# Cbrutekrag | Penetration Tests On SSH Servers Using Brute Force Or Dictionary Attacks. Written In C

**URL:** <https://onehack.st/t/cbrutekrag-penetration-tests-on-ssh-servers-using-brute-force-or-dictionary-attacks-written-in-c/240799>\
**Category:** Tools & Scripts\
**Tags:** learning, tools, hacking\
**Created:** [May 17, 2023, 11:16pm UTC](https://onehack.st/t/cbrutekrag-penetration-tests-on-ssh-servers-using-brute-force-or-dictionary-attacks-written-in-c/240799 "2023-05-17T23:16:00Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![WhiteHat](https://onehack.st/user_avatar/onehack.st/whitehat/32/162514_2.png) [@WhiteHat](https://onehack.st/u/WhiteHat)\
**Post date:** [May 17, 2023, 11:16pm UTC](https://onehack.st/t/cbrutekrag-penetration-tests-on-ssh-servers-using-brute-force-or-dictionary-attacks-written-in-c/240799/1 "2023-05-17T23:16:01Z")

</div>

![image](https://onehack.st/uploads/default/original/3X/c/7/c7c211ee5b3b686f13a8a4d2448213d97f972b99.png)

[![license](https://camo.githubusercontent.com/3b0028a83b6f6f0bca6b20dc11510026c548478b9dd9e3cbaf7695c588cab970/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c6963656e73652f6d6174726963616c692f6362727574656b7261672e737667)](https://matricali.mit-license.org/2014) [![GitHub contributors](https://camo.githubusercontent.com/1b36205b59fd6a5dfac92183d3a1c3cef89e452e1f75a6074a44ed9ba2b3eca3/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f636f6e7472696275746f72732f6d6174726963616c692f6362727574656b7261672e737667)](https://github.com/matricali/cbrutekrag/graphs/contributors) [![Build Status](https://github.com/matricali/cbrutekrag/actions/workflows/build.yml/badge.svg?event=push)](https://github.com/matricali/cbrutekrag/actions/workflows/build.yml/badge.svg?event=push) [![Static Build Status](https://github.com/matricali/cbrutekrag/actions/workflows/static-build.yml/badge.svg?event=push)](https://github.com/matricali/cbrutekrag/actions/workflows/static-build.yml/badge.svg?event=push) [![Latest stable release](https://camo.githubusercontent.com/03e55679c192bb339a2add8a636d16fd34ae133dc3e0ac51cbae50ae2563141b/68747470733a2f2f696d672e736869656c64732e696f2f62616467652f64796e616d69632f6a736f6e2e7376673f6c6162656c3d737461626c652675726c3d68747470732533412532462532466170692e6769746875622e636f6d2532467265706f732532466d6174726963616c692532466362727574656b72616725324672656c65617365732532466c61746573742671756572793d2532342e6e616d6526636f6c6f72423d626c7565)](https://github.com/matricali/cbrutekrag/releases/latest)

# cbrutekrag

Penetration tests on SSH servers using dictionary attacks. Written in _C_.

> _brute krag_ means “brute force” in afrikáans

## Disclaimer

> This tool is for ethical testing purpose only.  
> cbrutekrag and its owners can’t be held responsible for misuse by users.  
> Users have to act as permitted by local law rules.

## Requirements

**cbrutekrag** uses **libssh** - The SSH Library ([http://www.libssh.org/](http://www.libssh.org/))

## Build

Requirements:

- `make`
- `gcc` compiler
- `libssh-dev`

git clone --depth=1 [https://github.com/matricali/cbrutekrag.git](https://github.com/matricali/cbrutekrag.git) cd cbrutekrag make make install

## Static build

Requirements:

- `cmake`
- `gcc` compiler
- `make`
- `libssl-dev`
- `libz-dev`

git clone --depth=1 [https://github.com/matricali/cbrutekrag.git](https://github.com/matricali/cbrutekrag.git) cd cbrutekrag bash static-build.sh make install

## Run

$ cbrutekrag -h \_ \_ \_ | | | | | | \_\_\_ | |\_\_ \_ \_\_ \_ _| |_ _| | \_\_\_ \_\_ \_\_ \_ \_\_ \_ / || ’ | '| | | | **/ \_ \ |/ / '** / ` |/ _` | | ( | |_) | | | |_| | || \_\_/ \<| | | (_| | (_| | \_\_\_||_. **/|_| \ __,_|\__ \_** |_|\_\_| \ __,_|\__ , | OpenSSH Brute force tool 0.5.0 **/ | (c) Copyright 2014-2022 Jorge Matricali |**\_/ usage: ./cbrutekrag [-h] [-v] [-aA] [-D] [-P] [-T TARGETS.lst] [-C combinations.lst] [-t THREADS] [-o OUTPUT.txt] [TARGETS…] -h This help -v Verbose mode -V Verbose mode (sshlib) -s Scan mode -D Dry run -P Progress bar -T Targets file -C Username and password file -t Max threads -o Output log file -a Accepts non OpenSSH servers -A Allow servers detected as honeypots.

## Example usages

cbrutekrag -T targets.txt -C combinations.txt -o result.log cbrutekrag -s -t 8 -C combinations.txt -o result.log 192.168.1.0/24

### Supported targets syntax

- 192.168.0.1
- 10.0.0.0/8
- 192.168.100.0/24:2222
- 127.0.0.1:2222

### Combinations file format

```auto
root root
root password
root $BLANKPASS$

```

## GitHub:

> **[GitHub - matricali/cbrutekrag: Penetration tests on SSH servers using brute force...](https://github.com/matricali/cbrutekrag)**
>
> Penetration tests on SSH servers using brute force or dictionary attacks. Written in C.