Modular brute force tool written in Python, for very fast password spraying SSH, and FTP and in the near future other network services. COMING SOON: SMB, HTTP(s) POST, HTTP(s) GET, HTTP BASIC AUTH Thanks to @0dayctf, Rondons, Enigma, and 001 for testing (https://www.kitploit.com/search/label/Testing) and contributing
Installation:
cd /opt
git clone https://github.com/Cerbrutus-BruteForcer/cerbrutus
Usage:
python3 /opt/cerbrutus/cerbrutus.py --help
usage: cerbrutus.py [-h] -U USERS -P PASSWORDS [-p PORT] [-t THREADS] [-q [QUIET [QUIET ...]]] Host Service
Python based network brute forcing tool!
positional arguments:
Host The host to connect to - in IP or VHOST/Domain Name form
Service The service to brute force (currently implemented 'SSH')
optional arguments:
-h, --help show this help message and exit
-U USERS, --users USERS
Either a single user, or the path to the file of users you wish to use
-P PASSWORDS, --passwords PASSWORDS
Either a single password, or the path to the password list you wish to use
-p PORT, --port PORT The port you wish to target (only required if running on a non standard port)
-t THREADS, --threads THREADS
Number of threads to use
-q [QUIET [QUIET ...]], --quiet [QUIET [QUIET ...]]
Do not print banner /opt/cerbrutus/cerbrutus.py 10.10.10.10 SSH -U "username" -P /opt/wordlists/fasttrack.txt -t 10
================================================================
__ ___ ____ ____ ____ __ __ ______ __ __ _____
/ ] / _]| \ | \ | \| | || || | |/ ___/
/ / / [_ | D )| o )| D ) | || || | ( \_
/ / | _]| / | || /| | ||_| |_|| | |\__ |
/ \_ | [_ | \ | O || \| : | | | | : |/ \ |
\ || || . \| || . \ | | | | |\ |
\____||_____||__|\_||_____||__|\_|\__,_| |__| \__,_| \___|
Network Brute (https://www.kitploit.com/search/label/Brute) Force Tool
https://github.com/Cerbrutus-BruteForcer/cerbrutus
================================================================
< br/>[*] - Initialising password list...
Read in 224 words from /opt/wordlists/fasttrack.txt
[+] - Running with 10 threads...
[*] - Starting attack against username@10.10.10.10
[*] - Trying: 65/224
Test Run:
1400 seconds ~ 7 minutes (hydra took 30 minutes) 1000 threads -> 464 seconds -> 27 requests per second 100 threads took 1000 seconds -> 12 requests per second # the password is in line 460 100 threads took 32 seconds -> 14 requests per second 1000 threads took 16 seconds -> 28 requests per second 64 threads took 51 seconds -> 9 requests per second (hydra took the same time) # word number 20k in rockyou 1100 threads took 637 seconds which means 31 rps 110 threads took 1457 seconds so that's 13.7 rps "># The password is in line number 12600 in rockyou 64 threads -> 1400 seconds ~ 7 minutes (hydra took 30 minutes) 1000 threads -> 464 seconds -> 27 requests per second 100 threads took 1000 seconds -> 12 requests per second # the password is in line 460 100 threads took 32 seconds -> 14 requests per second 1000 threads took 16 seconds -> 28 requests per second 64 threads took 51 seconds -> 9 requests per second (hydra took the same time) # word number 20k in rockyou 1100 threads took 637 seconds which means 31 rps 110 threads took 1457 seconds so that's 13.7 rps Uses a custom implementation of paramiko to overcome a few minor issues with implementing it for ssh brute forcing. - https://github.com/paramiko/paramiko/
Download Cerbrutus (https://github.com/Cerbrutus-BruteForcer/cerbrutus)
___________________________
@hacking_Attack
@Hacking_Video
Installation:
cd /opt
git clone https://github.com/Cerbrutus-BruteForcer/cerbrutus
Usage:
python3 /opt/cerbrutus/cerbrutus.py --help
usage: cerbrutus.py [-h] -U USERS -P PASSWORDS [-p PORT] [-t THREADS] [-q [QUIET [QUIET ...]]] Host Service
Python based network brute forcing tool!
positional arguments:
Host The host to connect to - in IP or VHOST/Domain Name form
Service The service to brute force (currently implemented 'SSH')
optional arguments:
-h, --help show this help message and exit
-U USERS, --users USERS
Either a single user, or the path to the file of users you wish to use
-P PASSWORDS, --passwords PASSWORDS
Either a single password, or the path to the password list you wish to use
-p PORT, --port PORT The port you wish to target (only required if running on a non standard port)
-t THREADS, --threads THREADS
Number of threads to use
-q [QUIET [QUIET ...]], --quiet [QUIET [QUIET ...]]
