Prodject · Prodject · Aug 2, 2018 · Aug 4, 2018 · Aug 4, 2018 · Jun 27, 2019
diff --git a/Dockerfile b/Dockerfile
@@ -0,0 +1,60 @@
+FROM python:3.13
+
+# dependencies
+RUN apt-get update \
+ && apt-get install -y --no-install-recommends \
+  build-essential python3-setuptools \
+  libcurl4-openssl-dev python3-dev libssl-dev \
+  ldap-utils \
+  libmariadb-dev \
+  libpq-dev \
+  ike-scan unzip default-jdk \
+  libsqlite3-dev \
+  libsqlcipher-dev \
+  python3-pip \
+  pkg-config \
+ && rm -rf /var/lib/apt/lists/*
+
+## cx_oracle
+RUN apt-get update \
+ && apt-get install -y --no-install-recommends libaio1 wget unzip git \
+ && rm -rf /var/lib/apt/lists/*
+
+WORKDIR /opt/oracle
+RUN wget https://download.oracle.com/otn_software/linux/instantclient/instantclient-basiclite-linuxx64.zip \
+ && wget https://download.oracle.com/otn_software/linux/instantclient/instantclient-sdk-linuxx64.zip \
+ && unzip instantclient-basiclite-linuxx64.zip \
+ && unzip -n instantclient-sdk-linuxx64.zip \
+ && rm -f instantclient-basiclite-linuxx64.zip \
+ && rm -f instantclient-sdk-linuxx64.zip \
+ && cd /opt/oracle/instantclient_* \
+ && rm -f *jdbc* *occi* *mysql* *README *jar uidrvci genezi adrci \
+ && echo /opt/oracle/instantclient_* > /etc/ld.so.conf.d/oracle-instantclient.conf \
+ && ldconfig
+
+## xfreerdp (see https://github.com/FreeRDP/FreeRDP/wiki/Compilation)
+WORKDIR /opt/FreeRDP
+RUN apt-get update \
+  && apt-get install -y --no-install-recommends ninja-build build-essential git-core debhelper cdbs dpkg-dev cmake cmake-curses-gui clang-format ccache opencl-c-headers ocl-icd-opencl-dev libmp3lame-dev libopus-dev libsoxr-dev libpam0g-dev pkg-config xmlto libssl-dev docbook-xsl xsltproc libxkbfile-dev libx11-dev libwayland-dev libxrandr-dev libxi-dev libxrender-dev libxext-dev libxinerama-dev libxfixes-dev libxcursor-dev libxv-dev libxdamage-dev libxtst-dev libcups2-dev libpcsclite-dev libasound2-dev libpulse-dev libgsm1-dev libusb-1.0-0-dev uuid-dev libxml2-dev libfaad-dev libsdl2-dev libsdl2-ttf-dev libcjson-dev libpkcs11-helper-dev liburiparser-dev libkrb5-dev libsystemd-dev libfuse3-dev libswscale-dev libcairo2-dev libavutil-dev libavcodec-dev libswresample-dev libwebkit2gtk-4.0-dev libpkcs11-helper1-dev \
+  && rm -rf /var/lib/apt/lists/* \
+  && git clone --depth 1 --branch 3.12.0 https://github.com/freerdp/freerdp.git \
+  && cmake -GNinja -B freerdp-build -S freerdp -DCMAKE_BUILD_TYPE=Debug -DCMAKE_SKIP_INSTALL_ALL_DEPENDENCY=ON -DWITH_SERVER=OFF -DWITH_SAMPLE=OFF -DWITH_PLATFORM_SERVER=OFF -DUSE_UNWIND=OFF -DWITH_SWSCALE=OFF -DWITH_FFMPEG=OFF -DWITH_WEBVIEW=OFF \
+  && cmake --build freerdp-build \
+  && cmake --install freerdp-build \
+  && rm -rf /opt/FreeRDP
+
+# patator
+WORKDIR /opt/patator
+COPY ./requirements.txt ./
+RUN python3 -m pip install --upgrade pip \
+  && python3 -m pip install -r requirements.txt
+
+# utils
+RUN apt-get update \
