{"id":3244,"date":"2011-12-29T12:22:00","date_gmt":"2011-12-29T12:22:00","guid":{"rendered":"https:\/\/www.darknet.org.uk\/?p=3244"},"modified":"2015-09-09T19:37:01","modified_gmt":"2015-09-09T11:37:01","slug":"patator-multi-purpose-brute-forcing-tool","status":"publish","type":"post","link":"https:\/\/www.darknet.org.uk\/2011\/12\/patator-multi-purpose-brute-forcing-tool\/","title":{"rendered":"Patator &#8211; Multi Purpose Brute Forcing Tool"},"content":{"rendered":"<p>Patator is a multi-purpose brute-forcer, with a modular design and a flexible usage. Basically the author got tired of using <a href=\"https:\/\/www.darknet.org.uk\/2010\/02\/medusa-2-0-released-parallel-network-login-brute-forcing-tool\/\">Medusa<\/a>, <a href=\"https:\/\/www.darknet.org.uk\/2010\/10\/thc-hydra-5-8-released-extremely-fast-multi-threaded-loginpassword-cracker\/\" title=\"THC-Hydra 5.8 Released \u2013 Extremely Fast Multi-Threaded Login\/Password Cracker\">Hydra<\/a>, <a href=\"https:\/\/www.darknet.org.uk\/2010\/03\/ncrack-high-speed-network-authentication-cracking-tool\/\" title=\"Ncrack \u2013 High Speed Network Authentication Cracking Tool\">ncrack<\/a>, <a href=\"https:\/\/www.darknet.org.uk\/2010\/07\/metasploit-framework-3-4-1-released-16-new-exploits-22-modules-11-meterpreter-scripts\/\" title=\"Metasploit Framework 3.4.1 Released \u2013 16 New Exploits, 22 Modules &#038; 11 Meterpreter Scripts\">metasploit<\/a> auxiliary modules, <a href=\"https:\/\/www.darknet.org.uk\/2010\/02\/nmap-v5-20-released-open-source-network-exploration-auditing-tool\/\" title=\"Nmap v5.20 Released \u2013 Open Source Network Exploration &#038; Auditing Tool\">nmap<\/a> NSE scripts and the like because:<\/p>\n<ul>\n<li>They either do not work or are not reliable (false negatives several times in the past)<\/li>\n<li>They are slow (not multi-threaded or not testing multiple passwords within the same TCP connection)<\/li>\n<li>They lack very useful features that are easy to code in python (eg. interactive runtime)<\/li>\n<\/ul>\n<p>Basically you should give Patator a try once you get disappointed by Medusa, Hydra or other brute-force tools and are about to code your own small script because Patator will allow you to:<\/p>\n<ul>\n<li>Not write the same code over and over<\/li>\n<li>Run multi-threaded<\/li>\n<li>Benefit for useful features such as the interactive runtime commands, response logging, etc.<\/li>\n<\/ul>\n<p>Currently it supports the following modules:<\/p>\n<script async src=\"https:\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js?client=ca-pub-3033787195489589\"\r\n     crossorigin=\"anonymous\"><\/script>\r\n<!-- Darknet Responsive Post Ad Links [previously link ad unit] -->\r\n<ins class=\"adsbygoogle\"\r\n     style=\"display:block\"\r\n     data-ad-client=\"ca-pub-3033787195489589\"\r\n     data-ad-slot=\"5456620019\"\r\n     data-ad-format=\"auto\"><\/ins>\r\n<script>\r\n     (adsbygoogle = window.adsbygoogle || []).push({});\r\n<\/script>\n<ul>\n<li>ftp_login     : Brute-force FTP<\/li>\n<li>ssh_login     : Brute-force SSH<\/li>\n<li>telnet_login  : Brute-force Telnet<\/li>\n<li>smtp_login    : Brute-force SMTP<\/li>\n<li>smtp_vrfy     : Enumerate valid users using the SMTP VRFY command<\/li>\n<li>smtp_rcpt     : Enumerate valid users using the SMTP RCPT TO command<\/li>\n<li>http_fuzz     : Brute-force HTTP\/HTTPS<\/li>\n<li>pop_passd     : Brute-force poppassd (not POP3)<\/li>\n<li>ldap_login    : Brute-force LDAP<\/li>\n<li>smb_login     : Brute-force SMB<\/li>\n<li>mssql_login   : Brute-force MSSQL<\/li>\n<li>oracle_login  : Brute-force Oracle<\/li>\n<li>mysql_login   : Brute-force MySQL<\/li>\n<li>pgsql_login   : Brute-force PostgreSQL<\/li>\n<li>vnc_login     : Brute-force VNC<\/li>\n<li>dns_forward   : Forward lookup subdomains<\/li>\n<li>dns_reverse   : Reverse lookup subnets<\/li>\n<li>snmp_login    : Brute-force SNMPv1\/2 and SNMPv3<\/li>\n<li>unzip_pass    : Brute-force the password of encrypted ZIP files<\/li>\n<li>keystore_pass : Brute-force the password of Java keystore files<\/li>\n<\/ul>\n<p>The name &#8220;Patator&#8221; comes from this tv interview clip &#8211; <a href=\"http:\/\/www.youtube.com\/watch?v=xoBkBvnTTjo\">patator<\/a><\/p>\n<p>Patator is NOT script-kiddie friendly, please read the README inside patator.py before reporting\/complaining\/asking me how to use this tool..<\/p>\n<p>You can download Patator v0.3 here:<\/p>\n<p><a href=\"http:\/\/patator.googlecode.com\/files\/patator_v0.3.py\">patator_v0.3.py<\/a><\/p>\n<p>Or read more <a href=\"http:\/\/code.google.com\/p\/patator\/\">here<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Patator is a multi-purpose brute-forcer, with a modular design and a flexible usage. Basically the author got tired of using Medusa, Hydra, ncrack, metasploit auxiliary modules, nmap NSE scripts and the like because: They either do not work or are not reliable (false negatives several times in the past) They are slow (not multi-threaded or [&hellip;]<\/p>\n","protected":false},"author":25,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_seopress_robots_primary_cat":"","_seopress_titles_title":"","_seopress_titles_desc":"","_seopress_robots_index":"","_genesis_hide_title":false,"_genesis_hide_breadcrumbs":false,"_genesis_hide_singular_image":false,"_genesis_hide_footer_widgets":false,"_genesis_custom_body_class":"","_genesis_custom_post_class":"","_genesis_layout":"","footnotes":""},"categories":[9,31],"tags":[6234,3760,1414,2622,3759,466,284],"featured_image_src":null,"featured_image_src_square":null,"author_info":{"display_name":"Darknet","author_link":"https:\/\/www.darknet.org.uk\/author\/darknet\/"},"_links":{"self":[{"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/posts\/3244"}],"collection":[{"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/users\/25"}],"replies":[{"embeddable":true,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/comments?post=3244"}],"version-history":[{"count":0,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/posts\/3244\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/media?parent=3244"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/categories?post=3244"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/tags?post=3244"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}