jmxbf - 一个用于测试配置为访问 JMX Registry 的弱账户的暴力破解程序
由 NCC Group Plc 发布为开源项目 - http://www.nccgroup.com/
由 Daniele Costa 开发，daniele [dot] costa [at] nccgroup [dot] trust
http://www.github.com/nccgroup/jmxbf
依据 AGPL 发布，更多信息请参阅 LICENSE
$>Usage:
java -jar jmxbf.jar
-h,--host <arg> The JMX server IP address.
-p,--port <arg> The JMX server listening port.
-pf,--passwords-file <arg> File including the passwords, one per line.
-uf,--usernames-file <arg> File including the usernames, one per line.
Example:
$>java jar jmxbf.jar h 192.168.20.1 p 1099 uf usernames.txt pf passwords.txt
以下是一些示例输出：
$>java jar jmxbf.jar h 192.168.20.1 p 1099 uf usernames.txt pf passwords.txt
Auth failed!!!
Auth failed!!!
Auth failed!!!
. . .
Auth failed!!!
Auth failed!!!
###SUCCESS### - We got a valid connection for: control:supersecretpwd
Found some valid credentials - continuing brute force
....
###SUCCESS### - We got a valid connection for: monitor:monitor
Found some valid credentials - continuing brute force
Auth failed!!!
Auth failed!!!
Auth failed!!!
Auth failed!!!
. . .
Auth failed!!!
Auth failed!!!
Auth failed!!!
The following valid credentials were found:
control:supersecretpwd
monitor:monitor