Construe is a tool which carries out brute-force and dictionary attacks on a SSH server. It makes use of a optimal data generator using itertools to carry out the brute force attacks and uses multithreading to establish connections with the SSH server using the paramiko API
Please note that all the tests have been carried out on our OWN SSH servers and we would ask you to do the same, this project is for educational purposes only.
Brute-Force attack on known IP address and known username:
Dictionary attack on known IP address with a password-text file:
Dictionary attack on multiple known IP addresses(target text file) with a password-text file:
Use the package manager pip to install the dependencies.
pip3 install -r requirements.txt
-
The connection.py handles multithreaded connections to the SSH server via the paramiko API.
-
The utils.py file contains some helper functions
-
The Construe.py files contains the code for the attacks and also the argument parsing options. This is the main file.
To view all possible options
python3 Construe.py
For the brute-force attack run this in the terminal
python3 Construe.py -u username -i IPAddr -S character_search_space -l length
For the dictionary attack run this in the terminal
python3 Construe.py -u username d-true -I IPs.txt -P passwords.txt
Try experimenting with other combinations of attack arguments!
Pull requests are welcome. For major changes, please open an issue first to discuss what you would like to change.