mirror of
https://github.com/vanhauser-thc/thc-hydra.git
synced 2025-07-06 04:51:40 -07:00
add memcached module
This commit is contained in:
parent
4a87be9c48
commit
8e209b14f4
8 changed files with 293 additions and 19 deletions
|
@ -40,6 +40,7 @@ LOCAL_SRC_FILES:= \
|
||||||
hydra-irc.c\
|
hydra-irc.c\
|
||||||
hydra-ldap.c\
|
hydra-ldap.c\
|
||||||
hydra-mod.c\
|
hydra-mod.c\
|
||||||
|
hydra-memcached.c\
|
||||||
hydra-mssql.c\
|
hydra-mssql.c\
|
||||||
hydra-mysql.c\
|
hydra-mysql.c\
|
||||||
hydra-ncp.c\
|
hydra-ncp.c\
|
||||||
|
@ -90,7 +91,8 @@ LOCAL_STATIC_LIBRARIES := \
|
||||||
libiconv\
|
libiconv\
|
||||||
libneon\
|
libneon\
|
||||||
libssl_static\
|
libssl_static\
|
||||||
libcrypto_static
|
libcrypto_static\
|
||||||
|
libmemcached
|
||||||
|
|
||||||
LOCAL_SHARED_LIBRARIES := \
|
LOCAL_SHARED_LIBRARIES := \
|
||||||
libsqlite\
|
libsqlite\
|
||||||
|
|
5
CHANGES
5
CHANGES
|
@ -3,8 +3,9 @@ Changelog for hydra
|
||||||
|
|
||||||
Release 8.9-dev
|
Release 8.9-dev
|
||||||
* your patch? :)
|
* your patch? :)
|
||||||
* Fix svn module memory leaks
|
* Fixed svn module memory leaks
|
||||||
* Fix rtsp module potential buffer overflow
|
* Fixed rtsp module potential buffer overflow
|
||||||
|
* Added memcached module
|
||||||
|
|
||||||
|
|
||||||
Release 8.9.1
|
Release 8.9.1
|
||||||
|
|
20
Makefile.am
20
Makefile.am
|
@ -12,11 +12,11 @@ DESTDIR ?=
|
||||||
SRC = hydra-vnc.c hydra-pcnfs.c hydra-rexec.c hydra-nntp.c hydra-socks5.c \
|
SRC = hydra-vnc.c hydra-pcnfs.c hydra-rexec.c hydra-nntp.c hydra-socks5.c \
|
||||||
hydra-telnet.c hydra-cisco.c hydra-http.c hydra-ftp.c hydra-imap.c \
|
hydra-telnet.c hydra-cisco.c hydra-http.c hydra-ftp.c hydra-imap.c \
|
||||||
hydra-pop3.c hydra-smb.c hydra-icq.c hydra-cisco-enable.c hydra-ldap.c \
|
hydra-pop3.c hydra-smb.c hydra-icq.c hydra-cisco-enable.c hydra-ldap.c \
|
||||||
hydra-mysql.c hydra-mssql.c hydra-xmpp.c hydra-http-proxy-urlenum.c \
|
hydra-memcached.c hydra-mysql.c hydra-mssql.c hydra-xmpp.c \
|
||||||
hydra-snmp.c hydra-cvs.c hydra-smtp.c hydra-smtp-enum.c hydra-sapr3.c \
|
hydra-http-proxy-urlenum.c hydra-snmp.c hydra-cvs.c hydra-smtp.c \
|
||||||
hydra-ssh.c hydra-sshkey.c hydra-teamspeak.c hydra-postgres.c \
|
hydra-smtp-enum.c hydra-sapr3.c hydra-ssh.c hydra-sshkey.c hydra-teamspeak.c \
|
||||||
hydra-rsh.c hydra-rlogin.c hydra-oracle-listener.c hydra-svn.c \
|
hydra-postgres.c hydra-rsh.c hydra-rlogin.c hydra-oracle-listener.c \
