This tool successively tries couples of login and passwords in order to find matching authentication credentials. Parameter --login defines the logins to try. To check several logins, parameter --login-file is the file containing logins (one per line). Parameter --password-file is the file containing passwords (1/line). Parameter --stopatfirst indicates to stop when first match is found. Parameter --numthread defines the number of threads (simultaneous running checks) to use. Parameter --dst-ip is the address of remote host/server. Parameter --dst-port is the port number where to connect. Optional parameter --src-ip defines the local IP address to use. Optional parameter --src-port defines the local port number to use. Optional parameter --ip4opts permits to add IP4 options encoded as mixed. Optional parameter --ip6exts permits to add IP6 options encoded as mixed (first byte is the next header number). Optional parameters --device, --src-eth and --dst-eth permits to create a virtual client using fake addresses (in this case, tool have to be run with admin privilege in order to sniff and spoof at Ethernet level).
parameter | description | example |
-i|--dst-ip ip | destination IP address | 5.6.7.8 |
-L|--login login | login | |
-w|--password-file file | password file | passwordfile.txt |
-d|--device device | device name | Eth0 |
-E|--src-eth eth | source ethernet address | 0:2:3:4:5:6 |
-e|--dst-eth eth | destination ethernet address | 0:8:9:a:b:c |
-I|--src-ip ip | source IP address | 192.168.100.200 |
-P|--src-port port | source port number | 0 |
-p|--dst-port port | destination port number | 21 |
-o|--ip4opts ip4opts | IPv4 options | |
-O|--ip6exts ip6exts | IPv6 extensions | |
-l|--login-file file | login file | loginfile.txt |
-T|--timeout uint32 | timeout in milliseconds | 60000 |
-s|--stopatfirst|+s|--no-stopatfirst | stop at first valid login found | |
-n|--numthread uint32 | number of threads to launch | 5 |
-v|--verbose|+v|--no-verbose | be verbose | This boolean is set. Use + or --no- to unset it. |