search

noptrix / sshprank

A fast SSH mass-scanner, login cracker and banner grabber tool using the python-masscan and shodan module.
http://www.nullsecurity.net/
161 stars 44 forks source link

[Feature Request] Proxy/Tor Support #4

Open BroHowAreYou opened 4 years ago

BroHowAreYou commented 4 years ago

Hi again! Let me just say up front that you've done great work with this so far, and I look forward to seeing where this goes.

I'm wondering how feasible it would be to add a flag to route SSH requests through a socks5 (Tor) or other proxy. This would be greatly beneficial when trying to stay anonymous while pentesting.

BroHowAreYou commented 4 years ago

It's worth noting that ProxyChains seems to work with this. So if it isn't something that you want to add then you could just point users to that.

noptrix commented 4 years ago

@BroHowAreYou thank you. i will consider to implement this.

TormentedSoul666 commented 3 years ago

I recommend running multitor with privoxy as broker and haproxy as frontend: multitor --init 10 -u debian-tor --socks-port 9000 --control-port 9900 --proxy privoxy --haproxy Then just install proxychains-ng: apt install proxychains4, open /etc/proxychains4.conf, delete the line which is pointing to the local single tor instance (socks4 127.0.0.1 9050) and add http 127.0.0.1 16739 to let your HAproxy handle and load balance all requests running over proxychains4. Then run proxychains4 python3 sshprank.py ....

Works like a charm!

I think knowing about this or being willing to look this up should be an obstacle, which one may demand from a potential user. Once sshprank is is finished completely, it will be extremely powerful.