BruteSpray: A Brute-forcer From Nmap Output And Automatically Attempts Default Creds On Found Services
About BruteSpray: BruteSpray takes nmap GNMAP/XML output or newline seperated JSONS and automatically brute-forces services with default credentials using Medusa. BruteSpray can even find non-standard ports by using the
-sV
inside Nmap.BruteSpay's Installation
With Debian users, the only thing you need to do is this command:
sudo apt install brutespray
For Arch Linux user, you must install Medusa first:
sudo pacman -S medusa
And then, enter these commands to install BruteSpray:
Supported Services: ssh, ftp, telnet, vnc, mssql, mysql, postgresql, rsh, imap, nntpp, canywhere, pop3, rexec, rlogin, smbnt, smtp, svn, vmauthdv, snmp.
How to use BruteSpray?
First do an Nmap scan with
-oG nmap.gnmap
or -oX nmap.xml
.Command:
python3 brutespray.py -h
Command:
python3 brutespray.py --file nmap.gnmap
Command:
python3 brutesrpay.py --file nmap.xml
Command:
python3 brutespray.py --file nmap.xml -i
You can watch more details here:
Examples
Using Custom Wordlists:
python3 brutespray.py --file nmap.gnmap -U /usr/share/wordlist/user.txt -P /usr/share/wordlist/pass.txt --threads 5 --hosts 5
Brute-Forcing Specific Services:
python3 brutespray.py --file nmap.gnmap --service ftp,ssh,telnet --threads 5 --hosts 5
Specific Credentials:
python3 brutespray.py --file nmap.gnmap -u admin -p password --threads 5 --hosts 5
Continue After Success:
python3 brutespray.py --file nmap.gnmap --threads 5 --hosts 5 -c
Use Nmap XML Output:
python3 brutespray.py --file nmap.xml --threads 5 --hosts 5
Use JSON Output:
python3 brutespray.py --file out.json --threads 5 --hosts 5
Interactive Mode:
python3 brutespray.py --file nmap.xml -i
Data Specs
{"host":"127.0.0.1","port":"3306","service":"mysql"}
{"host":"127.0.0.10","port":"3306","service":"mysql"}
...
Changelog: Changelog notes are available at CHANGELOG.md.
You might like these similar tools:
- BruteDum: Brute Force attacks SSH, FTP, Telnet, PostgreSQL, RDP, VNC with Hydra, Medusa and Ncrack
- FTPBruter: A FTP Server Brute forcing tool written in Python 3
- Blazy - Crack Website Logins in seconds with Bruteforce attacks
- SocialBox: A Bruteforce Attack Framework for Social Networks
- Ncrack: An High-speed Open-source Network cracking tool
- Medusa: A Speedy, Parallel And Modular Login Brute-forcing Tool
- Pentest Tools List
- Hack Tools Pc
- Pentest Tools Url Fuzzer
- Best Hacking Tools 2020
- Pentest Tools List
- Hack Tools For Windows
- New Hack Tools
- Hacker Tools Online
- Black Hat Hacker Tools
- Computer Hacker
- Pentest Tools Nmap
- Android Hack Tools Github
- Hacker Tools Online
- Hacker Tools 2019
- Hack Tools Download
- Hacker Tools List
- Beginner Hacker Tools
- Hacking Tools 2019
- Hacking Tools For Windows 7
- Easy Hack Tools
- Hack Tools
- Best Pentesting Tools 2018
- Pentest Tools Website Vulnerability
- Kik Hack Tools
- How To Make Hacking Tools
- Hacker Tools Hardware
- Pentest Tools List
- Hacker Hardware Tools
- Hak5 Tools
- Best Hacking Tools 2020
- What Are Hacking Tools
- Pentest Recon Tools
- Hack Rom Tools
- Hack Tools For Pc
- Pentest Tools Nmap
- Pentest Tools Kali Linux
- Hacker
- Hack Tools Download
- Hack Tools For Ubuntu
- Pentest Tools List
- How To Make Hacking Tools
- Pentest Tools For Mac
- Best Pentesting Tools 2018
- World No 1 Hacker Software
- Hacking Tools Usb
- Pentest Tools Online
- Hacking Tools And Software
- Hacker Tools Apk
- Hacking App
- Nsa Hack Tools
- Hacking Tools For Pc
- Hacking Tools Software
- Growth Hacker Tools
- Bluetooth Hacking Tools Kali
- Pentest Tools Linux
- Hacking Tools For Mac
- Hack Tool Apk
- Pentest Box Tools Download
- Nsa Hacker Tools
- Hack Tools Github
- Pentest Tools For Windows
- Hackrf Tools
- Pentest Tools For Android
- Hacking Tools Name
- Nsa Hack Tools Download
- Hacking Tools Hardware
- Hack Tools Pc
- Hacker Techniques Tools And Incident Handling
- Hack Tools For Mac
- Hacker Tools For Ios
- Hacking App
- Hacker Tools For Mac
- How To Install Pentest Tools In Ubuntu
- Pentest Tools Open Source
- Hacking Tools For Kali Linux
- Pentest Tools List
- Hacker Tools Online
- Hacker Tools Apk
- Hack Tools For Ubuntu
- Hack And Tools
- Hack Tools For Windows
- Hacking Tools Windows
- Computer Hacker
- Pentest Tools Windows
- Android Hack Tools Github
- Pentest Tools Find Subdomains
- What Are Hacking Tools
- Hacking Tools Online
- Pentest Tools
- Pentest Tools Website
- Pentest Tools Windows
- Nsa Hack Tools Download
- Pentest Tools Review
- Pentest Tools Github
- Pentest Tools For Android
- Hacks And Tools
- Computer Hacker
- Pentest Tools Url Fuzzer
- Hacker Tools Free
- Pentest Tools Review
- Hacking Tools For Kali Linux
- Hack Tools
- Pentest Box Tools Download
- Hack Tools For Mac
- Android Hack Tools Github
- Pentest Tools Alternative
- Hacking Tools Usb
- Wifi Hacker Tools For Windows
- Hacking Tools For Kali Linux
- Tools 4 Hack
- Hacking Tools For Windows
- Hacking Tools For Windows 7
- Hacking Tools Usb
- Hacker Techniques Tools And Incident Handling
0 Comments:
Post a Comment
Subscribe to Post Comments [Atom]
<< Home