Script For brute force valid users present for a particular service.

Script For brute force valid users present for a particular service.

The purpose of this script is to brute force valid users present for a particular service.
For example, if you wanted to know all users with mail accounts on a particular IP. It would use a list of users to try against SMTP port 25 on that machine.

This script will connect to an IP, or a list of IP’s, and check the targeted service against a user or list of users.
Then return which user accounts on a particular machine were valid.

The purpose of this script is to brute force valid users present for a particular service.

The purpose of this script is to brute force valid users present for a particular service.

To Do: Currently this is set-up to be used with SMTP services; Telnet and others will be added. Add ability to dump valid users and associated ip/protocol into a .txt file for better organization. Add threading for more efficient processing. Track time for current vs. threading to optimize speed. If possible, add priviledge level for each found user.

**NOTE: Make sure the correct port is open before running this script. This script is not meant to be used instead of a typical port scanner. The idea is you already grepped out your list of target IP’s with available service and just want to check against that list.

brute_force_users.py Script:

test_ips.txt:

users.txt:

Source : https://github.com/andrew14824