Do not print banner /opt/cerbrutus/cerbrutus.py 10.10.10.10 SSH -U "username" -P /opt/wordlists/fasttrack.txt -t 10
================================================================
__ ___ ____ ____ ____ __ __ ______ __ __ _____
/ ] / _]| \ | \ | \| | || || | |/ ___/
/ / / [_ | D )| o )| D ) | || || | ( \_
/ / | _]| / | || /| | ||_| |_|| | |\__ |
/ \_ | [_ | \ | O || \| : | | | | : |/ \ |
\ || || . \| || . \ | | | | |\ |
\____||_____||__|\_||_____||__|\_|\__,_| |__| \__,_| \___|
Network Brute (https://www.kitploit.com/search/label/Brute) Force Tool
https://github.com/Cerbrutus-BruteForcer/cerbrutus
================================================================
< br/>[*] - Initialising password list...
Read in 224 words from /opt/wordlists/fasttrack.txt
[+] - Running with 10 threads...
[*] - Starting attack against username@10.10.10.10
[*] - Trying: 65/224
Test Run:
1400 seconds ~ 7 minutes (hydra took 30 minutes) 1000 threads -> 464 seconds -> 27 requests per second 100 threads took 1000 seconds -> 12 requests per second # the password is in line 460 100 threads took 32 seconds -> 14 requests per second 1000 threads took 16 seconds -> 28 requests per second 64 threads took 51 seconds -> 9 requests per second (hydra took the same time) # word number 20k in rockyou 1100 threads took 637 seconds which means 31 rps 110 threads took 1457 seconds so that's 13.7 rps "># The password is in line number 12600 in rockyou 64 threads -> 1400 seconds ~ 7 minutes (hydra took 30 minutes) 1000 threads -> 464 seconds -> 27 requests per second 100 threads took 1000 seconds -> 12 requests per second # the password is in line 460 100 threads took 32 seconds -> 14 requests per second 1000 threads took 16 seconds -> 28 requests per second 64 threads took 51 seconds -> 9 requests per second (hydra took the same time) # word number 20k in rockyou 1100 threads took 637 seconds which means 31 rps 110 threads took 1457 seconds so that's 13.7 rps Uses a custom implementation of paramiko to overcome a few minor issues with implementing it for ssh brute forcing. - https://github.com/paramiko/paramiko/
Download Cerbrutus (https://github.com/Cerbrutus-BruteForcer/cerbrutus)
___________________________
@hacking_Attack
@Hacking_Video
KitPloit - PenTest & Hacking Tools
Leading source of security tools, hacking tools, cybersecurity and network security. Learn about new tools and updates in one place.
hacking: security in practice
Finding identity of Craiglist poster by hacking them? How easy is it to hack Craigslist? Is it possible?
I used to be on Craigslist Missed Connections years ago and would use it like a chatroom. I would chat back and forth with people and would write cryptic messages about my friends and was for sure they were writing back to me doing the same thing. But there were a couple of times it got very personal where people were posting personal details about my life at the moment. I was 100 percent certain the other side knew who I was but I didn't know who they were. How easy is it to hack Craigslist posts? Is it possible? Also I live in the city where Craigslist originated.and have met employees who work there.
submitted by /u/Interesting-Play7182
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
Finding identity of Craiglist poster by hacking them? How easy is it to hack Craigslist? Is it possible?
I used to be on Craigslist Missed Connections years ago and would use it like a chatroom. I would chat back and forth with people and would write cryptic messages about my friends and was for sure they were writing back to me doing the same thing. But there were a couple of times it got very personal where people were posting personal details about my life at the moment. I was 100 percent certain the other side knew who I was but I didn't know who they were. How easy is it to hack Craigslist posts? Is it possible? Also I live in the city where Craigslist originated.and have met employees who work there.
submitted by /u/Interesting-Play7182
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
reddit
Finding identity of Craiglist poster by hacking them? How easy is...
