Say goodbye to weak SSH passwords with Paraforce, a highly customizable Python-based brute force solution.
Find the source code on GitHub
As cybersecurity threats continue to evolve, it’s essential to stay one step ahead. Brute force attacks remain a prevalent threat, and SSH logins are no exception. To help combat this, I introduce Paraforce, a multi-threaded, highly configurable SSH brute force tool written in Python.
What is Paraforce?
Paraforce is designed to test the security of SSH logins by attempting multiple password combinations in a brute force attack. This tool supports password and keyboard-interactive authentication types, excluding key-based login for the time being.
Key Features
Paraforce offers a variety of features tailored to your environment:
- Multiple timers: Configure timers at different stages of the connection to optimize performance.
- Random value selection: Choose a random delay in retries to avoid detection by anti-brute force rules.
- Delays on initial attempts: Configure delays at the start of the brute force attack.
- Multithread mode: Test multiple hosts in parallel.
- Concurrent mode: Test multiple hosts and multiple credentials per host simultaneously.
Conclusion
Paraforce is a powerful tool for identifying weak SSH passwords, making it an indispensable asset in your cybersecurity toolkit. Its highly customizable nature allows you to tailor the tool to your environment, ensuring optimal performance and security. Give Paraforce a try and experience its robust capabilities firsthand.
VostDev 