Re: ncrack --pairwise?how to use it?
Fotis Chantzis <[email protected]>
| Newsgroups | gmane.comp.security.nmap.devel |
|---|---|
| Message-ID | <CAFOwBwM9Hfhx6v_MTbQwwDtaBeQwQCcN+peNqzH6Kt5tgzht9A@mail.gmail.com> |
The --pairwise option does exactly what you need:
(from man page)
--pairwise (Choose usernames and passwords in pairs)
Enabling this option will make Ncrack iterate the username and
password list by choosing them in pairs. For example, given the username
list of "root, guest, admin" and the password list of
"test, 12345, q1w2e3r4" Ncrack will go over them like this:
"root:test", "guest:12345", "admin:q1w2e3r4". This is particulary useful
when inside knowledge of the infrastructure tested is
available and special username and password lists have been made.
You only need to provide the usernames and passwords in separate files and
using the -U and -P switches.
If you have them in one file, you can separate them using cut:
$ cut pairs.txt -d ":" -f 1 > users.txt
$ cut pairs.txt -d ":" -f 2 > passwords.txt
Then use:
$ ncrack --pairwise -U users.txt -P passwords.txt <host>
On Sat, Sep 16, 2017 at 5:58 AM, michael johns <[email protected]>
wrote:
> ncrack --pairwise?how to use it?
> i want to us-->user:pass in pairs
>
> adm:pass
> adm1:pss2
> etc..
> need syntax, thank you
>
> _______________________________________________
> Sent through the dev mailing list
> https://nmap.org/mailman/listinfo/dev
> Archived at http://seclists.org/nmap-dev/
>
_______________________________________________
Sent through the dev mailing list
https://nmap.org/mailman/listinfo/dev
Archived at http://seclists.org/nmap-dev/