|
||||||
hydra-pcanywhere.c hydra-sip.c hydra-oracle.c hydra-vmauthd.c \
|
hydra-svn.c hydra-pcanywhere.c hydra-sip.c hydra-oracle.c hydra-vmauthd.c \
|
||||||
hydra-asterisk.c hydra-firebird.c hydra-afp.c hydra-ncp.c hydra-rdp.c \
|
hydra-asterisk.c hydra-firebird.c hydra-afp.c hydra-ncp.c hydra-rdp.c \
|
||||||
hydra-oracle-sid.c hydra-http-proxy.c hydra-http-form.c hydra-irc.c \
|
hydra-oracle-sid.c hydra-http-proxy.c hydra-http-form.c hydra-irc.c \
|
||||||
hydra-s7-300.c hydra-redis.c hydra-adam6500.c hydra-rtsp.c \
|
hydra-s7-300.c hydra-redis.c hydra-adam6500.c hydra-rtsp.c \
|
||||||
|
@ -25,11 +25,11 @@ SRC = hydra-vnc.c hydra-pcnfs.c hydra-rexec.c hydra-nntp.c hydra-socks5.c \
|
||||||
OBJ = hydra-vnc.o hydra-pcnfs.o hydra-rexec.o hydra-nntp.o hydra-socks5.o \
|
OBJ = hydra-vnc.o hydra-pcnfs.o hydra-rexec.o hydra-nntp.o hydra-socks5.o \
|
||||||
hydra-telnet.o hydra-cisco.o hydra-http.o hydra-ftp.o hydra-imap.o \
|
hydra-telnet.o hydra-cisco.o hydra-http.o hydra-ftp.o hydra-imap.o \
|
||||||
hydra-pop3.o hydra-smb.o hydra-icq.o hydra-cisco-enable.o hydra-ldap.o \
|
hydra-pop3.o hydra-smb.o hydra-icq.o hydra-cisco-enable.o hydra-ldap.o \
|
||||||
hydra-mysql.o hydra-mssql.o hydra-xmpp.o hydra-http-proxy-urlenum.o \
|
hydra-memcached.o hydra-mysql.o hydra-mssql.o hydra-xmpp.o \
|
||||||
hydra-snmp.o hydra-cvs.o hydra-smtp.o hydra-smtp-enum.o hydra-sapr3.o \
|
hydra-http-proxy-urlenum.o hydra-snmp.o hydra-cvs.o hydra-smtp.o \
|
||||||
hydra-ssh.o hydra-sshkey.o hydra-teamspeak.o hydra-postgres.o \
|
hydra-smtp-enum.o hydra-sapr3.o hydra-ssh.o hydra-sshkey.o hydra-teamspeak.o \
|
||||||
hydra-rsh.o hydra-rlogin.o hydra-oracle-listener.o hydra-svn.o \
|
hydra-postgres.o hydra-rsh.o hydra-rlogin.o hydra-oracle-listener.o \
|
||||||
hydra-pcanywhere.o hydra-sip.o hydra-oracle-sid.o hydra-oracle.o \
|
hydra-svn.o hydra-pcanywhere.o hydra-sip.o hydra-oracle-sid.o hydra-oracle.o \
|
||||||
hydra-vmauthd.o hydra-asterisk.o hydra-firebird.o hydra-afp.o \
|
hydra-vmauthd.o hydra-asterisk.o hydra-firebird.o hydra-afp.o \
|
||||||
hydra-ncp.o hydra-http-proxy.o hydra-http-form.o hydra-irc.o \
|
hydra-ncp.o hydra-http-proxy.o hydra-http-form.o hydra-irc.o \
|
||||||
hydra-redis.o hydra-rdp.o hydra-s7-300.c hydra-adam6500.o hydra-rtsp.o \
|
hydra-redis.o hydra-rdp.o hydra-s7-300.c hydra-adam6500.o hydra-rtsp.o \
|
||||||
|
|
65
configure
vendored
65
configure
vendored
