entysec / shreder Goto Github PK
View Code? Open in Web Editor NEWShreder is a powerful multi-threaded SSH protocol password brute-force tool.
Home Page: https://entysec.com
License: MIT License
Shreder is a powerful multi-threaded SSH protocol password brute-force tool.
Home Page: https://entysec.com
License: MIT License
Traceback (most recent call last):
File "/home/koneko/.local/bin/shreder", line 8, in
sys.exit(main())
File "/home/koneko/.local/lib/python3.8/site-packages/shreder/cli.py", line 75, in main
cli.start()
File "/home/koneko/.local/lib/python3.8/site-packages/shreder/cli.py", line 48, in start
self.print_error(f"List file: {self.args.input}: does not exist!")
AttributeError: 'Namespace' object has no attribute 'input'
im on a wsl version of Ubuntu but it does the same thing on a google cloud shell, I'm not sure what caused this, it just happened
Hi, first of all, thanks for this script.
I'm using it as a module, but when i was trying to do dictionary attack, i faced with some errors which i think it is for parmiko
.
maybe i should post this issue in the parmiko page, but first posting that here, maybe you could handle/fix that in your script.
it guesses the password correctly somtimes, but because of these errors, it has some FalsePositive in each target which returns None
result.
command: password = shreder.brute(ip, 22, 'user', 'password.txt')
target OS: Ubuntu 20.04
Output:
Traceback (most recent call last):
File "/home/pytm/.local/lib/python3.8/site-packages/paramiko/transport.py", line 2211, in _check_banner
buf = self.packetizer.readline(timeout)
File "/home/pytm/.local/lib/python3.8/site-packages/paramiko/packet.py", line 380, in readline
buf += self._read_timeout(timeout)
File "/home/pytm/.local/lib/python3.8/site-packages/paramiko/packet.py", line 609, in _read_timeout
raise EOFError()
EOFError
During handling of the above exception, another exception occurred:
Traceback (most recent call last):
File "/home/pytm/.local/lib/python3.8/site-packages/paramiko/transport.py", line 2039, in run
self._check_banner()
File "/home/pytm/.local/lib/python3.8/site-packages/paramiko/transport.py", line 2215, in _check_banner
raise SSHException(
paramiko.ssh_exception.SSHException: Error reading SSH protocol banner
Exception: Error reading SSH protocol banner
Traceback (most recent call last):
File "/home/pytm/.local/lib/python3.8/site-packages/paramiko/transport.py", line 2211, in _check_banner
buf = self.packetizer.readline(timeout)
File "/home/pytm/.local/lib/python3.8/site-packages/paramiko/packet.py", line 380, in readline
buf += self._read_timeout(timeout)
File "/home/pytm/.local/lib/python3.8/site-packages/paramiko/packet.py", line 609, in _read_timeout
raise EOFError()
EOFError
During handling of the above exception, another exception occurred:
Traceback (most recent call last):
File "/home/pytm/.local/lib/python3.8/site-packages/paramiko/transport.py", line 2039, in run
self._check_banner()
File "/home/pytm/.local/lib/python3.8/site-packages/paramiko/transport.py", line 2215, in _check_banner
raise SSHException(
paramiko.ssh_exception.SSHException: Error reading SSH protocol banner
shreder 192.168.1.66 -u admin -l /usr/share/wordlists/rockyou.txt
Traceback (most recent call last):
File "/usr/local/bin/shreder", line 8, in
sys.exit(main())
File "/usr/local/lib/python3.9/dist-packages/shreder/cli.py", line 73, in main
cli.start()
File "/usr/local/lib/python3.9/dist-packages/shreder/cli.py", line 54, in start
password = self.brute(
File "/usr/local/lib/python3.9/dist-packages/shreder/main.py", line 51, in brute
lines = f.read().split('\n')
File "/usr/lib/python3.9/codecs.py", line 322, in decode
(result, consumed) = self._buffer_decode(data, self.errors, final)
UnicodeDecodeError: 'utf-8' codec can't decode byte 0xf1 in position 5079963: invalid continuation byte
In your "connect" function, paramiko try to connect to server. In my case, as server was Win10 with ssh server. After you fail password, it asks you to try password again. When I launch your code, Win10 quickly got stuck with 10+ ssh connections NOW, leading to ssh server death, and next passwords got EOF from ssh.
I suggest you to put ssh.close() in except block before return to avoid this mess
Also, thanks for library!
root㉿kali)-[~/Brute-Force-Login]
└─# shreder 192.168.1.12 -u root -l /root/Downloads/Top10k.txt
Traceback (most recent call last):
File "/usr/local/bin/shreder", line 8, in <module>
sys.exit(main())
File "/usr/local/lib/python3.9/dist-packages/shreder/cli.py", line 75, in main
cli.start()
File "/usr/local/lib/python3.9/dist-packages/shreder/cli.py", line 55, in start
password = self.brute(
File "/usr/local/lib/python3.9/dist-packages/shreder/__main__.py", line 52, in brute
lines = f.read().split('\n')
File "/usr/lib/python3.9/codecs.py", line 322, in decode
(result, consumed) = self._buffer_decode(data, self.errors, final)
UnicodeDecodeError: 'utf-8' codec can't decode byte 0xed in position 5745570: invalid continuation byte
Any idea how to fix it?
A declarative, efficient, and flexible JavaScript library for building user interfaces.
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
The Web framework for perfectionists with deadlines.
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
We are working to build community through open source technology. NB: members must have two-factor auth.
Open source projects and samples from Microsoft.
Google ❤️ Open Source for everyone.
Alibaba Open Source for everyone
Data-Driven Documents codes.
China tencent open source team.