sshBruteforcer

A small GoLang app which can bruteforce ssh credentials, was used before for a ctf and is now optimized for future ctf events.

Features:

 [#]  Wordlist usage
 [#]  Workers
 [#]  Comand-line arguments
 [#]  Inverted Bruteforce (Username missing, known password)
 [#]  Socket5 Proxy
 [#]  Socket5 Proxy List
 [#]  Fail2Ban detection and switch Proxy
 [ ]  Automated flag dumping ( ssh to machine and `find ...` it)

Usage

go build
./sshMultiThreadedBruteForcer -h

  -c int                                                                                         
        Specify Worker count. Default is 10 (default 22)                                         
  -d string                                                                                      
        Specify Hostname or ip. Default is 127.0.0.1 (default "127.0.0.1")                       
  -i    Specify Inversion mode, bruteforce username with one password. Default is false          
  -p int                                                                                         
        Specify Port. Default is 22 (default 22)                                                 
  -proxies string                                                                                
        Specify proxy list. Default is empty                                                     
  -proxy string                                                                                  
        Specify proxy in format ip:port. Default is no proxy usage                               
  -proxy-credentials string                                                                      
        Specify proxy credentials in format username:password. Default is empty                  
  -t int                                                                                         
        Specify Timeout. Default is 3 (default 3)                                                
  -u string                                                                                      
        Specify username or password (depends on inverted flag). Default is root (default "root")
  -w string                                                                                      
        Specify wordlist. Default is ./smalllist.txt (default "./smalllist.txt")    

Info

This tool is created strictly for CTF purpose.