tldr/pages/common/patator.md

patator

A multi-purpose brute-forcer, with a modular design and a flexible usage. More information: https://github.com/lanjelot/patator/wiki/Usage.

• Brute force ssh login with rate limit and timeout options (successful login will show login banner or something similar):

patator ssh_login host={{ip_or_host}} user=FILE0 password=FILE1 0={{path/to/users.txt}} 1={{path/to/passwords.txt}} --rate_limit={{seconds}} --timeout={{seconds}} -x ignore:mesg='Authentication failed.'

• Brute force encrypted zip file:

patator unzip_pass zipfile={{path/to/file.zip}} password=FILE0 0={{path/to/passwords.txt}} -x ignore:code!=0

• Brute force http basic auth (payload file userpass.txt should be in the format username:password):

patator http_fuzz url={{http://host:port}} auth_type=basic user_pass=COMBO00:COMBO01 0={{path/to/userpass.txt}} -x ignore:code=401

• Brute force FTP/FTPS login:

patator ftp_login host={{ip_or_host}} user=FILE0 password=FILE1 0={{path/to/users.txt}} 1={{path/to/passwords.txt}} tls={{0|1}} -x ignore:mesg='Login incorrect.' -x ignore,reset,retry:code=500

• List all available modules:

patator --help

• Display help for a particular module:

patator {{module_name}} --help