Skip to main content

Osueta: A Simple Python Script To Exploit The OpenSSH User Enumeration Timing Attack


About Osueta?
   Osueta it's a simple Python 2 script to exploit the OpenSSH User Enumeration Timing Attack, present in OpenSSH versions <= 7.2 and >= 5.*. The script has the ability to make variations of the username employed in the bruteforce attack, and the possibility to establish a DoS condition in the OpenSSH server.

    Read more: OpenSSH User Enumeration Time-Based Attack

   The bug was corrected in OpenSSH version 7.3.

   Authors of Osueta:

Osueta's Installation
   For Linux users, open your Terminal and enter these commands:
   If you're Windows users, follow these steps:
  • Install Python 2.7.x from Python.org first. On Install Python 2.7.x Setup, choose Add python.exe to Path.
  • Download Osueta-master zip file.
  • Then unzip it.
  • Open CMD or PowerShell window at the Osueta folder you have just unzipped and enter these commands:
    pip install python-nmap paramiko IPy
    python osueta.py -h

Advice: Like others offensive tools, the authors disclaims all responsibility in the use of this script.

Osueta help menu:

Osueta's examples:
   A single user enumeration attempt with username variations:
python2 osueta.py -H 192.168.1.6 -p 22 -U root -d 30 -v yes


   A single user enumeration attempt with no user variations a DoS attack:
python2 osueta.py -H 192.168.1.6 -p 22 -U root -d 30 -v no --dos yes


   Scanning a C class network with only one user:
python2 osueta.py -H 192.168.1.0/24 -p 22 -U root -v no 


   Scanning a C class network with usernames from a file, delay time 15 seconds and a password of 50000 characters:
python2 osueta.py -H 192.168.1.0/24 -p 22 -L usernames.txt -v yes -d 15 -l 50


Related links


Comments

Popular posts from this blog

鄭子璉 | 個人隨寫

https://tlcheng.wordpress.com/%e9%97%9c%e6%96%bc/ https://tlcheng.wordpress.com/%e8%87%aa%e7%94%b1%e7%95%99%e8%a8%80/ https://tlcheng.wordpress.com/ https://tlcheng.wordpress.com/page/2/ https://tlcheng.wordpress.com/2019/08/21/sql-server-%e8%b3%87%e6%96%99%e5%ba%ab%e6%90%8d%e6%af%80%e8%88%87%e4%bf%ae%e5%be%a9/ https://tlcheng.wordpress.com/author/tlcheng/ https://tlcheng.files.wordpress.com/2019/08/19133007_info_dbcc_825_01.png https://tlcheng.files.wordpress.com/2019/08/19134221_fail_dbcc_8646.png https://tlcheng.files.wordpress.com/2019/08/19140935_fail_dbcc_824.png https://tlcheng.files.wordpress.com/2019/08/19153642_info_dbcc_8957_01.png https://tlcheng.files.wordpress.com/2019/08/19160231_fail_lock_1204.png https://tlcheng.files.wordpress.com/2019/08/19160326_info_dbcc_825_02.png https://tlcheng.files.wordpress.com/2019/08/20232545_info_dbcc_8957_02.png https://tlcheng.files.wordpress.com/2019/08/20234545_info_dbcc_8957_03.png https://tlcheng.files.wordpress.com/2019/08/20235716_...

ත්රස්තවාදීන්ගේ අවසානය-දිවයින- 2008/10/03

kQlQ@n`c|cQy ngryt a`sn~n vW sQtQn yRq hmRq` @s~n`Ak It q#v#n~w pYh`r el~l krmQn~ ngry a`kYmNy kQrWmt sRq`nmQn~ sQtQwQ. kQlQ@n`c|cQy ngryt k`lwOvk~kO pYh`r el~l kQrWm a`rm|x krn qQny a$wk @n`vn bv yRq hmRq`pwQ lEwQnn~ @jnr`l~ srw~ @f`n~@s~k` psRgQyq` pYk`X k@L~y. e~ anRv kQlQ@n`c|cQy ngry aw~pw~kr g#nW@m| wWrN`w~mk avsn~ stn kQnm| @m`@h`wk @h`~ a#r@BnR a#w. yRq hmRq` @s~n`Ak @g`dbQmQn~ pYh`r el~l krmQn~ kQlQ@n`c|cQy @k`tQ bl@k`tRv a`kYmNy kQrWmt @n`nvwQn q#v#n~w @g`dbQm| pYh`r m`l`v a`rm|x kQrWmt sRq`nmQn~ sQtQyqW kQlQ@n`c|cQy pY@q~X@y~ @k`tQ k[vRr# @vw gOvn~ pYh`r @v|gvw~ kQrWmt gOvn~ hmRq`v pQyvr @gn a#w. psRgQy qQn kWpy wQs~@s~ gOvn~ hmRq` pYh`rk @jtQy`n` sh em|. ayQ. 24 pYh`rk @hlQ@k`p~tr\ y`n` mgQn~ gOvn~ pYh`r rFsk~ el~l krn lqW. pYx`krn...

5504 Interesting News

Imran Khan is convicted. Pakistan's generals are content Economic data, commodities and markets Xi Jinping is obsessed with political loyalty in the PLA Momentum against Joe Biden is mounting again Even China's own state media sometimes resent state control Southern Italy needs private enterprise and infrastructure Oil bosses have big hopes for the AI boom Nvidia Probed in China Over Possible Antimonopoly Violations A trove of photographs casts light on Bangladesh's liberation war Business Some Australians are increasingly sceptical of AUKUS KAL's cartoon Business Andrés Manuel López Obrador puts his stamp on Mexico's schools Beyond France, the European elections will deliver more of the same Why New York scrapped congestion charging What Israel's killing of aid workers means for Gaza How to pay for the poor world to go green China will become less populous, more productive—and more pricey Economic data, commodities and markets Japan lands on the Moon England...