infosecmatter/ssh-putty-login-bruteforcer

Turn PuTTY into an SSH login bruteforcing tool.

SSH PuTTY login bruteforcer

The ssh-putty-brute.ps1 is a wrapper script which uses PuTTY clients (either putty.exe or plink.exe) to perform SSH login bruteforce attacks.

See the main article for detailed description: https://www.infosecmatter.com/ssh-brute-force-attack-tool-using-putty-plink-ssh-putty-brute-ps1/

Usage and examples

The tool requires either putty.exe or plink.exe executables in the PATH or in the current working directory.

Here's how to use this tool:

import-module .\ssh-putty-brute.ps1

# Usage:
ssh-putty-brute [-h ip|ips.txt] [-p port] [-u user|users.txt] [-pw pass|pwdlist.txt]

# Examples:
ssh-putty-brute -h 10.10.5.11 -p 22 -u root -pw P@ssw0rd
ssh-putty-brute -h 10.10.5.11 -p 22 -u root -pw (Get-Content .\pwdlist.txt)

Screenshots

SSH login attack against a single target:

SSH password spraying accross the network:

Hunting for default SSH credentials:

For more information, visit: https://www.infosecmatter.com/ssh-brute-force-attack-tool-using-putty-plink-ssh-putty-brute-ps1/

ssh-putty-login-bruteforcer's Issues

Nothing happens

When I launch the ssh-putty-brute.ps1 nothing really happens any idea what the problem could be?

Jshs

Gffh
Hhsttjjr

Every host returns as NotSure.

every host returns as NotSure.

tested win10 21H2.
powershell 7.2.9 Core.

I delete the brute.log each time and try again, no change.

Openvpn-as

H

CMD access

can u recreate this tool in .cmd format for better access as powershell recognises this as a virus and will block it from running this is common in most of windows computers