I used to be on Craigslist Missed Connections years ago and would use it like a chatroom. I would chat back and forth with people and would write...
hacking: security in practice
Best TryHackMe rooms to prepare for King Of The Hill?
I want to start doing king of the hill challenges with some friends. Having never done one before I'm not sure I'm ready. Curious what rooms would best prepare me for Easy to Intermediate king of the hill challenges. If you guys have any advice it would be greatly appreciated.
submitted by /u/DirtyJ90
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
Best TryHackMe rooms to prepare for King Of The Hill?
I want to start doing king of the hill challenges with some friends. Having never done one before I'm not sure I'm ready. Curious what rooms would best prepare me for Easy to Intermediate king of the hill challenges. If you guys have any advice it would be greatly appreciated.
submitted by /u/DirtyJ90
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
reddit
Best TryHackMe rooms to prepare for King Of The Hill?
I want to start doing king of the hill challenges with some friends. Having never done one before I'm not sure I'm ready. Curious what rooms would...
Hacking Articles Tips Tricks Videos Tutorials
Photo
KitPloit - PenTest Tools!
Cerbrutus - Network Brute Force Tool, Written In Python
https://1.bp.blogspot.com/-BiIqUrZ1Lto/YP8xcqqYNOI/AAAAAAAAoy4/mPxOOcVMIR0n0MzLCFdqQ3RoBsME2Sz8ACNcBGAsYHQ/w640-h268/cerbrutus.png Modular brute force tool written in Python, for very fast password spraying SSH, and FTP and in the near future other network services.
COMING SOON: SMB, HTTP(s) POST, HTTP(s) GET, HTTP BASIC AUTH Thanks to @0dayctf, Rondons, Enigma, and 001 for testing and contributing Installation:
___________________________
@hacking_Attack
@Hacking_Video
Cerbrutus - Network Brute Force Tool, Written In Python
https://1.bp.blogspot.com/-BiIqUrZ1Lto/YP8xcqqYNOI/AAAAAAAAoy4/mPxOOcVMIR0n0MzLCFdqQ3RoBsME2Sz8ACNcBGAsYHQ/w640-h268/cerbrutus.png Modular brute force tool written in Python, for very fast password spraying SSH, and FTP and in the near future other network services.
COMING SOON: SMB, HTTP(s) POST, HTTP(s) GET, HTTP BASIC AUTH Thanks to @0dayctf, Rondons, Enigma, and 001 for testing and contributing Installation:
cd /opt
git clone https://github.com/Cerbrutus-BruteForcer/cerbrutusUsage:python3 /opt/cerbrutus/cerbrutus.py --help
usage: cerbrutus.py [-h] -U USERS -P PASSWORDS [-p PORT] [-t THREADS] [-q [QUIET [QUIET ...]]] Host Service
Python based network brute forcing tool!
positional arguments:
Host The host to connect to - in IP or VHOST/Domain Name form
Service The service to brute force (currently implemented 'SSH')
optional arguments:
-h, --help show this help message and exit
-U USERS, --users USERS
Either a single user, or the path to the file of users you wish to use
-P PASSWORDS, --passwords PASSWORDS
Either a single password, or the path to the password list you wish to use
-p PORT, --port PORT The port you wish to target (only required if running on a non standard port)
-t THREADS, --threads THREADS
Number of threads to use
-q [QUIET [QUIET ...]], --quiet [QUIET [QUIET ...]]
Do not print bannerBrute Force Tool https://github.com/Cerbrutus-BruteForcer/cerbrutus ================================================================ [*] - Initialising password list... Read in 224 words from /opt/wordlists/fasttrack.txt [+] - Running with 10 threads... [*] - Starting attack against username@10.10.10.10 [*] - Trying: 65/224 ">/opt/cerbrutus/cerbrutus.py 10.10.10.10 SSH -U "username" -P /opt/wordlists/fasttrack.txt -t 10
================================================================
__ ___ ____ ____ ____ __ __ ______ __ __ _____
/ ] / _]| \ | \ | \| | || || | |/ ___/
/ / / [_ | D )| o )| D ) | || || | ( \_
/ / | _]| / | || /| | ||_| |_|| | |\__ |
/ \_ | [_ | \ | O || \| : | | | | : |/ \ |
\ || || . \| || . \ | | | | |\ |
\____||_____||__|\_||_____||__|\_|\__,_| |__| \__,_| \___|
Network Brute Force Tool
https://github.com/Cerbrutus-BruteForcer/cerbrutus
================================================================
< br/>[*] - Initialising password list...