|
@ -48,6 +48,8 @@ FIREBIRD_PATH=""
|
||||||
FIREBIRD_IPATH=""
|
FIREBIRD_IPATH=""
|
||||||
MYSQL_PATH=""
|
MYSQL_PATH=""
|
||||||
MYSQL_IPATH=""
|
MYSQL_IPATH=""
|
||||||
|
MCACHED_PATH=""
|
||||||
|
MCACHED_IPATH=""
|
||||||
AFP_PATH=""
|
AFP_PATH=""
|
||||||
AFP_IPATH=""
|
AFP_IPATH=""
|
||||||
NCP_PATH=""
|
NCP_PATH=""
|
||||||
|
@ -940,6 +942,55 @@ if [ "X" = "X$ORACLE_PATH" -o "X" = "X$ORACLE_IPATH" ]; then
|
||||||
ORACLE_IPATH=""
|
ORACLE_IPATH=""
|
||||||
fi
|
fi
|
||||||
|
|
||||||
|
echo "Checking for Memcached (libmemcached.so, memcached.h) ..."
|
||||||
|
|
||||||
|
for i in $LIBDIRS ; do
|
||||||
|
if [ "X" = "X$MCACHED_PATH" ]; then
|
||||||
|
if [ -f "$i/libmemcached.so" -o -f "$i/libmemcached.dylib" -o -f "$i/libmemcached.a" ]; then
|
||||||
|
MCACHED_PATH="$i"
|
||||||
|
fi
|
||||||
|
fi
|
||||||
|
if [ "X" = "X$MCACHED_PATH" ]; then
|
||||||
|
TMP_LIB=`/bin/ls $i/libmemcached.so* 2> /dev/null | grep memcached`
|
||||||
|
if [ -n "$TMP_LIB" ]; then
|
||||||
|
MCACHED_PATH="$i"
|
||||||
|
fi
|
||||||
|
fi
|
||||||
|
if [ "X" = "X$MCACHED_PATH" ]; then
|
||||||
|
TMP_LIB=`/bin/ls $i/libmemcached.dll* 2> /dev/null | grep memcached`
|
||||||
|
if [ -n "$TMP_LIB" ]; then
|
||||||
|
MCACHED_PATH="$i"
|
||||||
|
fi
|
||||||
|
fi
|
||||||
|
done
|
||||||
|
|
||||||
|
MCACHED_IPATH=
|
||||||
|
for i in $INCDIRS ; do
|
||||||
|
if [ "X" = "X$MCACHED_IPATH" ]; then
|
||||||
|
if [ -f "$i/memcached.h" ]; then
|
||||||
|
MCACHED_IPATH="$i"
|
||||||
|
fi
|
||||||
|
if [ -f "$i/libmemcached/memcached.h" ]; then
|
||||||
|
MCACHED_IPATH="$i/libmemcached"
|
||||||
|
fi
|
||||||
|
if [ -f "$i/libmemcached-1.0/memcached.h" ]; then
|
||||||
|
MCACHED_IPATH="$i/libmemcached-1.0"
|
||||||
|
fi
|
||||||
|
fi
|
||||||
|
done
|
||||||
|
|
||||||
|
if [ "X" != "X$DEBUG" ]; then
|
||||||
|
echo DEBUG: MCACHED_PATH=$MCACHED_PATH/libmemcached
|
||||||
|
echo DEBUG: MCACHED_IPATH=$MCACHED_IPATH/memcached.h
|
||||||
|
fi
|
||||||
|
if [ -n "$MCACHED_PATH" -a -n "$MCACHED_IPATH" ]; then
|
||||||
|
echo " ... found"
|
||||||
|
fi
|
||||||
|
if [ "X" = "X$MCACHED_PATH" -o "X" = "X$MCACHED_IPATH" ]; then
|
||||||
|
echo " ... NOT found, module memcached disabled"
|
||||||
|
MCACHED_PATH=""
|
||||||
|
MCACHED_IPATH=""
|
||||||
|
fi
|
||||||
|
|
||||||
if [ "X" = "X$XHYDRA_SUPPORT" ]; then
|
if [ "X" = "X$XHYDRA_SUPPORT" ]; then
|
||||||
echo "Checking for GUI req's (pkg-config, gtk+-2.0) ..."
