Sinisterly
SSH user enumeration - Printable Version

+- Sinisterly (https://sinister.li)
+-- Forum: Hacking (https://sinister.li/Forum-Hacking)
+--- Forum: Network Hacking (https://sinister.li/Forum-Network-Hacking)
+--- Thread: SSH user enumeration (/Thread-SSH-user-enumeration)

SSH user enumeration - Charonone - 04-13-2021

Hi,
I found an IP address and i run an nmap scan on it, which revealed that it has the port 22 open. I want to access it, but i don't know the user and password for the ssh. It has an older version of ssh, version SSH-2.0-OpenSSH_7.2p2 which is known to be vulnerable to user enumeration hack. I found the script https://www.exploit-db.com/exploits/45233 here, but after i compile the code it says that paramiko is not available. I used Kali linux. Every help would be awesome. I even used metasploit too (ssh_enumers), but idk if that's the same thing...

RE: SSH user enumeration - Oni - 04-13-2021

Paramiko is a dependency for that script. More specifically, it is used for Python/SSH. You'll need to install it.

You can read more here:
http://www.paramiko.org/

RE: SSH user enumeration - Charonone - 04-13-2021

When i tried to install it, it said that it was already installed (version 2.7.2). I think it's preinstalled on Kali Linux.
But regardless what i do i get the same error "no module named paramiko"

RE: SSH user enumeration - DedSpace - 07-31-2021

(04-13-2021, 09:25 PM)Charonone Wrote: When i tried to install it, it said that it was already installed (version 2.7.2). I think it's preinstalled on Kali Linux.
But regardless what i do i get the same error "no module named paramiko"

There is a chance that you have Paramiko installed for a different version of Python than what the script runs. Try changing this line:

Code:
#!/usr/bin/env python

To:

Code:
#! /usr/bin/python3

I have a feeling it defaults to python2, but paramiko is installed for python3. If that did not work, try installing it for python3:

Code:
sudo pip3 install paramiko

But you will have to put all the print statements in brackets for example:

Code:
print '[-] Failed to negotiate SSH transport'

Will become:

Code:
print('[-] Failed to negotiate SSH transport')

Seems like too much work to me unless you are good with regular expressions but running python2 and python3 side by side causes head aches like this especially when pip is involved.