2222
2323modes
2424
25- -h <host:[ports]> - single host to crack. multiple ports can be seperated
26- by comma, e.g.: 22,2022,22222 (default port: 22)
27-
28- -l <file> - list of hosts to crack. format: <host>[:ports]. multiple
29- ports can be seperated by comma (default port: 22)
25+ -h <hosts[:ports]> - single host or host list to crack. multiple ports
26+ can be separated by comma, e.g.: 127.0.0.1:22,222,2022
27+ (default port: 22)
3028
3129 -m <opts> [-r <num>] - pass arbitrary masscan opts, portscan given hosts and
3230 crack for logins. found sshd services will be saved to
@@ -46,28 +44,29 @@ modes
4644
4745 -b <file> - list of hosts to grab sshd banner from
4846 format: <host>[:ports]. multiple ports can be
49- seperated by comma (default port: 22)
47+ separated by comma (default port: 22)
5048
5149options
5250
5351 -r <num> - generate <num> random ipv4 addresses, check for open
5452 sshd port and crack for login (only with -m option!)
55- -c <cmd > - execute this <cmd> on host if login was cracked
56- -u <user > - single username (default: root)
57- -U <file> - list of usernames
58- -p - single password (default: root)
59- -P <file> - list of passwords
60- -C <file> - list of user:pass combination
61- -x <num> - num threads for parallel host crack (default: 20 )
53+ -u <user|file > - single username or user list (default: root)
54+ -p <pass|file > - single password or password list (default: root)
55+ -c <file> - list of user:pass combination
56+ -C <cmd|file> - read commands from file (line by line) or execute a
57+ single command on host if login was cracked
58+ -N - do not output ssh command results
59+ -x <num> - num threads for parallel host crack (default: 50 )
6260 -S <num> - num threads for parallel service crack (default: 20)
63- -X <num> - num threads for parallel login crack (default: 20 )
61+ -X <num> - num threads for parallel login crack (default: 5 )
6462 -B <num> - num threads for parallel banner grabbing (default: 70)
65- -T <sec> - num sec for connect timeout (default: 5s)
63+ -T <sec> - num sec for auth and connect timeout (default: 5s)
6664 -R <sec> - num sec for (banner) read timeout (default: 3s)
6765 -o <file> - write found logins to file. format:
6866 <host>:<port>:<user>:<pass> (default: owned.txt)
69- -e - exit after first login was found. continue with other
70- hosts instead (default: off)
67+ -e - exclude host after first login was found. continue
68+ with other hosts instead
69+ -E - exit sshprank completely after first login was found
7170 -v - verbose mode. show found logins, sshds, etc.
7271 (default: off)
7372
7978examples
8079
8180 # crack targets from a given list with user admin, pw-list and 20 host-threads
82- $ sshprank -l sshds.txt -u admin -P /tmp/passlist.txt -x 20
81+ $ sshprank -h sshds.txt -u admin -P /tmp/passlist.txt -x 20
8382
8483 # first scan then crack from founds ssh services using 'root:admin'
8584 $ sudo sshprank -m '-p22,2022 --rate 5000 --source-ip 192.168.13.37 \
0 commit comments