+ && apt-get install -y --no-install-recommends iputils-ping iproute2 netcat-openbsd curl rsh-client telnet vim mlocate nmap \
+ && rm -rf /var/lib/apt/lists/* \
+ && pip install -U IPython \
+ && echo 'set bg=dark' > /root/.vimrc
+
+COPY ./src/patator/patator.py ./
+ENTRYPOINT ["python3", "./patator.py"]
diff --git a/MANIFEST.in b/MANIFEST.in
diff --git a/README.md b/README.md
@@ -13,11 +13,13 @@ Currently it supports the following modules:
 * smtp_rcpt      : Enumerate valid users using the SMTP RCPT TO command
 * finger_lookup  : Enumerate valid users using Finger
 * http_fuzz      : Brute-force HTTP/HTTPS
+* rdp_gateway    : Brute-force RDP Gateway
 * ajp_fuzz       : Brute-force AJP
 * pop_login      : Brute-force POP
 * pop_passd      : Brute-force poppassd (not POP3)
 * imap_login     : Brute-force IMAP
 * ldap_login     : Brute-force LDAP
+* dcom_login     : Brute-force DCOM
 * smb_login      : Brute-force SMB
 * smb_lookupsid  : Brute-force SMB SID-lookup
 * rlogin_login   : Brute-force rlogin
@@ -39,19 +41,34 @@ Currently it supports the following modules:
 * umbraco_crack  : Crack Umbraco HMAC-SHA1 password hashes
 ```
 
-The name "Patator" comes from [this](https://www.youtube.com/watch?v=kU2yPJJdpag).
+The name "Patator" comes from [this](https://www.youtube.com/watch?v=9sF9fTALhVA).
 
-Patator is NOT script-kiddie friendly, please read the full README inside [patator.py](patator.py) before reporting.
+Patator is NOT script-kiddie friendly, please read the below, [DeepWiki](https://deepwiki.com/lanjelot/patator) and the [wiki](https://github.com/lanjelot/patator/wiki) before reporting.
 
-And please donate if you like this project.
 
-[![paypal](https://www.paypalobjects.com/en_US/i/btn/btn_donateCC_LG.gif)](https://www.paypal.com/cgi-bin/webscr?cmd=_donations&business=SB36VJH4EM5WG&lc=AU&item_name=lanjelot&item_number=patator&currency_code=AUD&bn=PP%2dDonationsBF%3abtn_donateCC_LG%2egif%3aNonHosted)
+Please donate if you like this project! :)
+<div align="center">
+
+| PayPal | Bitcoin |
+| -------- | ------- |
+| [![paypal](https://www.paypalobjects.com/en_US/i/btn/btn_donateCC_LG.gif)](https://www.paypal.com/cgi-bin/webscr?cmd=_donations&business=SB36VJH4EM5WG&lc=AU&item_name=lanjelot&item_number=patator&currency_code=AUD&bn=PP%2dDonationsBF%3abtn_donateCC_LG%2egif%3aNonHosted)| [![bitcoin](donate/donate-bitcoin.png)](https://raw.githubusercontent.com/lanjelot/patator/master/donate/bitcoin-address.txt) |
+
+</div>
 
 Many thanks! [@lanjelot](https://twitter.com/lanjelot)
 
+## Install
+
+```
+git clone https://github.com/lanjelot/patator.git
+git clone https://github.com/danielmiessler/SecLists.git
+docker build -t patator patator/
+docker run -it --rm -v $PWD/SecLists/Passwords:/mnt patator dummy_test data=FILE0 0=/mnt/richelieu-french-top5000.txt
+```
+
 ## Usage Examples
 
-* FTP : Enumerating users denied login in vsftpd/userlist
+* FTP : Enumerating users denied login in `vsftpd/userlist`
 
