search

mrhenrike / MikrotikAPI-BF

Brute force attack tool on Mikrotik box credentials exploiting API requests
Other
37 stars 11 forks source link

hello! #8

Open Eduard123321 opened 1 month ago

Eduard123321 commented 1 month ago

python3 ~/MikrotikAPI-BF/mikrotikapi-bf.py -t 127.0.0.1 -p 505 -u admin -d /home/kali/SecLists/Passwords/500-worst-passwords.txt -s 5 /home/kali/MikrotikAPI-BF/mikrotikapi-bf.py:42: SyntaxWarning: invalid escape sequence '\/' banner=('''

    __  __ _ _              _   _ _        _    ____ ___      ____  _____
    |  \/  (_) | ___ __ ___ | |_(_) | __   / \  |  _ \_ _|    | __ )|  ___|
    | |\/| | | |/ / '__/ _ \| __| | |/ /  / _ \ | |_) | |_____|  _ \| |_
    | |  | | |   <| | | (_) | |_| |   <  / ___ \|  __/| |_____| |_) |  _|
    |_|  |_|_|_|\_\_|  \___/ \__|_|_|\_\/_/   \_\_|  |___|    |____/|_|

                Mikrotik RouterOS API Bruteforce Tool 1.1
                        André Henrique (@mrhenrike)
      Please report tips, suggests and problems to Twitter (@mrhenrike)
                https://github.com/mrhenrike/MikrotikAPI-BF

[*] Starting bruteforce attack...

[-] SOCKET ERROR! Check Target (IP or PORT parameters). Exiting... Traceback (most recent call last): File "/home/kali/MikrotikAPI-BF/mikrotikapi-bf.py", line 138, in open_socket self.connection = self.sock.connect(sa) ^^^^^^^^^^^^^^^^^^^^^ ConnectionRefusedError: [Errno 111] Connection refused

During handling of the above exception, another exception occurred:

Traceback (most recent call last): File "/home/kali/MikrotikAPI-BF/mikrotikapi-bf.py", line 497, in main() File "/home/kali/MikrotikAPI-BF/mikrotikapi-bf.py", line 452, in main apiros = ApiRos(s, target, "admin", "", port) ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "/home/kali/MikrotikAPI-BF/mikrotikapi-bf.py", line 122, in init self.create_connection() File "/home/kali/MikrotikAPI-BF/mikrotikapi-bf.py", line 342, in create_connection self.open_socket() File "/home/kali/MikrotikAPI-BF/mikrotikapi-bf.py", line 147, in open_socket raise CreateSocketError('Error: API failed to connect to socket. Host: {}, port: {}.'.format(self.target, self.port)) CreateSocketError: Error: API failed to connect to socket. Host: 127.0.0.1, port: 8728.

mxmandr commented 2 weeks ago

You can bruteforce only the API port, which is 8728 by default. The web or winbox port cannot be bruteforced. The -p key does not work.