|
echo "Checking for GUI req's (pkg-config, gtk+-2.0) ..."
|
||||||
|
@ -1034,7 +1085,7 @@ XLIBS=""
|
||||||
XLIBPATHS=""
|
XLIBPATHS=""
|
||||||
XIPATHS=""
|
XIPATHS=""
|
||||||
|
|
||||||
if [ -n "$FIREBIRD_PATH" -o -n "$PCRE_PATH" -o -n "$IDN_PATH" -o -n "$SSL_PATH" -o -n "$CRYPTO_PATH" -o -n "$NSL_PATH" -o -n "$SOCKET_PATH" -o -n "$RESOLV_PATH" -o -n "$SAPR3_PATH" -o -n "$SSH_PATH" -o -n "$POSTGRES_PATH" -o -n "$SVN_PATH" -o -n "$NCP_PATH" -o -n "$CURSES_PATH" -o -n "$ORACLE_PATH" -o -n "$AFP_PATH" -o -n "$MYSQL_PATH" ]; then
|
if [ -n "$FIREBIRD_PATH" -o -n "$PCRE_PATH" -o -n "$IDN_PATH" -o -n "$SSL_PATH" -o -n "$CRYPTO_PATH" -o -n "$NSL_PATH" -o -n "$SOCKET_PATH" -o -n "$RESOLV_PATH" -o -n "$SAPR3_PATH" -o -n "$SSH_PATH" -o -n "$POSTGRES_PATH" -o -n "$SVN_PATH" -o -n "$NCP_PATH" -o -n "$CURSES_PATH" -o -n "$ORACLE_PATH" -o -n "$AFP_PATH" -o -n "$MYSQL_PATH" -o -n "$MCACHED_PATH" ]; then
|
||||||
XLIBPATHS="-L/usr/lib -L/usr/local/lib -L/lib"
|
XLIBPATHS="-L/usr/lib -L/usr/local/lib -L/lib"
|
||||||
fi
|
fi
|
||||||
if [ -n "$MYSQL_IPATH" ]; then
|
if [ -n "$MYSQL_IPATH" ]; then
|
||||||
|
@ -1098,10 +1149,13 @@ fi
|
||||||
if [ -n "$HAVE_GCRYPT" ]; then
|
if [ -n "$HAVE_GCRYPT" ]; then
|
||||||
XDEFINES="$XDEFINES -DHAVE_GCRYPT"
|
XDEFINES="$XDEFINES -DHAVE_GCRYPT"
|
||||||
fi
|
fi
|
||||||
|
if [ -n "$MCACHED_PATH" ]; then
|
||||||
|
XDEFINES="$XDEFINES -DLIBMCACHED"
|
||||||
|
fi
|
||||||
|
|
||||||
|
|
||||||
OLDPATH=""
|
OLDPATH=""
|
||||||
for i in $SSL_PATH $FIREBIRD_PATH $WORACLE_LIB_PATH $PCRE_PATH $IDN_PATH $CRYPTO_PATH $SSH_PATH $NSL_PATH $SOCKET_PATH $RESOLV_PATH $SAPR3_PATH $POSTGRES_PATH $SVN_PATH $NCP_PATH $CURSES_PATH $ORACLE_PATH $AFP_PATH $MYSQL_PATH; do
|
for i in $SSL_PATH $FIREBIRD_PATH $WORACLE_LIB_PATH $PCRE_PATH $IDN_PATH $CRYPTO_PATH $SSH_PATH $NSL_PATH $SOCKET_PATH $RESOLV_PATH $SAPR3_PATH $POSTGRES_PATH $SVN_PATH $NCP_PATH $CURSES_PATH $ORACLE_PATH $AFP_PATH $MYSQL_PATH $MCACHED_PATH; do
|
||||||
if [ "$OLDPATH" = "$i" ]; then
|
if [ "$OLDPATH" = "$i" ]; then
|
||||||
OLDPATH="$i"
|
OLDPATH="$i"
|
||||||
else
|
else
|
||||||
|
@ -1154,6 +1208,9 @@ fi
|
||||||
if [ -n "$ORACLE_IPATH" ]; then
|
if [ -n "$ORACLE_IPATH" ]; then
|
||||||
XIPATHS="$XIPATHS -I$ORACLE_IPATH"
|
XIPATHS="$XIPATHS -I$ORACLE_IPATH"
|
||||||
fi
|
fi
|
||||||
|
if [ -n "$MCACHED_IPATH" ]; then
|
||||||
|
