¶ Brutespray
██████╗ ██████╗ ██╗ ██╗████████╗███████╗███████╗██████╗ ██████╗ █████╗ ██╗ ██╗
██╔══██╗██╔══██╗██║ ██║╚══██╔══╝██╔════╝██╔════╝██╔══██╗██╔══██╗██╔══██╗╚██╗ ██╔╝
██████╔╝██████╔╝██║ ██║ ██║ █████╗ ███████╗██████╔╝██████╔╝███████║ ╚████╔╝
██╔══██╗██╔══██╗██║ ██║ ██║ ██╔══╝ ╚════██║██╔═══╝ ██╔══██╗██╔══██║ ╚██╔╝
██████╔╝██║ ██║╚██████╔╝ ██║ ███████╗███████║██║ ██║ ██║██║ ██║ ██║
╚═════╝ ╚═╝ ╚═╝ ╚═════╝ ╚═╝ ╚══════╝╚══════╝╚═╝ ╚═╝ ╚═╝╚═╝ ╚═╝ ╚═╝
demo
LICENSE
BruteSpray takes nmap GNMAP/XML output or newline separated JSONS and automatically brute-forces services with default credentials using Medusa. BruteSpray can even find non-standard ports by using the -sV inside Nmap.
¶ Features
supported services:
¶ Used facts:
A valid password by bruteforce
A valid username
Credentials detected by brutforce
FTP service detected on the open port
IMAP service detected on the open port
IMAPS service detected on the open port and available for brute-forcing
ISS-RealSecure service detected on the open port
MS-SQL service detected on the open port and available for brute-forcing
MS-SQL-S service detected on the open port
MySQL service detected on the open port
NNTP service detected on the open port
pcAnywhere service detected on the open port
POP3 service detected on the open port
POP3S service detected on the open port and available for brute-forcing
Postgresql service detected on the open port and available for brute-forcing
REXEC service detected on the open port and available for brute-forcing
RLOGIN service detected on the open port
RSH service detected on the open port
SMTP service detected on the open port
SMTPS service detected on the open port and available for brute-forcing
Snmp service detected on the open port
SNMPtrap service detected on the open port
SSH service detected on the open port
SVN service detected on the open port
TELNET service detected on the open port
VMAuthD service detected on the open port
VNC service detected on the open port
¶ Flag:
chmod +x entrypoint.sh
["sh", "entrypoint.sh"]
¶ Facts screenshots:
¶ Screenshots of results:
¶ Category:
Security/Bruteforce
¶ Audit Tags:
Enumerate, Discovery, Bruteforce, Old, Aggressive, Time consuming, Port scan, FTP, SMB, SMTP, SSH
¶ DISCLAIMER:
This program is used for educational and ethical purposes only. I take no responsibility for any damages caused from using this program. By downloading and using this software, you agree that you take full responsibility for any damages and liability.