x90skysn3k / brutespray

Bruteforcing from various scanner output - Automatically attempts default creds on found services.
MIT License
2.01k stars 381 forks source link

Combo option #32

Closed c-f closed 3 years ago

c-f commented 5 years ago

Added the medusa Combo option for more defined scanning.

Beside user/password lists, medusa also supports the Combo option (-C). This pull requests implements also the possiblity to provide the option

Man page from medusa

 -C [FILE]
              File containing combo entries. Combo files are colon separated and in the following format: host:user:password. If any of the three fields are left empty, the respective information should be provided either as a single global value or as a list in a file.

              The following combinations are possible in the combo file: 1.) foo:bar:fud 2.) foo:bar: 3.) foo:: 4.) :bar:fud 5.) :bar: 6.) ::fud 7.) foo::fud

              Medusa also supports using PwDump files as a combo file. The format of these files should be user:id:lm:ntlm:::. We look for ':::' at the end of the first line to determine if the file contains PwDump output.
c-f commented 3 years ago

Sorry for the delay - i rebased the current master and could be merged.

This PR supports the Combo option from medusa, which allows to enter specific user/password combination and even user/password/host combination.

Motivation:

x90skysn3k commented 3 years ago

could you do a pull request on the "testing-1.6.9" branch and i'll make sure to push this through to the 1.6.9 release

c-f commented 3 years ago

Thanks for the rapid response. I changed the branch

Best regards