Multi-protocol brute-forcing tool that supports FTP, SSH, HTTP, SMTP, SNMP, and many other services for login credential testing.
patator {module} {flag-hosts} {flag-users} {flag-passwords} {flag-port} {flag-threads} {flag-timeout} {flag-max-retries} {flag-output} 📎 module 📎 flag-hosts 📎 flag-users 📎 flag-passwords 📎 flag-port 📎 flag-threads 📎 flag-timeout 📎 flag-max-retries 📎 flag-output patator {module} {flag-hosts} {flag-users} {flag-passwords} {flag-port} {flag-threads} {flag-timeout} {flag-max-retries} {flag-output}Sandbox: execFile · Timeout: 600s
brute.ftp.login brute.ssh.login brute.http.login brute.smtp.login brute.snmp.community brute.service.login | Name | Type | Required | Default | Description | Aliases |
|---|---|---|---|---|---|
module | string | Yes | - | Module name (ftp_login, ssh_login, http_fuzz, etc.) | - |
flag-hosts | string | No | - | Target hosts (file or comma-separated) | host |
flag-users | string | No | - | Usernames (file or string) | user |
flag-passwords | string | No | - | Passwords (file or string) | password |
flag-port | integer | No | - | Service port | port |
flag-threads | integer | No | - | Number of threads | -x, --threads |
flag-timeout | integer | No | - | Connection timeout | -t, --timeout |
flag-max-retries | integer | No | - | Maximum retries per attempt | -R, --max-retries |
flag-output | string | No | - | Output file for results | -o, --output |
| Type | Description | MIME | Schema | Trust |
|---|---|---|---|---|
brute.results | Brute-force results with valid credentials | text/plain | - | verified |
Inputs
network.target.host Target hostname or IP
credential.username.list Username wordlist
credential.password.list Password wordlist
Outputs
brute.results Found valid credentials
network_traffic Produces
brute.resultsConsumes
network.target.hostcredential.username.listcredential.password.list| Resource | Value |
|---|---|
| CPU | low |
| Memory | 64 MB |
| Network | medium |
| Disk I/O | low |
FTP brute-force
patator ftp_login host=10.0.0.1 user=FILE0 password=FILE1 0=users.txt 1=passwords.txtSSH brute-force
patator ssh_login host=10.0.0.1 user=FILE0 password=FILE1 0=users.txt 1=passwords.txtHTTP form brute-force
patator http_fuzz url=http://example.com/login method=POST body='user=FILE0&pass=FILE1' 0=users.txt 1=passwords.txtPatator is a Python-based multi-protocol brute-force tool designed for modular and flexible authentication testing across many services including FTP, SSH, HTTP, SMTP, SNMP, SMB, Telnet, and more.
# FTP brute-force
patator ftp_login host=10.0.0.1 user=FILE0 password=FILE1 0=users.txt 1=passwords.txt
# SSH brute-force
patator ssh_login host=10.0.0.1 user=FILE0 password=FILE1 0=users.txt 1=passwords.txt -x ignore:mesg='Authentication failed.'
# HTTP form brute-force
patator http_fuzz url=http://target.com/login method=POST body='user=COMBO00&pass=COMBO01' 0=combo.txt
# SNMP community scan
patator snmp_login host=10.0.0.0/24 community=FILE0 0=communities.txt -x ignore:mesg='No response'