NAME¶

brutespray - Python bruteforce tool

SYNOPSIS¶

brutespray [Usage]: brutespray [-h] -f FILE [-o OUTPUT] [-s SERVICE] [-t THREADS] [-T HOSTS] [-U USERLIST] [-P PASSLIST] [-u USERNAME] [-p PASSWORD] [-c] [-i] [-C HOST:USERNAME:PASSWORD] [-v LEVEL] [-w LEVEL].

DESCRIPTION¶

BruteSpray takes nmap GNMAP/JSON/XML output and automatically brute-forces services with default credentials using Medusa.

BruteSpray can even find non-standard ports by using the -sV inside Nmap.

• -f FILE, --file FILE
  GNMAP, JSON or XML file to parse
• -o OUTPUT, --output OUTPUT
  Directory containing successful attempts
• -s SERVICE, --service SERVICE
  Specify service to attack
• -t THREADS, --threads THREADS
  Number of medusa threads
• -T HOSTS, --hosts HOSTS
  Number of hosts to test concurrently
• -U USERLIST, --userlist USERLIST
  Reference a custom username file
• -P PASSLIST, --passlist PASSLIST
  Reference a custom password file
• -u USERNAME, --username USERNAME
  Specify a single username
• -p PASSWORD, --password PASSWORD
  Specify a single password
• -c, --continuous
  Keep brute-forcing after success
• -C HOST:USERNAME:PASSWORD, --combo HOST:USERNAME:PASSWORD
  Specify a combo input (host:username:password)
• -i, --interactive
  Interactive mode
• -v LEVEL, --verbose LEVEL
  Verbose output from medusa. Can be set from 0 to 6 (default to 5)
• -w LEVEL, --debug LEVEL
  Debug error output from medusa. Can be set from 0 to 10 (default to 5)

Commands:

• brutespray -h
• brutespray --file nmap.gnmap
• brutespray --file nmap.xml
• brutespray --file nmap.xml -i

EXAMPLES¶

Nmap network scanning example:

nmap -sS -sV 192.168.0.0/24 -vv -n -oA mynetwork

Using Custom Wordlists:

brutespray --file mynetwork.gnmap -U /usr/share/brutespray/wordlist/user.txt -P /usr/share/brutespray/wordlist/pass.txt --threads 5 --hosts 5

Brute-Forcing Specific Services:

brutespray --file mynetwork.gnmap --service ftp,ssh,telnet --threads 5 --hosts 5

Specific Credentials:

brutespray --file mynetwork.gnmap -u admin -p password --threads 5 --hosts 5

Continue After Success:

brutespray --file mynetwork.gnmap --threads 5 --hosts 5 -c

Use Nmap XML Output:

brutespray --file mynetwork.xml --threads 5 --hosts 5

Interactive Mode:

brutespray --file mynetwork.xml -i

SEE ALSO¶

• On github https://github.com/x90skysn3k/brutespray
• nmap(1)

MANPAGE AUTHOR¶

Stephane Neveu stefneveu@gmail.com