A simple, fast and powerful password scanner engine tool was built by antx.
psex is a simple, fast and powerful password scanner engine tool was built by antx. psex also support some useful features, which like fofa search and parse assets to verify. psex has been built in some weak username and password.
pip3 install psex# Title: xxxxxxx
# Author: antx-code
# Email: 7877940+antx-code@users.noreply.github.com
from loguru import logger
from redis import Redis
from psex import ScannerEngine
from psex.funcs.assetio import AssetIO
from psex.weaks import weak_passwords
class Scanner(ScannerEngine):
def __init__(self):
super(Scanner, self).__init__()
@logger.catch(level='ERROR')
def is_connected(self, connection):
"""
check if the connection is connected.
"""
try:
connection.ping()
return True
except Exception as e:
return False
@logger.catch(level='ERROR')
def create_connect(self, *args):
"""
create a connection.
"""
connection = Redis(host=args[0], port=args[1], password=args[3], db=0, socket_connect_timeout=self.timeout,
socket_timeout=self.timeout)
return connection
@logger.catch(level='ERROR')
def dia(self):
asset_io = AssetIO()
ips = asset_io.get_file_assets('input/source_redis.csv')
"""
or use fofa search and parse assets to verify.
grammar = 'xxx'
api_key='xxxxxxxxxxxxxxxxxxxxxx'
api_email='xxxx@email.com'
ips = asset_io.get_fofa_assets(grammar, api_key, api_email, 'fofa_redis.csv')
"""
passwords = weak_passwords('redis')
for password in passwords:
for ip_port in ips:
ip_port = ip_port.strip()
ip = ip_port.split(':')[0]
port = int(ip_port.split(':')[1])
logger.debug(f'Connecting to {ip} ......')
logger.warning(f'Testing {ip_port} with password: "{password}" !')
result = self.poc(ip, port, '', password)
if result:
asset_io.save2file('redis_success', ip, port, '', password)
if __name__ == '__main__':
ds = Scanner()
ds.dia()