Read in 224 words from /opt/wordlists/fasttrack.txt
[+] - Running with 10 threads...
[*] - Starting attack against username@10.10.10.10
[*] - Trying: 65/224 Test Run:# The password is in line number 12600 in rockyou 64 threads -> 1400 seconds ~ 7 minutes (hydra took 30 minutes) 1000 threads -> 464 seconds -> 27 requests per second 100 threads took 1000 seconds -> 12 requests per second # the password is in line 460 100 threads took 32 seconds -> 14 requests per second 1000 threads took 16 seconds -> 28 requests per second 64 threads took 51 seconds -> 9 requests per second (hydra took the same time) # word number 20k in rockyou 1100 threads took 637 seconds which means 31 rps 110 threads took 1457 seconds so that's 13.7 rps Uses a custom implementation of paramiko to overcome a few minor issues with implementing it for ssh brute forcing. - https://github.com/paramiko/paramiko/ Download Cerbrutus___________________________
@hacking_Attack
@Hacking_Video
KitPloit - PenTest & Hacking Tools
Cerbrutus - Network Brute Force Tool, Written In Python
hacking: security in practice
Finding out who stalks your page on FB--is it chronological?
When you use the Buddy-ID trick on the FB source code to see who visits your page, are the list of people in chronological order? or is there any way to know the time period? For example I got 487 hits, does that mean 487 people have viewed my profile in the entire time I've had the profile? Thanks a bunch!
submitted by /u/betelgeuse77
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
Finding out who stalks your page on FB--is it chronological?
When you use the Buddy-ID trick on the FB source code to see who visits your page, are the list of people in chronological order? or is there any way to know the time period? For example I got 487 hits, does that mean 487 people have viewed my profile in the entire time I've had the profile? Thanks a bunch!
submitted by /u/betelgeuse77
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
reddit
Finding out who stalks your page on FB--is it chronological?
A subreddit dedicated to hacking and hackers. Constructive collaboration and learning about exploits, industry standards, grey and white hat...
hacking: security in practice
Random group chat of phone numbers similar to mine with random text
I just received a group text message with a string of random numbers and letters and the group of numbers have their first 6 digits similar to mine. There wasn’t a link just a text message of random characters. Am I about to be hacked? What does it mean? I can’t find anything online aside from blogs about texts that can hack your phone without even opening them. Is there anything I can do to prevent it?
submitted by /u/Cosahh
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
Random group chat of phone numbers similar to mine with random text
I just received a group text message with a string of random numbers and letters and the group of numbers have their first 6 digits similar to mine. There wasn’t a link just a text message of random characters. Am I about to be hacked? What does it mean? I can’t find anything online aside from blogs about texts that can hack your phone without even opening them. Is there anything I can do to prevent it?
submitted by /u/Cosahh
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
reddit
Random group chat of phone numbers similar to mine with random text
I just received a group text message with a string of random numbers and letters and the group of numbers have their first 6 digits similar to...
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
hack Wi-Fi from mobile phone
https://cdn-images-1.medium.com/max/1280/1*o3QlO_Q97VL20Da36QdH2Q.jpeg
Looking for how to hack WiFi password OR WiFi hacking software?
Well, a security researcher has revealed a new WiFi hacking technique that…
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
hack Wi-Fi from mobile phone
https://cdn-images-1.medium.com/max/1280/1*o3QlO_Q97VL20Da36QdH2Q.jpeg
Looking for how to hack WiFi password OR WiFi hacking software?
