+- Hack Forums (https://hackforums.net)
+-- Forum: Marketplace (https://hackforums.net/forumdisplay.php?fid=105)
+--- Forum: Premium (https://hackforums.net/forumdisplay.php?fid=451)
+---- Forum: Premium Sellers Section (https://hackforums.net/forumdisplay.php?fid=107)
+---- Thread: SSH Brute Force Scanner (BSSH) (/showthread.php?tid=5894619)
Pages: Pages
1
2
SSH Brute Force Scanner (BSSH) - bssh - Oct 12, 2018
Hello,
I am selling SSH Bruteforce (BSSH)
BSSHv2.5.5b is a great tool for scanning ssh2 connections by providing a list of IPs and passwords. It is fast, reliable and easy to use. It is written in C++, therefore it is compatible on a large scale of unix systems, both 32 and 64 bits.
Compatible on 32 and 64 bit sistem on a various systems
Fast and reliable
Easy to use
Hide process
Making differance between linux sistems and NON-BASH systems
Detects honeypots
If an Linux system is encounters, retrives RAM and CPU data
Checks for updates before start
Multi port scanning
And more details via PM or Jabber
Price: $150
Contact: [email protected] or PM
RE: SSH Brute Force Scanner (BSSH) - Parmenio - Oct 12, 2018
Looks good, have any proofs or vouches of the softwares' capabilities?
RE: SSH Brute Force Scanner (BSSH) - sh4moon - Oct 12, 2018
I have a few questions. how does this thing detect a honeypot? and why are you selling something for $150 that I can make in about an hour and do the same thing?
RE: SSH Brute Force Scanner (BSSH) - bssh - Oct 12, 2018
(Oct 12, 2018 11:13 AM)Parmenio Wrote: Looks good, have any proofs or vouches of the softwares' capabilities?
Please, contact via PM or Jabber.
(Oct 12, 2018 11:14 AM)sh4moon Wrote: I have a few questions. how does this thing detect a honeypot? and why are you selling something for $150 that I can make in about an hour and do the same thing?
Hello,
Thanks for posting.
Please, if you can make this in one hour i'll give you 1k for it.
>>how does this thing detect a honeypot? - honeypots have an same ram and processors. We have an list which its updated for exclude them.
RE: SSH Brute Force Scanner (BSSH) - sh4moon - Oct 12, 2018
(Oct 12, 2018 11:14 AM)bssh Wrote: Please, contact via PM or Jabber.
Hello,
Thanks for posting.
Please, if you can make this in one hour i'll give you 1k for it.
>>how does this thing detect a honeypot? - honeypots have an same ram and processors. We have an list which its updated for exclude them.
you can detect ram and what processor a server has without getting access first?
RE: SSH Brute Force Scanner (BSSH) - bssh - Oct 12, 2018
(Oct 12, 2018 11:20 AM)sh4moon Wrote: you can detect ram and what processor a server has without getting access first?
No, you don't understand me. Once you start bruteforce an list. And you start having results. Will create 3 files.
1. vuln.txt
2. nobash.txt
3. others.txt
in vuln.txt will be only vuln which will be like this:
V
root::7.7.7.7:22:Linux:SSH-2.0-OpenSSH_6.6:Intel® Xeon® CPU E5-2670 v2 @ 2.50GHz:3764 2558 1206 0 166 336:vuln
user:live:8.8.8.8:22:Linux:SSH-2.0-OpenSSH_6.0p1 Debian-4:Intel® Core™ i5 CPU 760 @ 2.80GHz:6040 1307 4732 0 135 633:vuln
root::9.9.9.9:22:Linux:SSH-2.0-OpenSSH_7.1:Intel® Atom™ CPU C2758 @ 2.41GHz:16038 15859 179 0 0 14317:vuln
root::10.10.10.10:22:Linux:SSH-2.0-OpenSSH_6.7p1 Debian-5+deb8u2:ARMv7 Processor rev 2 (v7l):492 281 210 12 47 109:vuln
root::11.11.11.11:22:Linux:SSH-2.0-OpenSSH_7.1:Intel® Atom™ CPU C2758 @ 2.41GHz:16038 15859 178 0 0 14317:vuln
nobash.txt will be like this:
root:r0ot:1.2.3.4:22:UNKNOWN_SYSTEM:SSH-2.0-dropbear_0.51
root:r0ot:4.4.4.4:22:UNKNOWN_SYSTEM:SSH-2.0-dropbear_0.51
root:r0ot:5.5.5.5:22:UNKNOWN_SYSTEM:SSH-2.0-dropbear_0.51
root:r0ot:6.6.6.6:22:UNKNOWN_SYSTEM:SSH-2.0-dropbear_0.51
and other.txt:
`others.txt` -> nobash,busybox,honeypot,other linux
root:r0ot:1.2.3.4:22:UNKNOWN_SYSTEM:SSH-2.0-dropbear_0.51
root:r0ot:4.4.4.4:22:UNKNOWN_SYSTEM:SSH-2.0-dropbear_0.51
root:r0ot:5.5.5.5:22:UNKNOWN_SYSTEM:SSH-2.0-dropbear_0.51
root:r0ot:6.6.6.6:22:UNKNOWN_SYSTEM:SSH-2.0-dropbear_0.5
RE: SSH Brute Force Scanner (BSSH) - sh4moon - Oct 12, 2018
(Oct 12, 2018 11:26 AM)bssh Wrote: No, you don't understand me. Once you start bruteforce an list. And you start having results. Will create 3 files.
