Gecko [ 196.203.21.74 ]

Name	Size	Permission
GetADUsers.py	10.68 KB	-rw-rw-rw-
GetNPUsers.py	19.23 KB	-rw-rw-rw-
GetUserSPNs.py	24.97 KB	-rw-rw-rw-
addcomputer.py	31.22 KB	-rw-rw-rw-
atexec.py	12.5 KB	-rw-rw-rw-
dcomexec.py	26.16 KB	-rw-rw-rw-
dpapi.py	27.65 KB	-rw-rw-rw-
easy_install-2.7.exe	90.85 KB	-rwxrwxrwx
easy_install.exe	90.85 KB	-rwxrwxrwx
esentutl.py	3.55 KB	-rw-rw-rw-
exchanger.py	41.71 KB	-rw-rw-rw-
findDelegation.py	14.36 KB	-rw-rw-rw-
flask.exe	94.83 KB	-rwxrwxrwx
futurize-script.py	399 B	-rw-rw-rw-
futurize.exe	64 KB	-rwxrwxrwx
futurize.exe.manifest	643 B	-rw-rw-rw-
getArch.py	4.33 KB	-rw-rw-rw-
getPac.py	13.59 KB	-rw-rw-rw-
getST.py	19.81 KB	-rw-rw-rw-
getTGT.py	5.04 KB	-rw-rw-rw-
goldenPac.py	49.36 KB	-rw-rw-rw-
karmaSMB.py	28.32 KB	-rw-rw-rw-
kintercept.py	9.52 KB	-rw-rw-rw-
ldapdomaindump	69 B	-rw-rw-rw-
ldd2bloodhound	86 B	-rw-rw-rw-
ldd2pretty	74 B	-rw-rw-rw-
lookupsid.py	7.7 KB	-rw-rw-rw-
mimikatz.py	10.02 KB	-rw-rw-rw-
mqtt_check.py	3.15 KB	-rw-rw-rw-
mssqlclient.py	7.71 KB	-rw-rw-rw-
mssqlinstance.py	1.5 KB	-rw-rw-rw-
netview.py	22.64 KB	-rw-rw-rw-
nmapAnswerMachine.py	36.72 KB	-rw-rw-rw-
ntfs-read.py	40.73 KB	-rw-rw-rw-
ntlmrelayx.py	20.87 KB	-rw-rw-rw-
pasteurize-script.py	403 B	-rw-rw-rw-
pasteurize.exe	64 KB	-rwxrwxrwx
pasteurize.exe.manifest	645 B	-rw-rw-rw-
ping.py	2.63 KB	-rw-rw-rw-
ping6.py	2.45 KB	-rw-rw-rw-
pip.exe	94.84 KB	-rwxrwxrwx
pip2.7.exe	94.84 KB	-rwxrwxrwx
pip2.exe	94.84 KB	-rwxrwxrwx
psexec.py	20.78 KB	-rw-rw-rw-
raiseChild.py	60.47 KB	-rw-rw-rw-
rdp_check.py	23.15 KB	-rw-rw-rw-
reg.py	19.05 KB	-rw-rw-rw-
registry-read.py	5.23 KB	-rw-rw-rw-
rpcdump.py	8.43 KB	-rw-rw-rw-
rpcmap.py	17.08 KB	-rw-rw-rw-
sambaPipe.py	12.7 KB	-rw-rw-rw-
samrdump.py	10.86 KB	-rw-rw-rw-
secretsdump.py	20.65 KB	-rw-rw-rw-
services.py	17.08 KB	-rw-rw-rw-
smbclient.py	5.13 KB	-rw-rw-rw-
smbexec.py	15.8 KB	-rw-rw-rw-
smbrelayx.py	58.72 KB	-rw-rw-rw-
smbserver.py	4.29 KB	-rw-rw-rw-
sniff.py	3.23 KB	-rw-rw-rw-
sniffer.py	2.27 KB	-rw-rw-rw-
split.py	4.56 KB	-rw-rw-rw-
ticketConverter.py	2.06 KB	-rw-rw-rw-
ticketer.py	42.33 KB	-rw-rw-rw-
wmiexec.py	17.53 KB	-rw-rw-rw-
wmipersist.py	11.36 KB	-rw-rw-rw-
wmiquery.py	8.68 KB	-rw-rw-rw-