XIPATHS="$XIPATHS -I$MCACHED_IPATH"
|
||||||
|
fi
|
||||||
if [ -n "$HAVE_GCRYPT" ]; then
|
if [ -n "$HAVE_GCRYPT" ]; then
|
||||||
XLIBS="$XLIBS -lgcrypt"
|
XLIBS="$XLIBS -lgcrypt"
|
||||||
fi
|
fi
|
||||||
|
@ -1217,7 +1274,9 @@ fi
|
||||||
if [ -n "$RESOLV_PATH" ]; then
|
if [ -n "$RESOLV_PATH" ]; then
|
||||||
XLIBS="$XLIBS -lresolv"
|
XLIBS="$XLIBS -lresolv"
|
||||||
fi
|
fi
|
||||||
|
if [ -n "$MCACHED_PATH" ]; then
|
||||||
|
XLIBS="$XLIBS -lmemcached"
|
||||||
|
fi
|
||||||
if [ -d /usr/kerberos/include ]; then
|
if [ -d /usr/kerberos/include ]; then
|
||||||
XIPATHS="$XIPATHS -I/usr/kerberos/include"
|
XIPATHS="$XIPATHS -I/usr/kerberos/include"
|
||||||
fi
|
fi
|
||||||
|
|
|
@ -248,6 +248,7 @@ GtkWidget *create_wndMain(void) {
|
||||||
cmbProtocol_items = g_list_append(cmbProtocol_items, (gpointer) "ldap3");
|
cmbProtocol_items = g_list_append(cmbProtocol_items, (gpointer) "ldap3");
|
||||||
cmbProtocol_items = g_list_append(cmbProtocol_items, (gpointer) "ldap3-crammd5");
|
cmbProtocol_items = g_list_append(cmbProtocol_items, (gpointer) "ldap3-crammd5");
|
||||||
cmbProtocol_items = g_list_append(cmbProtocol_items, (gpointer) "ldap3-digestmd5");
|
cmbProtocol_items = g_list_append(cmbProtocol_items, (gpointer) "ldap3-digestmd5");
|
||||||
|
cmbProtocol_items = g_list_append(cmbProtocol_items, (gpointer) "memcached");
|
||||||
cmbProtocol_items = g_list_append(cmbProtocol_items, (gpointer) "mssql");
|
cmbProtocol_items = g_list_append(cmbProtocol_items, (gpointer) "mssql");
|
||||||
cmbProtocol_items = g_list_append(cmbProtocol_items, (gpointer) "mysql");
|
cmbProtocol_items = g_list_append(cmbProtocol_items, (gpointer) "mysql");
|
||||||
cmbProtocol_items = g_list_append(cmbProtocol_items, (gpointer) "ncp");
|
cmbProtocol_items = g_list_append(cmbProtocol_items, (gpointer) "ncp");
|
||||||
|
|
189
hydra-memcached.c
Normal file
189
hydra-memcached.c
Normal file
|
@ -0,0 +1,189 @@
|
||||||
|
//This plugin was written by <david dot maciejak at gmail D O T com>
|
||||||
|
//Tested on memcached 1.5.6-0ubuntu1
|
||||||
|
|
||||||
|
#ifdef LIBMCACHED
|
||||||
|
#include <libmemcached/memcached.h>
|
||||||
|
#endif
|
||||||
|
|
||||||
|
#include "hydra-mod.h"
|
||||||
|
|
||||||
|
#ifndef LIBMCACHED
|
||||||
|
void dummy_mcached() {
|
||||||
|
printf("\n");
|
||||||
|
}
|
||||||
|
#else
|
||||||
|
|
||||||
|