 ```
 $ ftp_login host=10.0.0.1 user=FILE0 0=logins.txt password=asdf -x ignore:mesg='Login incorrect.' -x ignore,reset,retry:code=500
@@ -67,7 +84,7 @@ $ ftp_login host=10.0.0.1 user=FILE0 0=logins.txt password=asdf -x ignore:mesg='
 ...
 ```
 
-Tested against `vsftpd-3.0.2-9` on `CentOS 7.0-1406`
+Tested against `vsftpd-3.0.2-9` on `CentOS 7.0-1406`.
 
 * SSH : Time-based user enumeration
 
@@ -83,7 +100,7 @@ $ ssh_login host=10.0.0.1 user=FILE0 0=logins.txt password=$(perl -e "print 'A'x
 ...
 ```
 
-Tested against openssh-server 1:6.0p1-4+deb7u2 on Debian 7.8
+Tested against `openssh-server 1:6.0p1-4+deb7u2` on `Debian 7.8`.
 
 * HTTP : Brute-force phpMyAdmin logon
 
@@ -107,9 +124,9 @@ $ grep AllowNoPassword /tmp/qsdf/72_200\:13215\:0\:0.351.txt
 ... class="icon ic_s_error" /> Login without a password is forbidden by configuration (see AllowNoPassword)</div><noscript>
 ```
 
-Tested against phpMyAdmin 4.2.7.1.
+Tested against `phpMyAdmin 4.2.7.1`.
 
-* IKE : Enumerate transforms supported by VPN peer
+* IKEv1 : Enumerate transforms supported by VPN peer
 
 ```
 # ike_enum host=10.0.0.1 transform=MOD0 0=TRANS aggressive=RANGE1 1=int:0-1 -x ignore:fgrep='NO-PROPOSAL'
@@ -118,29 +135,29 @@ Tested against phpMyAdmin 4.2.7.1.
 16:52:58 patator    INFO - code  size    time | candidate                          |   num | mesg
 16:52:58 patator    INFO - -----------------------------------------------------------------------------
 16:53:03 patator    INFO - 0     70     0.034 | 5,1,1,2:0                          |  1539 | Handshake returned: Enc=3DES Hash=MD5 Group=2:modp1024 Auth=PSK (Main)
-16:53:03 patator    INFO - 0     72     0.031 | 5,1,65001,2:0                      |  1579 | Handshake returned: Enc=3DES Hash=MD5 Group=2:modp1024 Auth=XAUTH (Main)
+16:53:03 patator    INFO - 0     72     0.031 | 5,1,65001,2:0                      |  1579 | Handshake returned: Enc=3DES Hash=MD5 Group=2:modp1024 Auth=XAUTH&PSK (Main)
 16:53:03 patator    INFO - 0     76     0.033 | 5,1,1,2:1                          |  1540 | Handshake returned: Enc=3DES Hash=MD5 Group=2:modp1024 Auth=PSK (Aggressive)
-16:53:03 patator    INFO - 0     78     0.034 | 5,1,65001,2:1                      |  1580 | Handshake returned: Enc=3DES Hash=MD5 Group=2:modp1024 Auth=XAUTH (Aggressive)
+16:53:03 patator    INFO - 0     78     0.034 | 5,1,65001,2:1                      |  1580 | Handshake returned: Enc=3DES Hash=MD5 Group=2:modp1024 Auth=XAUTH&PSK (Aggressive)
 16:53:06 patator    INFO - 0     84     0.034 | 7/128,2,1,2:0                      |  2371 | Handshake returned: Enc=AES KeyLength=128 Hash=SHA1 Group=2:modp1024 Auth=PSK (Main)
 16:53:06 patator    INFO - 0     90     0.033 | 7/128,2,1,2:1                      |  2372 | Handshake returned: Enc=AES KeyLength=128 Hash=SHA1 Group=2:modp1024 Auth=PSK (Aggressive)
-16:53:06 patator    INFO - 0     86     0.034 | 7/128,2,65001,2:0                  |  2411 | Handshake returned: Enc=AES KeyLength=128 Hash=SHA1 Group=2:modp1024 Auth=XAUTH (Main)
-16:53:06 patator    INFO - 0     92     0.035 | 7/128,2,65001,2:1                  |  2412 | Handshake returned: Enc=AES KeyLength=128 Hash=SHA1 Group=2:modp1024 Auth=XAUTH (Aggressive)
+16:53:06 patator    INFO - 0     86     0.034 | 7/128,2,65001,2:0                  |  2411 | Handshake returned: Enc=AES KeyLength=128 Hash=SHA1 Group=2:modp1024 Auth=XAUTH&PSK (Main)
+16:53:06 patator    INFO - 0     92     0.035 | 7/128,2,65001,2:1                  |  2412 | Handshake returned: Enc=AES KeyLength=128 Hash=SHA1 Group=2:modp1024 Auth=XAUTH&PSK (Aggressive)
 
