[bssh]

Hello,

I am selling SSH Bruteforce (BSSH)

BSSHv2.5.5b is a great tool for scanning ssh2 connections by providing a list of IPs and passwords. It is fast, reliable and easy to use. It is written in C++, therefore it is compatible on a large scale of unix systems, both 32 and 64 bits.

Compatible on 32 and 64 bit sistem on a various systems
Fast and reliable
Easy to use
Hide process
Making differance between linux sistems and NON-BASH systems
Detects honeypots
If an Linux system is encounters, retrives RAM and CPU data
Checks for updates before start
Multi port scanning
And more details via PM or Jabber

Price: $150
Contact: [email protected] or PM

[Parmenio]

Looks good, have any proofs or vouches of the softwares' capabilities?

[sh4moon]

I have a few questions. how does this thing detect a honeypot? and why are you selling something for $150 that I can make in about an hour and do the same thing?

[bssh]

Looks good, have any proofs or vouches of the softwares' capabilities?

Please, contact via PM or Jabber.

---

I have a few questions. how does this thing detect a honeypot? and why are you selling something for $150 that I can make in about an hour and do the same thing?

Hello,

Thanks for posting.
Please, if you can make this in one hour i'll give you 1k for it.

>>how does this thing detect a honeypot? - honeypots have an same ram and processors. We have an list which its updated for exclude them.

[sh4moon]

Please, contact via PM or Jabber.

---

Hello,

Thanks for posting.
Please, if you can make this in one hour i'll give you 1k for it.

>>how does this thing detect a honeypot? - honeypots have an same ram and processors. We have an list which its updated for exclude them.

you can detect ram and what processor a server has without getting access first?

[bssh]

you can detect ram and what processor a server has without getting access first?

No, you don't understand me. Once you start bruteforce an list. And you start having results. Will create 3 files.

1. vuln.txt
2. nobash.txt
3. others.txt

in vuln.txt will be only vuln which will be like this:
V
root::7.7.7.7:22:Linux:SSH-2.0-OpenSSH_6.6:Intel® Xeon® CPU E5-2670 v2 @ 2.50GHz:3764 2558 1206 0 166 336:vuln
user:live:8.8.8.8:22:Linux:SSH-2.0-OpenSSH_6.0p1 Debian-4:Intel® Core™ i5 CPU 760 @ 2.80GHz:6040 1307 4732 0 135 633:vuln
root::9.9.9.9:22:Linux:SSH-2.0-OpenSSH_7.1:Intel® Atom™ CPU C2758 @ 2.41GHz:16038 15859 179 0 0 14317:vuln

root::10.10.10.10:22:Linux:SSH-2.0-OpenSSH_6.7p1 Debian-5+deb8u2:ARMv7 Processor rev 2 (v7l):492 281 210 12 47 109:vuln
root::11.11.11.11:22:Linux:SSH-2.0-OpenSSH_7.1:Intel® Atom™ CPU C2758 @ 2.41GHz:16038 15859 178 0 0 14317:vuln

nobash.txt will be like this:
root:r0ot:1.2.3.4:22:UNKNOWN_SYSTEM:SSH-2.0-dropbear_0.51
root:r0ot:4.4.4.4:22:UNKNOWN_SYSTEM:SSH-2.0-dropbear_0.51
root:r0ot:5.5.5.5:22:UNKNOWN_SYSTEM:SSH-2.0-dropbear_0.51
root:r0ot:6.6.6.6:22:UNKNOWN_SYSTEM:SSH-2.0-dropbear_0.51


and other.txt:

`others.txt` -> nobash,busybox,honeypot,other linux
root:r0ot:1.2.3.4:22:UNKNOWN_SYSTEM:SSH-2.0-dropbear_0.51
root:r0ot:4.4.4.4:22:UNKNOWN_SYSTEM:SSH-2.0-dropbear_0.51
root:r0ot:5.5.5.5:22:UNKNOWN_SYSTEM:SSH-2.0-dropbear_0.51
root:r0ot:6.6.6.6:22:UNKNOWN_SYSTEM:SSH-2.0-dropbear_0.5

[sh4moon]

No, you don't understand me. Once you start bruteforce an list. And you start having results. Will create 3 files.

1. vuln.txt
2. nobash.txt
3. others.txt

in vuln.txt will be only vuln which will be like this:
V
root::7.7.7.7:22:Linux:SSH-2.0-OpenSSH_6.6:Intel® Xeon® CPU E5-2670 v2 @ 2.50GHz:3764 2558 1206 0 166 336:vuln
user:live:8.8.8.8:22:Linux:SSH-2.0-OpenSSH_6.0p1 Debian-4:Intel® Core™ i5 CPU 760 @ 2.80GHz:6040 1307 4732 0 135 633:vuln
root::9.9.9.9:22:Linux:SSH-2.0-OpenSSH_7.1:Intel® Atom™ CPU C2758 @ 2.41GHz:16038 15859 179 0 0 14317:vuln

root::10.10.10.10:22:Linux:SSH-2.0-OpenSSH_6.7p1 Debian-5+deb8u2:ARMv7 Processor rev 2 (v7l):492 281 210 12 47 109:vuln
root::11.11.11.11:22:Linux:SSH-2.0-OpenSSH_7.1:Intel® Atom™ CPU C2758 @ 2.41GHz:16038 15859 178 0 0 14317:vuln

nobash.txt will be like this:
root:r0ot:1.2.3.4:22:UNKNOWN_SYSTEM:SSH-2.0-dropbear_0.51
root:r0ot:4.4.4.4:22:UNKNOWN_SYSTEM:SSH-2.0-dropbear_0.51
root:r0ot:5.5.5.5:22:UNKNOWN_SYSTEM:SSH-2.0-dropbear_0.51
root:r0ot:6.6.6.6:22:UNKNOWN_SYSTEM:SSH-2.0-dropbear_0.51


and other.txt:

`others.txt` -> nobash,busybox,honeypot,other linux
root:r0ot:1.2.3.4:22:UNKNOWN_SYSTEM:SSH-2.0-dropbear_0.51
root:r0ot:4.4.4.4:22:UNKNOWN_SYSTEM:SSH-2.0-dropbear_0.51
root:r0ot:5.5.5.5:22:UNKNOWN_SYSTEM:SSH-2.0-dropbear_0.51
root:r0ot:6.6.6.6:22:UNKNOWN_SYSTEM:SSH-2.0-dropbear_0.5

ok so you can't actually figure out the processor and ram until you've successfully brute forced the ssh password. is that right?

[bssh]

ok so you can't actually figure out the processor and ram until you've successfully brute forced the ssh password. is that right?

Yes.

[savaged.]

or you could use zmap & lrab for free?

[bssh]

or you could use zmap & lrab for free?

I don't understand your question, if its an question)

[savaged.]

its a fact. zmap is faster and free. lrab does the same job.

[sh4moon]

Yes.

gotcha. can you adjust the port scanning speed or brute forcing speed? to evade intrusion detection systems.

[bssh]

gotcha. can you adjust the port scanning speed or brute forcing speed? to evade intrusion detection systems.

For port scannning we use MASSCAN.

Yes, you can change bruteforce speed.

And in that version, you can brute another port than 22 eg 2222, 22, 222.

[savaged.]

For port scannning we use MASSCAN.

Yes, you can change bruteforce speed.

And in that version, you can brute another port than 22 eg 2222, 22, 222.

https://github.com/robertdavidgraham/masscan
why would anyone pay for this?

[sh4moon]

I'll stick to nmap and hydra. I might cook up a script to do this. good luck with your business.