extern int32_t hydra_data_ready_timed(int32_t socket, long sec, long usec);
|
||||||
|
|
||||||
|
extern char *HYDRA_EXIT;
|
||||||
|
char *buf;
|
||||||
|
|
||||||
|
int mcached_send_com_quit(int32_t sock) {
|
||||||
|
char *com_quit = "quit\r\n";
|
||||||
|
|
||||||
|
if (hydra_send(sock, com_quit, strlen(com_quit), 0) < 0)
|
||||||
|
return 1;
|
||||||
|
return 0;
|
||||||
|
}
|
||||||
|
|
||||||
|
int mcached_send_com_version(int32_t sock) {
|
||||||
|
char *com_version = "version\r\n";
|
||||||
|
|
||||||
|
if (hydra_send(sock, com_version, strlen(com_version), 0) < 0)
|
||||||
|
return 1;
|
||||||
|
return 0;
|
||||||
|
}
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
int32_t start_mcached(int32_t s, char *ip, int32_t port, unsigned char options, char *miscptr, FILE * fp) {
|
||||||
|
char *empty = "";
|
||||||
|
char *login, *pass;
|
||||||
|
|
||||||
|
memcached_server_st *servers = NULL;
|
||||||
|
memcached_return_t rc;
|
||||||
|
memcached_st *cache;
|
||||||
|
|
||||||
|
if (strlen(login = hydra_get_next_login()) == 0)
|
||||||
|
login = empty;
|
||||||
|
if (strlen(pass = hydra_get_next_password()) == 0)
|
||||||
|
pass = empty;
|
||||||
|
|
||||||
|
cache = memcached_create(NULL);
|
||||||
|
|
||||||
|
rc = memcached_set_sasl_auth_data(cache, login, pass);
|
||||||
|
if (rc != MEMCACHED_SUCCESS) {
|
||||||
|
if (verbose)
|
||||||
|
hydra_report(stderr, "[ERROR] Couldn't setup SASL auth: %s\n", memcached_strerror(cache, rc));
|
||||||
|
memcached_free(cache);
|
||||||
|
return 4;
|
||||||
|
}
|
||||||
|
|
||||||
|
rc = memcached_behavior_set(cache, MEMCACHED_BEHAVIOR_BINARY_PROTOCOL, 1);
|
||||||
|
if (rc != MEMCACHED_SUCCESS) {
|
||||||
|
if (verbose)
|
||||||
|
hydra_report(stderr, "[ERROR] Couldn't use the binary protocol: %s\n", memcached_strerror(cache, rc));
|
||||||
|
memcached_destroy_sasl_auth_data(cache);
|
||||||
|
memcached_free(cache);
|
||||||
|
return 4;
|
||||||
|
}
|
||||||
|
rc = memcached_behavior_set(cache, MEMCACHED_BEHAVIOR_CONNECT_TIMEOUT, 10000);
|
||||||
|
if (rc != MEMCACHED_SUCCESS) {
|
||||||
|
if (verbose)
|
||||||
|
hydra_report(stderr, "[ERROR] Couldn't set the connect timeout: %s\n", memcached_strerror(cache, rc));
|
||||||
|
memcached_destroy_sasl_auth_data(cache);
|
||||||
|
memcached_free(cache);
|
||||||
|
return 4;
|
||||||
|
}
|
||||||
|
|
||||||
|