 + 10.0.0.1:500 (Main Mode)
-    Encryption       Hash         Auth      Group
-    ---------- ----------   ---------- ----------
-          3DES        MD5          PSK   modp1024
-          3DES        MD5        XAUTH   modp1024
-        AES128       SHA1          PSK   modp1024
-        AES128       SHA1        XAUTH   modp1024
+    Encryption       Hash             Auth       Group
+    ---------- ----------       ----------  ----------
+          3DES        MD5              PSK    modp1024
+          3DES        MD5        XAUTH&PSK    modp1024
+        AES128       SHA1              PSK    modp1024
+        AES128       SHA1        XAUTH&PSK    modp1024
 
 + 10.0.0.1:500 (Aggressive Mode)
-    Encryption       Hash         Auth      Group
-    ---------- ----------   ---------- ----------
-          3DES        MD5          PSK   modp1024
-          3DES        MD5        XAUTH   modp1024
-        AES128       SHA1          PSK   modp1024
-        AES128       SHA1        XAUTH   modp1024
+    Encryption       Hash             Auth       Group
+    ---------- ----------       ----------  ----------
+          3DES        MD5              PSK    modp1024
+          3DES        MD5        XAUTH&PSK    modp1024
+        AES128       SHA1              PSK    modp1024
+        AES128       SHA1        XAUTH&PSK    modp1024
 16:53:11 patator    INFO - Hits/Done/Skip/Fail/Size: 8/3840/0/0/3840, Avg: 284 r/s, Time: 0h 0m 13s
 ```
 
@@ -222,7 +239,7 @@ Networks -----------------------------------------
 03:18:53 patator    INFO - Hits/Done/Skip/Fail/Size: 11/1000/0/0/1000, Avg: 133 r/s, Time: 0h 0m 7s
 ```
 
-Also notice that test.hsc.fr. is the start of a new zone because we got NOERROR and no IP address.
+Also notice that `test.hsc.fr.` is the start of a new zone because we got NOERROR and no IP address.
 
