Showing posts with label python. Show all posts
Showing posts with label python. Show all posts
Saturday, March 25, 2017
Osueta A simple Python script to exploit the OpenSSH User Enumeration Timing Attack
Osueta A simple Python script to exploit the OpenSSH User Enumeration Timing Attack
Osueta its a simple Python2 script to exploit the OpenSSH User Enumeration Timing Attack, present in OpenSSH versions 5.* and 6.*. The script has the ability to make variations of the username employed in the bruteforce attack, and the possibility to establish a DOS condition in the OpenSSH server.
usage: osueta.py [-h] [-H HOST] [-k HFILE] [-f FQDN] [-p PORT] [-L UFILE]
[-U USER] [-d DELAY] [-v VARI] [-o OUTP] [-l LENGTH]
[-c VERS] [--dos DOS] [-t THREADS]
OpenSSH User Enumeration Time-Based Attack Python script
optional arguments:
-h, --help show this help message and exit
-H HOST Host Ip or CIDR netblock.
-k HFILE Host list in a file.
-f FQDN FQDN to attack.
-p PORT Host port.
-L UFILE Username list file.
-U USER Only use a single username.
-d DELAY Time delay fixed in seconds. If not, delay time is calculated.
-v VARI Make variations of the username (default yes).
-o OUTP Output file with positive results.
-l LENGTH Length of the password in characters (x1000) (default 40).
-c VERS Check or not the OpenSSH version (default yes).
--dos DOS Try to make a DOS attack (default no).
-t THREADS Threads for the DOS attack (default 5).Download Osueta
Go to link download
Saturday, March 18, 2017
Mobius Forensic Framework written in Python GTK
Mobius Forensic Framework written in Python GTK
Mobius Forensic Toolkit is a forensic framework written in Python/GTK that manages cases and case items, providing an abstract interface for developing extensions. Cases and item categories are defined using XML files for easy integration with other tool.
Release 0.5.20 published
This release introduces the CellPhone Agent extension, an extension to browse Cellebrites report.xml files. Minor improvements have been made and a few bugs have been fixed. See the ChangeLog:
- new extension cellphone-agent
- report-model: new service report.run-dialog
- report-model: verbatim generates % instead of %%
- report-model: do not generate duplicated methods in .py
- gtk-ui: forbid treeitem DND onto itself
- gtk-ui: case treeview icon cache implemented
- gtk-ui: do not expand selected item when item.children is modified
- skype-agent: "generate report" option
- skype-agent: account view disables DND when not selected
- skype-agent: account tile image repositioned
- ice: use service report.run-dialog
- sdi-window-manager: call to on_widget_started eliminated
- partition-viewer: scan only partition-system components
- partition-agent: update item.children only if it detects partitions
- partition-agent-dos: keep item.children when building components
- turing: test dictionary option fixed
Download Mobius
Go to link download
Subscribe to:
Posts (Atom)