Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
cbrutekrag — Penetration tests on SSH servers using brute force or dictionary attacks. Written in C. | Kitploit
Tools/GitHubGitHub/matricali/cbrutekrag
Password AttacksNetwork SecurityPenetration Testing
GitHubmatricali/cbrutekrag

cbrutekrag

Penetration tests on SSH servers using brute force or dictionary attacks. Written in C.

View Repository
176272 years agoReviewed by Kitploit

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

license GitHub contributors Build Static Build Windows Build Latest stable release

cbrutekrag

Penetration tests on SSH servers using dictionary attacks. Written in C.

brute krag means "brute force" in afrikáans

Disclaimer

This tool is for ethical testing purpose only. cbrutekrag and its owners can't be held responsible for misuse by users. Users have to act as permitted by local law rules.

Run

root@kitploit:~
$ cbrutekrag -h
       _                _       _
      | |              | |     | |
  ___ | |__  _ __ _   _| |_ ___| | ___ __ __ _  __ _
 / __|| '_ \| '__| | | | __/ _ \ |/ / '__/ _` |/ _` |
| (__ | |_) | |  | |_| | ||  __/   <| | | (_| | (_| |
 \___||_.__/|_|   \__,_|\__\___|_|\_\_|  \__,_|\__, |
          OpenSSH Brute force tool 0.6.0        __/ |
      (c) Copyright 2014-2024 Jorge Matricali  |___/

      https://github.com/matricali/cbrutekrag


usage: ./cbrutekrag [-h] [-v] [-aA] [-D] [-P] [-T TARGETS.lst] [-C credentials.lst]
                [-t THREADS] [-f OUTPUT FORMAT] [-o OUTPUT.txt] [-F SCAN OUTPUT FORMAT] [-O SCAN_OUTPUT.txt] [TARGETS...]

-h, --help                This help
-v, --verbose             Verbose mode
-V, --verbose-sshlib      Verbose mode (sshlib)
-s, --scan                Scan mode
-D, --dry-run             Dry run
-P, --progress            Progress bar
-T, --targets <file>      Targets file
-C, --credentials <file>  Username and password file
-t, --threads <threads>   Max threads
-o, --output <file>       Output log file
-F, --format <pattern>    Output log format
                          Available placeholders:
                          %DATETIME%, %HOSTNAME%
                          %PORT%, %USERNAME%, %PASSWORD%
-O, --scan-output <file>  Output log file for scanner
-F, --scan-format <pattern> Output log format for scanner
                          Available placeholders:
                          %DATETIME%, %HOSTNAME%
                          %PORT%, %BANNER%.
                          Default:
                          "%HOSTNAME%:%PORT%\t%BANNER%\n"
-a, --allow-non-openssh   Accepts non OpenSSH servers
-A, --allow-honeypots     Allow servers detected as honeypots
    --timeout <seconds>   Sets connection timeout (Default: 3)
    --check-http <host>   Tries to open a TCP Tunnel after successful login

Example usages

root@kitploit:~
cbrutekrag -T targets.txt -C combinations.txt -o result.log
cbrutekrag -s -t 8 -C combinations.txt -o result.log 192.168.1.0/24

Supported targets syntax

  • 192.168.0.1
  • 10.0.0.0/8
  • 192.168.100.0/24:2222
  • 127.0.0.1:2222

Combinations file format

root@kitploit:~
root root
root password
root $BLANKPASS
$TARGET root
root $TARGET

Combinations file placeholders

PlaceholderPurposeAs passwordAs username
$BLANKPASSBlank password✔️-
$TARGETUse hostname or IP as a password✔️✔️

Customizable output format

Output format can be easily customizable using the command line option -f

Example: ./cbrutekrag -f "%HOSTNAME%:%PORT%|%USERNAME%|%PASSWORD%\n", which produces an output like:

root@kitploit:~
192.168.0.100:22|root|toor
192.168.0.105:22|ubnt|ubnt

Default value

%DATETIME%\t%HOSTNAME%:%PORT%\t%USERNAME%\t%PASSWORD%\n

root@kitploit:~
2024/04/01 13:05:13     192.168.0.100:22     root    admin

Placeholders

Customizable output format for scanner

Output format can be easily customizable using the command line option -F

Example: ./cbrutekrag -F "%HOSTNAME%\t%PORT%\t%BANNER%\n", which produces an output like:

root@kitploit:~
192.168.0.100 22  SSH-2.0-OpenSSH_6.0p1 Debian-4+deb7u2
192.168.0.105 22  SSH-2.0-OpenSSH_9.2p1 Debian-2+deb12u2

Default value

%HOSTNAME%:%PORT%\t%BANNER%\n

root@kitploit:~
192.168.0.100:22  SSH-2.0-OpenSSH_9.2p1 Debian-2+deb12u2

Placeholders

Requirements

cbrutekrag uses libssh - The SSH Library (http://www.libssh.org/)

Build

Requirements:

  • make
  • gcc compiler
  • libssh-dev
root@kitploit:~
git clone --depth=1 https://github.com/matricali/cbrutekrag.git
cd cbrutekrag
make
make install

Static build

Requirements:

  • cmake
  • gcc compiler
  • make
  • libssl-dev
  • libz-dev
root@kitploit:~
git clone --depth=1 https://github.com/matricali/cbrutekrag.git
cd cbrutekrag
bash static-build.sh
make install
Download Tool
PlaceholderDescriptionExample
%DATETIME%Replaced by Y/m/d HH:ii:ss date2024/04/01 12:46:27
%HOSTNAME%Replaced by hostname or IPv4192.168.0.100
%PORT%Replaced by connection port22
%USERNAME%Replaced by username usedroot
%PASSWORD%Replaced by password usedadmin
\nReplaced by LF
\tReplaced by TAB
PlaceholderDescriptionExample
%DATETIME%Replaced by Y/m/d HH:ii:ss date2024/04/01 12:46:27
%HOSTNAME%Replaced by hostname or IPv4192.168.0.100
%PORT%Replaced by connection port22
%BANNER%Replaced by server bannerSSH-2.0-OpenSSH_9.2p1 Debian-2+deb12u2
\nReplaced by LF
\tReplaced by TAB