Re: ncrack --pairwise?how to use it?

Fotis Chantzis <[email protected]>
Newsgroups gmane.comp.security.nmap.devel
Message-ID <CAFOwBwM9Hfhx6v_MTbQwwDtaBeQwQCcN+peNqzH6Kt5tgzht9A@mail.gmail.com>
The --pairwise option does exactly what you need:

(from man page)
--pairwise (Choose usernames and passwords in pairs)
           Enabling this option will make Ncrack iterate the username and
password list by choosing them in pairs. For example, given the username
list of "root, guest, admin" and the password list of
           "test, 12345, q1w2e3r4" Ncrack will go over them like this:
"root:test", "guest:12345", "admin:q1w2e3r4". This is particulary useful
when inside knowledge of the infrastructure tested is
           available and special username and password lists have been made.


You only need to provide the usernames and passwords in separate files and
using the -U and -P switches.
If you have them in one file, you can separate them using cut:

$ cut pairs.txt -d ":" -f 1 > users.txt
$ cut pairs.txt -d ":" -f 2 > passwords.txt

Then use:

$ ncrack --pairwise -U users.txt -P passwords.txt <host>


On Sat, Sep 16, 2017 at 5:58 AM, michael johns <[email protected]>
wrote:

> ncrack --pairwise?how to use it?
> i want to us-->user:pass in pairs
>
> adm:pass
> adm1:pss2
> etc..
> need syntax, thank you
>
> _______________________________________________
> Sent through the dev mailing list
> https://nmap.org/mailman/listinfo/dev
> Archived at http://seclists.org/nmap-dev/
>

_______________________________________________
Sent through the dev mailing list
https://nmap.org/mailman/listinfo/dev
Archived at http://seclists.org/nmap-dev/
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.