Name

Size

Permission

Action

GetADUsers.py

10.68 KB

-rw-rw-rw-

GetNPUsers.py

19.23 KB

-rw-rw-rw-

GetUserSPNs.py

24.97 KB

-rw-rw-rw-

addcomputer.py

31.22 KB

-rw-rw-rw-

atexec.py

12.5 KB

-rw-rw-rw-

dcomexec.py

26.16 KB

-rw-rw-rw-

dpapi.py

27.65 KB

-rw-rw-rw-

easy_install-2.7.exe

90.85 KB

-rwxrwxrwx

easy_install.exe

90.85 KB

-rwxrwxrwx

esentutl.py

3.55 KB

-rw-rw-rw-

exchanger.py

41.71 KB

-rw-rw-rw-

findDelegation.py

14.36 KB

-rw-rw-rw-

flask.exe

94.83 KB

-rwxrwxrwx

futurize-script.py

399 B

-rw-rw-rw-

futurize.exe

64 KB

-rwxrwxrwx

futurize.exe.manifest

643 B

-rw-rw-rw-

getArch.py

4.33 KB

-rw-rw-rw-

getPac.py

13.59 KB

-rw-rw-rw-

getST.py

19.81 KB

-rw-rw-rw-

getTGT.py

5.04 KB

-rw-rw-rw-

goldenPac.py

49.36 KB

-rw-rw-rw-

karmaSMB.py

28.32 KB

-rw-rw-rw-

kintercept.py

9.52 KB

-rw-rw-rw-

ldapdomaindump

69 B

-rw-rw-rw-

ldd2bloodhound

86 B

-rw-rw-rw-

ldd2pretty

74 B

-rw-rw-rw-

lookupsid.py

7.7 KB

-rw-rw-rw-

mimikatz.py

10.02 KB

-rw-rw-rw-

mqtt_check.py

3.15 KB

-rw-rw-rw-

mssqlclient.py

7.71 KB

-rw-rw-rw-

mssqlinstance.py

1.5 KB

-rw-rw-rw-

netview.py

22.64 KB

-rw-rw-rw-

nmapAnswerMachine.py

36.72 KB

-rw-rw-rw-

ntfs-read.py

40.73 KB

-rw-rw-rw-

ntlmrelayx.py

20.87 KB

-rw-rw-rw-

pasteurize-script.py

403 B

-rw-rw-rw-

pasteurize.exe

64 KB

-rwxrwxrwx

pasteurize.exe.manifest

645 B

-rw-rw-rw-

ping.py

2.63 KB

-rw-rw-rw-

ping6.py

2.45 KB

-rw-rw-rw-

pip.exe

94.84 KB

-rwxrwxrwx

pip2.7.exe

94.84 KB

-rwxrwxrwx

pip2.exe

94.84 KB

-rwxrwxrwx

psexec.py

20.78 KB

-rw-rw-rw-

raiseChild.py

60.47 KB

-rw-rw-rw-

rdp_check.py

23.15 KB

-rw-rw-rw-

reg.py

19.05 KB

-rw-rw-rw-

registry-read.py

5.23 KB

-rw-rw-rw-

rpcdump.py

8.43 KB

-rw-rw-rw-

rpcmap.py

17.08 KB

-rw-rw-rw-

sambaPipe.py

12.7 KB

-rw-rw-rw-

samrdump.py

10.86 KB

-rw-rw-rw-

secretsdump.py

20.65 KB

-rw-rw-rw-

services.py

17.08 KB

-rw-rw-rw-

smbclient.py

5.13 KB

-rw-rw-rw-

smbexec.py

15.8 KB

-rw-rw-rw-

smbrelayx.py

58.72 KB

-rw-rw-rw-

smbserver.py

4.29 KB

-rw-rw-rw-

sniff.py

3.23 KB

-rw-rw-rw-

sniffer.py

2.27 KB

-rw-rw-rw-

split.py

4.56 KB

-rw-rw-rw-

ticketConverter.py

2.06 KB

-rw-rw-rw-

ticketer.py

42.33 KB

-rw-rw-rw-

wmiexec.py

17.53 KB

-rw-rw-rw-

wmipersist.py

11.36 KB

-rw-rw-rw-

wmiquery.py

8.68 KB

-rw-rw-rw-

Code Editor : mqtt_check.py

#!C:\Python27\python.exe
# SECUREAUTH LABS. Copyright 2018 SecureAuth Corporation. All rights reserved.
#
# This software is provided under under a slightly modified version
# of the Apache Software License. See the accompanying LICENSE file
# for more information.
#
# Author: Alberto Solino (@agsolino)
#
# Description:
#     Simple MQTT example aimed at playing with different login options. Can be converted into a account/password
#     brute forcer quite easily.
#
# Reference for:
#  MQTT and Structure
#
#

from __future__ import print_function

import argparse
import logging
import re
import sys

from impacket import version
from impacket.examples import logger
from impacket.mqtt import CONNECT_ACK_ERROR_MSGS, MQTTConnection

class MQTT_LOGIN:
    def __init__(self, username, password, target, options):
        self._options = options
        self._username = username
        self._password = password
        self._target = target

if self._username == '':
            self._username = None

def run(self):
        mqtt = MQTTConnection(self._target, int(self._options.port), self._options.ssl)

if self._options.client_id is None:
            clientId = ' '
        else:
            clientId = self._options.client_id

mqtt.connect(clientId, self._username, self._password)

logging.info(CONNECT_ACK_ERROR_MSGS[0])

if __name__ == '__main__':
    # Init the example's logger theme
    logger.init()
    print(version.BANNER)
    parser = argparse.ArgumentParser(add_help=False,
                                     description="MQTT login check")
    parser.add_argument("--help", action="help", help='show this help message and exit')
    parser.add_argument('target', action='store', help='[[domain/]username[:password]@]<targetName>')
    parser.add_argument('-client-id', action='store', help='Client ID used when authenticating (default random)')
    parser.add_argument('-ssl', action='store_true', help='turn SSL on')
    parser.add_argument('-port', action='store', default='1883', help='port to connect to (default 1883)')
    parser.add_argument('-debug', action='store_true', help='Turn DEBUG output ON')

try:
        options = parser.parse_args()
    except Exception as e:
        logging.error(str(e))
        sys.exit(1)

if options.debug is True:
        logging.getLogger().setLevel(logging.DEBUG)
        # Print the Library's installation path
        logging.debug(version.getInstallationPath())
    else:
        logging.getLogger().setLevel(logging.INFO)

domain, username, password, address = re.compile('(?:(?:([^/@:]*)/)?([^@:]*)(?::([^@]*))?@)?(.*)').match(
        options.target).groups('')

#In case the password contains '@'
    if '@' in address:
        password = password + '@' + address.rpartition('@')[0]
        address = address.rpartition('@')[2]

check_mqtt = MQTT_LOGIN(username, password, address, options)
    try:
        check_mqtt.run()
    except Exception as e:
        if logging.getLogger().level == logging.DEBUG:
            import traceback
            traceback.print_exc()
        logging.error(e)

${this.title}

Code Editor : mqtt_check.py