nccgroup/jmxbfJMX 레지스트리에 액세스하도록 구성된 취약한 계정을 테스트하기 위한 무차별 대입 프로그램
jmxbf - JMX Registry에 접근하도록 구성된 취약한 계정을 테스트하기 위한 무차별 대입 프로그램
NCC Group Plc에서 오픈 소스로 공개 - http://www.nccgroup.com/
Daniele Costa가 개발, daniele [dot] costa [at] nccgroup [dot] trust
http://www.github.com/nccgroup/jmxbf
AGPL에 따라 공개되었으며, 자세한 내용은 LICENSE를 참조하십시오
$>Usage:
java -jar jmxbf.jar
-h,--host <arg> The JMX server IP address.
-p,--port <arg> The JMX server listening port.
-pf,--passwords-file <arg> File including the passwords, one per line.
-uf,--usernames-file <arg> File including the usernames, one per line.
Example:
$>java jar jmxbf.jar h 192.168.20.1 p 1099 uf usernames.txt pf passwords.txt
아래는 샘플 출력입니다:
$>java jar jmxbf.jar h 192.168.20.1 p 1099 uf usernames.txt pf passwords.txt
Auth failed!!!
Auth failed!!!
Auth failed!!!
. . .
Auth failed!!!
Auth failed!!!
###SUCCESS### - We got a valid connection for: control:supersecretpwd
Found some valid credentials - continuing brute force
....
###SUCCESS### - We got a valid connection for: monitor:monitor
Found some valid credentials - continuing brute force
Auth failed!!!
Auth failed!!!
Auth failed!!!
Auth failed!!!
. . .
Auth failed!!!
Auth failed!!!
Auth failed!!!
The following valid credentials were found:
control:supersecretpwd
monitor:monitor