Well, a security researcher has revealed a new WiFi hacking technique that…
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Medium
hack Wi-Fi from mobile phone
Looking for how to hack WiFi password OR WiFi hacking software? Well, a security researcher has revealed a new WiFi hacking technique that…
How a simple “Hey!” can turn into your worst Nightmare: Stored XSS
https://shrirangdiwakar.medium.com/how-a-simple-hey-can-turn-into-your-worst-nightmare-stored-xss-d5a02b136506?source=rss------bug_bounty-5
___________________________
@hacking_Attack
@Hacking_Video
https://shrirangdiwakar.medium.com/how-a-simple-hey-can-turn-into-your-worst-nightmare-stored-xss-d5a02b136506?source=rss------bug_bounty-5
___________________________
@hacking_Attack
@Hacking_Video
Medium
How a simple “Hey!” can turn into your worst Nightmare: Stored XSS
Ever thought about what can happen if you read any stranger’s “Hey!” message? Nothing will happen, right?! Let me prove you wrong!!😁
Ever thought about what can happen if you read any stranger’s “Hey!” message? Nothing will happen, right?! Let me prove you wrong!!😁Continue reading on Medium » (https://shrirangdiwakar.medium.com/how-a-simple-hey-can-turn-into-your-worst-nightmare-stored-xss-d5a02b136506?source=rss------bug_bounty-5)
___________________________
@hacking_Attack
@Hacking_Video
___________________________
@hacking_Attack
@Hacking_Video
Medium
How a simple “Hey!” can turn into your worst Nightmare: Stored XSS
Ever thought about what can happen if you read any stranger’s “Hey!” message? Nothing will happen, right?! Let me prove you wrong!!😁
hacking: security in practice
Oscp best HTB rooms?
Hey everyone I was wondering if anyone can share a list of must do rooms to help prepare and cover the contents of oscp? I know more rooms the better but just an list of must do will be much appreciated.
I am aware there is one online I came across I thought it was a bit out dated wondering if there is more updated one?
Thank you
submitted by /u/WeaknessGlass
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
Oscp best HTB rooms?
Hey everyone I was wondering if anyone can share a list of must do rooms to help prepare and cover the contents of oscp? I know more rooms the better but just an list of must do will be much appreciated.
I am aware there is one online I came across I thought it was a bit out dated wondering if there is more updated one?
Thank you
submitted by /u/WeaknessGlass
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
reddit
Oscp best HTB rooms?
Hey everyone I was wondering if anyone can share a list of must do rooms to help prepare and cover the contents of oscp? I know more rooms the...
hacking: security in practice
My apple iCloud ID got hacked
My crazy abusive toxic ex bf that I just broke up with hacked my iCloud ID and so I blocked him and he is still able to message me and it’s so damn annoying obviously I can’t change my password anymore because I don’t even fucking know it since he hacked me and changed it.
Is there any hope for me at all or am I completely fucked? How do I get him to stop texting me please I need y’all help
submitted by /u/sadpinkgirl
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
My apple iCloud ID got hacked
My crazy abusive toxic ex bf that I just broke up with hacked my iCloud ID and so I blocked him and he is still able to message me and it’s so damn annoying obviously I can’t change my password anymore because I don’t even fucking know it since he hacked me and changed it.
Is there any hope for me at all or am I completely fucked? How do I get him to stop texting me please I need y’all help
submitted by /u/sadpinkgirl
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
reddit
My apple iCloud ID got hacked
My crazy abusive toxic ex bf that I just broke up with hacked my iCloud ID and so I blocked him and he is still able to message me and it’s so...
XSS Attacks via SVG images
https://naveenroy008.medium.com/xss-attacks-via-svg-images-a2835c0cb7c9?source=rss------bug_bounty-5
___________________________
@hacking_Attack
@Hacking_Video
https://naveenroy008.medium.com/xss-attacks-via-svg-images-a2835c0cb7c9?source=rss------bug_bounty-5
___________________________
@hacking_Attack
@Hacking_Video
Medium
XSS Attacks via SVG images
Hola Guys!!!
Hola Guys!!!Continue reading on Medium » (https://naveenroy008.medium.com/xss-attacks-via-svg-images-a2835c0cb7c9?source=rss------bug_bounty-5)
___________________________
@hacking_Attack
@Hacking_Video
___________________________
@hacking_Attack
@Hacking_Video
Medium
XSS Attacks via SVG images
Hola Guys!!!
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Cool Things Google Search Can Do | You Should Know!
🔅 Go to Google Images, type “Atari Breakout ”, hit the Search button, wait for a second for the game to start.
Continue reading on Medium »
Cool Things Google Search Can Do | You Should Know!
🔅 Go to Google Images, type “Atari Breakout ”, hit the Search button, wait for a second for the game to start.
Continue reading on Medium »