Problems when running the ssh plugin #20
Comments
|
@bleh92 none of these are errors, but informative messages of the progress, except for the last one ... in the last one, I can see the machines are not responding anymore ("deadline has elapsed" means a timeout while connecting) so the reason why it's taking forever is probably because they've stopped responding after the first attempt? can you ssh manually to those machines when this is happening? |
Yes, I checked just now. I am able to ssh simultaneously while the script is running. |
|
to both targets, from the same machine? is fail2ban active? |
|
Yes, I am able to ssh to both .10 and .11 at the same time, while the script is running, and both .10 and .11 are fresh installations. |
|
mmm weird ... can you run legba by prepending RUST_LOG=debug and pasting the log here please?
|
|
For the command you have suggested above, it again runs endlessly when I run it using this is the output. `[INFO ] targets (2): @target.txt [DEBUG] loading wordlist from wordlists/passwords.txt ... for the password list containing multiple passwords: |
|
mmm any network timeouts or similar in dmesg? what are the specs of the bruteforcing machine? ethernet or wifi? what if you increase the timeout by PS: thank you for the logs |
|
Ok so the whole setup is being run using proxmox. The Machine has 4 GB RAM and 2 core processor and I am accessing the machine over vpn. I myself am using wifi on my computer to connect to them. For more information
The machines are in the same subnet and can communicate with each other, as I am able to ssh into them from bruteforcer as for network timeouts in dmesg, there are none The |
|
Greetings. First of all, I want to express my gratitude to the author, you are great! This is a very cool tool! Unfortunately, I want to inform you that I have exactly the same problem ssh as bleh92. Thank you very much for your work. |
|
@zip609 hi! can you try with v0.5.0 and, if the error persists, provide me the debug log by running with |
|
Hallo, I don't know if this helps, but RDP plugin is working fine with the same parameters, there probably is a problem with ssh plugin.
But when I remove the |
|
I'm failing to reproduce it here ... I'm forcing 2 tasks, using a wordlist with 3 passwords and a targets.txt file with one working ip and one down, and as expected I get this:
|
|
I see that you are using version v0.5.1, I have also updated to the latest version, but the error persists. I will try running it on my local set-up and give you an update tomorrow. If it runs there without any problems, it has to be an issue within the Datacenter machines i am using. Edit: The script is still not working. I had a friend of mine try your tool from his machine. He ran the script on kali and was trying to bruteforce ssh on to an ubuntu machine. They are both connected via NAT, on his VMware workstation pro. Version info- Tasks running endlessly- Using ssh into the machine- |
|
Are you running the tool from within a VM as well? NAT? |
|
Yes, previously I was running the tool on machines set up in proxmox, since they weren't working, I had a friend of mine, run the tool on his kali machine which is installed in vmware workstation. He tried to bruteforce the ssh credentials of another ubuntu machine in VMware, in the same network/subnet(NAT configuration, Just like your home network with a wireless router, the VM will be assigned in a separate subnet, like |
|
Understood, can you send a screenshot of the VMs network configuration (both from the host, so a screenshot of the vmware/virtualbox network config, and from the guests) so I can try to replicate? |
|
Also, in the debug.log i see several |
|
i was finally able to replicate this using two VMs, debugging & fix in progress |
|
@bleh92 turns out that it is a timeout problem, with few cores (I see 2 in that case) the timeout must be increased. I managed to work around the issue by using Closing for the time being, looking forward to your feedback. |
|
Hello, And again I get the same time out error, but the good news is that with Password list
|
Ok, so the I think I found the cause for this. So my laptop keyboard seems to be broken. When I create the wordlist using my external keyboard, it worked fine. But when I created the wordlist using the in built keyboard, it failed. Looks like the tab button is being registered sometimes when I use the number keys, pretty weird. |
|
can you send the document that generates the issue? I can try to workaround it anyway |
|
If you are looking for the password list then here it is. This one has a tab space after the last password. |
Helloo,
I am a github noob, so forgive me if I am doing this wrong.
So I was testing your tool to brute force SSH credentials on 2 machines in my network. I have installed all the dependencies and the tool runs without any error.
My machine:-
Linux Bruteforcer 5.4.0-166-generic #183-Ubuntu SMP Mon Oct 2 11:28:33 UTC 2023 x86_64 x86_64 x86_64 GNU/LinuxIt is the same for the other 2 machines as well.
So the command I used was:
./legba ssh --username ubuntu --password wordlists/passwords.txt --target @target.txt -O result --output-format jsonl -Qand go the expected result
Also note that the only password stored in the passwords.txt is Lab4man1.
When I run the same command but this time remove the
-Qflag, I get this errorThis keeps running forever, until I stop it.
If there are multiple passwords in the password list the same error as the over one is noticed. But in case of
-Qflag , it doesn't run forever.Multiple passwords file:
./legba ssh --username ubuntu --password wordlists/password-new.txt --target @target.txt -O result --output-format jsonl./legba ssh --username ubuntu --password wordlists/password-new.txt --target @target.txt -O result --output-format jsonl -QOnce again , sorry If this isn't the way to ask a question.
Thank you.
The text was updated successfully, but these errors were encountered: