hacking Tools For Pc
  12. Underground Hacker Sites
  13. Hack Tools
  14. Pentest Tools Subdomain
  15. Wifi Hacker Tools For Windows
  16. Hack Rom Tools
  17. Nsa Hack Tools Download
  18. Hak5 Tools
  19. Pentest Tools For Android
  20. Hack Tools For Mac
  21. Hacker Tool Kit
  22. Hack Tools 2019
  23. Hacking Tools Pc
  24. Hacking Tools Windows 10
  25. Hacker Tools Free Download
  26. Hacking Apps
  27. Pentest Tools Review
  28. Hacking Tools Free Download
  29. Pentest Tools Bluekeep
  30. Hack Tools Online
  31. Github Hacking Tools
  32. Nsa Hack Tools Download
  33. Physical Pentest Tools
  34. Blackhat Hacker Tools
  35. Free Pentest Tools For Windows
  36. Hacking Tools For Games
  37. Pentest Tools List
  38. Install Pentest Tools Ubuntu
  39. Pentest Recon Tools
  40. Hack Tool Apk No Root
  41. Hacker Tools For Mac
  42. Hacking Tools 2020
  43. Pentest Tools For Mac
  44. Bluetooth Hacking Tools Kali
  45. Hacking Tools For Windows
  46. Hack Tools For Ubuntu
  47. Hacker Search Tools
  48. Hack And Tools
  49. Hacking Tools 2020
  50. Hacking Tools Mac
  51. Hacker Tools 2019
  52. Hacker Tools Free Download
  53. Termux Hacking Tools 2019
  54. Black Hat Hacker Tools
  55. Pentest Tools Tcp Port Scanner
  56. Hacking Tools 2020
  57. Top Pentest Tools
  58. Pentest Tools Subdomain
  59. Hacker Tools Apk
  60. Hacker Tools Software
  61. Pentest Tools Find Subdomains
  62. Hacker Tools Github
  63. Hacking Tools For Pc
  64. Hack Apps
  65. Hacker Tools For Windows
  66. Best Pentesting Tools 2018
  67. What Is Hacking Tools
  68. Hacker Security Tools
  69. Pentest Tools For Android
  70. Hacking Tools For Windows Free Download
  71. Pentest Tools Nmap
  72. Pentest Tools Free

Tiada ulasan:

Catat Ulasan