 * DNS : Reverse lookup two netblocks owned by Google
 

diff --git a/Vagrantfile b/Vagrantfile
diff --git a/docker-compose.yml b/docker-compose.yml
@@ -0,0 +1,58 @@
+services:
+  unix:
+    build: testing/unix
+    image: patator-unix-testing
+#    ports:
+#      - "21:21"
+#      - "22:22"
+#      - "23:23"
+#      - "25:25"
+#      - "79:79"
+#      - "80:80"
+#      - "106:106"
+#      - "110:110"
+#      - "139:139"
+#      - "143:143"
+#      - "389:389"
+#      - "445:445"
+#      - "513:513"
+#      - "636:636"
+#      - "993:993"
+#      - "995:995"
+#      - "3306:3306"
+#      - "4444:4444"
+#      - "5432:5432"
+#      - "5900:5900"
+#      - "8009:8009"
+#      - "8080:8080"
+#      - "161:161/udp"
+    # volumes:
+    #   - .:/opt/patator
+
+  oracle:
+    image: oracleinanutshell/oracle-xe-11g
+    environment:
+       - ORACLE_ENABLE_XDB=true
+    ports:
+      - "1521:1521"
+
+  mssql:
+    image: mcr.microsoft.com/mssql/server:2019-latest
+    environment:
+      - ACCEPT_EULA=Y
+      - SA_PASSWORD=Password1
+    ports:
+      - "1433:1433"
+
+  patator:
+    build: .
+    image: patator
+    depends_on:
+      - unix
+      - oracle
+      - mssql
+    environment:
+      - DISPLAY
+    volumes:
+      - ./src/patator/:/opt/patator/
+      - /tmp/.X11-unix:/tmp/.X11-unix
diff --git a/donate/bitcoin-address.txt b/donate/bitcoin-address.txt
@@ -0,0 +1 @@
+bitcoin:1MiukC6ZXB6vt29xabVfHQT6DMiEeoDPQJ 
diff --git a/donate/donate-bitcoin.png b/donate/donate-bitcoin.png
diff --git a/old/Vagrantfile b/old/Vagrantfile
@@ -0,0 +1,65 @@
+# -*- mode: ruby -*-
+# vi: set ft=ruby :
+
+$apt = <<SCRIPT
+export DEBIAN_FRONTEND=noninteractive 
+
+# refresh
+apt-get update -y
+
+# essentials
+apt-get install -y tmux git wget build-essential vim
+
+# requirements.txt deps
+apt-get install -y libcurl4-openssl-dev python3-dev libssl-dev # pycurl
+apt-get install -y ldap-utils # ldapsearch
+apt-get install -y libmariadbclient-dev # mysqlclient-python
+apt-get install -y libpq-dev # psycopg2
+apt-get install -y ike-scan unzip default-jdk
+apt-get install -y libsqlite3-dev libsqlcipher-dev # pysqlcipher
+
+# cx_oracle
+apt-get install -y libaio1 wget unzip
+rm -fr /opt/oracle
+mkdir /opt/oracle && cd /opt/oracle
+wget https://download.oracle.com/otn_software/linux/instantclient/instantclient-basiclite-linuxx64.zip
+unzip instantclient-basiclite-linuxx64.zip
+rm -f instantclient-basiclite-linuxx64.zip
+cd /opt/oracle/instantclient*
+rm -f *jdbc* *occi* *mysql* *README *jar uidrvci genezi adrci
+echo /opt/oracle/instantclient* > /etc/ld.so.conf.d/oracle-instantclient.conf
+ldconfig
+
+# xfreerdp (see https://github.com/FreeRDP/FreeRDP/wiki/Compilation)
+apt-get install -y ninja-build build-essential git-core debhelper cdbs dpkg-dev autotools-dev cmake pkg-config xmlto libssl-dev docbook-xsl xsltproc libxkbfile-dev libx11-dev libwayland-dev libxrandr-dev libxi-dev libxrender-dev libxext-dev libxinerama-dev libxfixes-dev libxcursor-dev libxv-dev libxdamage-dev libxtst-dev libcups2-dev libpcsclite-dev libasound2-dev libpulse-dev libjpeg-dev libgsm1-dev libusb-1.0-0-dev libudev-dev libdbus-glib-1-dev uuid-dev libxml2-dev libgstreamer1.0-dev libgstreamer-plugins-base1.0-dev libfaad-dev libfaac-dev
+apt-get install -y libavutil-dev libavcodec-dev libavresample-dev
+rm -fr /tmp/FreeRDP
+git clone https://github.com/FreeRDP/FreeRDP/ /tmp/FreeRDP && (cd /tmp/FreeRDP && cmake -DCMAKE_BUILD_TYPE=Debug -DWITH_SSE2=ON . && cmake --build . && sudo cmake --build . --target install)
+
+SCRIPT
+
+$patator = <<SCRIPT
+python3 -m venv patatorenv --without-pip
+source patatorenv/bin/activate
+wget --quiet -O - https://bootstrap.pypa.io/get-pip.py | python3
+python3 -m pip install patator
+
+SCRIPT
+
+Vagrant.configure(2) do |config|
+  config.vm.box = "ubuntu/bionic64"
+  config.vm.box_check_update = false
+
+  # prevent TTY error messages
+  config.ssh.shell = "bash -c 'BASH_ENV=/etc/profile exec bash'"
+
+  config.vm.provision "shell",
+                      inline: $apt,
+                      preserve_order: true,
+                      privileged: true 
+
+  config.vm.provision "shell",
+                      inline: $patator,
+                      preserve_order: true,
+                      privileged: false
+end