1. vuln.txt
2. nobash.txt
3. others.txt
in vuln.txt will be only vuln which will be like this:
V
root::7.7.7.7:22:Linux:SSH-2.0-OpenSSH_6.6:Intel® Xeon® CPU E5-2670 v2 @ 2.50GHz:3764 2558 1206 0 166 336:vuln
user:live:8.8.8.8:22:Linux:SSH-2.0-OpenSSH_6.0p1 Debian-4:Intel® Core™ i5 CPU 760 @ 2.80GHz:6040 1307 4732 0 135 633:vuln
root::9.9.9.9:22:Linux:SSH-2.0-OpenSSH_7.1:Intel® Atom™ CPU C2758 @ 2.41GHz:16038 15859 179 0 0 14317:vuln
root::10.10.10.10:22:Linux:SSH-2.0-OpenSSH_6.7p1 Debian-5+deb8u2:ARMv7 Processor rev 2 (v7l):492 281 210 12 47 109:vuln
root::11.11.11.11:22:Linux:SSH-2.0-OpenSSH_7.1:Intel® Atom™ CPU C2758 @ 2.41GHz:16038 15859 178 0 0 14317:vuln
nobash.txt will be like this:
root:r0ot:1.2.3.4:22:UNKNOWN_SYSTEM:SSH-2.0-dropbear_0.51
root:r0ot:4.4.4.4:22:UNKNOWN_SYSTEM:SSH-2.0-dropbear_0.51
root:r0ot:5.5.5.5:22:UNKNOWN_SYSTEM:SSH-2.0-dropbear_0.51
root:r0ot:6.6.6.6:22:UNKNOWN_SYSTEM:SSH-2.0-dropbear_0.51
and other.txt:
`others.txt` -> nobash,busybox,honeypot,other linux
root:r0ot:1.2.3.4:22:UNKNOWN_SYSTEM:SSH-2.0-dropbear_0.51
root:r0ot:4.4.4.4:22:UNKNOWN_SYSTEM:SSH-2.0-dropbear_0.51
root:r0ot:5.5.5.5:22:UNKNOWN_SYSTEM:SSH-2.0-dropbear_0.51
root:r0ot:6.6.6.6:22:UNKNOWN_SYSTEM:SSH-2.0-dropbear_0.5
ok so you can't actually figure out the processor and ram until you've successfully brute forced the ssh password. is that right?
RE: SSH Brute Force Scanner (BSSH) - bssh - Oct 12, 2018
(Oct 12, 2018 11:35 AM)sh4moon Wrote: ok so you can't actually figure out the processor and ram until you've successfully brute forced the ssh password. is that right?
Yes.
RE: SSH Brute Force Scanner (BSSH) - savaged. - Oct 12, 2018
or you could use zmap & lrab for free?
RE: SSH Brute Force Scanner (BSSH) - bssh - Oct 12, 2018
(Oct 12, 2018 11:39 AM)savaged. Wrote: or you could use zmap & lrab for free?
I don't understand your question, if its an question)
RE: SSH Brute Force Scanner (BSSH) - savaged. - Oct 12, 2018
its a fact. zmap is faster and free. lrab does the same job.
RE: SSH Brute Force Scanner (BSSH) - sh4moon - Oct 12, 2018
(Oct 12, 2018 11:36 AM)bssh Wrote: Yes.
gotcha. can you adjust the port scanning speed or brute forcing speed? to evade intrusion detection systems.
RE: SSH Brute Force Scanner (BSSH) - bssh - Oct 12, 2018
(Oct 12, 2018 11:42 AM)sh4moon Wrote: gotcha. can you adjust the port scanning speed or brute forcing speed? to evade intrusion detection systems.
For port scannning we use MASSCAN.
Yes, you can change bruteforce speed.
And in that version, you can brute another port than 22 eg 2222, 22, 222.
RE: SSH Brute Force Scanner (BSSH) - savaged. - Oct 12, 2018
(Oct 12, 2018 11:44 AM)bssh Wrote: For port scannning we use MASSCAN.
Yes, you can change bruteforce speed.
And in that version, you can brute another port than 22 eg 2222, 22, 222.
https://github.com/robertdavidgraham/masscan
why would anyone pay for this?
RE: SSH Brute Force Scanner (BSSH) - sh4moon - Oct 12, 2018
I'll stick to nmap and hydra. I might cook up a script to do this. good luck with your business.