Security Basics mailing list archives
RE: Re: broute forcing telnet and ssh
From: "Steve Fletcher" <safletcher () insightbb com>
Date: Wed, 28 Sep 2005 10:42:24 -0500
I did a search on Google and within 15 minutes found a couple of tools. One is a script written in expect that will brute force SSH logins while the other is a program called GuessWho. I'm sure there are others. And, it is possible that someone modified/improved one of these themselves. HTH, Steve Fletcher MCSE (NT4/Win2k), MCSE: Security (Win2k), HP Master ASE, CCNA, Security+ Email: safletcher () insightbb com Web: http://safletcher.home.insightbb.com -----Original Message----- From: planbb () telus net [mailto:planbb () telus net] Sent: Monday, September 26, 2005 3:41 PM To: security-basics () securityfocus com Subject: Re: Re: broute forcing telnet and ssh I was hoping to find a similar tool. Brutus works well for ftp, http and telnet auths. I have yet to find a good one for ssh. I was looking for one as well because a few of the servers at work have been rooted via ssh brute force. A weak password was to blame. There is some sort of program in circulation and I was hoping to find the code for it. It seems it doesn't just brute force but it checks for typical usernames and passwords. For example it tries admin, root, apache, vsftpd, ftpsecure and all those. Almost all the secure log files on all the servers were filled with failed in ssh log attempts. Solution to this was to listen on a different port and run a daemon that prevents too many failed attempts from one IP. I would still very much like to see the ssh brute forcer that they are using. Anyone know where?
Current thread:
- broute forcing telnet and ssh Juan B (Sep 26)
- RE: broute forcing telnet and ssh Meni Milstein (Sep 26)
- Re: broute forcing telnet and ssh Gregory Boyce (Sep 26)
- Re: broute forcing telnet and ssh Jeffrey F. Bloss (Sep 26)
- <Possible follow-ups>
- Re: Re: broute forcing telnet and ssh planbb (Sep 27)
- RE: Re: broute forcing telnet and ssh Miguel Dilaj (Sep 28)
- RE: Re: broute forcing telnet and ssh Steve Fletcher (Sep 28)