servers = memcached_server_list_append(servers, hydra_address2string(ip), port, &rc);
|
||||||
|
rc = memcached_server_push(cache, servers);
|
||||||
|
if (rc != MEMCACHED_SUCCESS) {
|
||||||
|
if (verbose)
|
||||||
|
hydra_report(stderr, "[ERROR] Couldn't add server: %s\n", memcached_strerror(cache, rc));
|
||||||
|
memcached_destroy_sasl_auth_data(cache);
|
||||||
|
memcached_free(cache);
|
||||||
|
return 4;
|
||||||
|
}
|
||||||
|
|
||||||
|
rc = memcached_stat_execute(cache, "", NULL, NULL);
|
||||||
|
if (rc != MEMCACHED_SUCCESS) {
|
||||||
|
if (verbose)
|
||||||
|
hydra_report(stderr, "[ERROR] Couldn't get server stats: %s\n", memcached_strerror(cache, rc));
|
||||||
|
memcached_destroy_sasl_auth_data(cache);
|
||||||
|
memcached_free(cache);
|
||||||
|
hydra_completed_pair_skip();
|
||||||
|
if (memcmp(hydra_get_next_pair(), &HYDRA_EXIT, sizeof(HYDRA_EXIT)) == 0) {
|
||||||
|
return 4;
|
||||||
|
}
|
||||||
|
return 3;
|
||||||
|
}
|
||||||
|
|
||||||
|
memcached_destroy_sasl_auth_data(cache);
|
||||||
|
memcached_free(cache);
|
||||||
|
|
||||||
|
hydra_report_found_host(port, ip, "memcached", fp);
|
||||||
|
hydra_completed_pair_found();
|
||||||
|
if (memcmp(hydra_get_next_pair(), &HYDRA_EXIT, sizeof(HYDRA_EXIT)) == 0)
|
||||||
|
return 4;
|
||||||
|
|
||||||
|
return 3;
|
||||||
|
}
|
||||||
|
|
||||||
|
void service_mcached(char *ip, int32_t sp, unsigned char options, char *miscptr, FILE * fp, int32_t port, char *hostname) {
|
||||||
|
int32_t run = 1, next_run = 1, sock = -1;
|
||||||
|
int32_t myport = PORT_MCACHED;
|
||||||
|
|
||||||
|
hydra_register_socket(sp);
|
||||||
|
|
||||||
|
while (1) {
|
||||||
|
if (memcmp(hydra_get_next_pair(), &HYDRA_EXIT, sizeof(HYDRA_EXIT)) == 0)
|
||||||
|
return;
|
||||||
|
|
||||||
|
switch (run) {
|
||||||
|
case 1: /* connect and service init function */
|
||||||
|
if (sock >= 0)
|
||||||
|
sock = hydra_disconnect(sock);
|
||||||
|
|
||||||
|
if (port != 0)
|
||||||
|
myport = port;
|
||||||
|
|
||||||
|
sock = hydra_connect_tcp(ip, myport);
|
||||||
|
port = myport;
|
||||||
|
|
||||||
|
if (sock < 0) {
|
||||||
|
if (verbose || debug)
|
||||||
|
hydra_report(stderr, "[ERROR] Child with pid %d terminating, can not connect\n", (int32_t) getpid());
|
||||||
|
hydra_child_exit(1);
|
||||||
|
}
|
||||||
|
|
||||||
|
if (mcached_send_com_version(sock)) {
|
||||||
|
return;
|
||||||
|
}
|
||||||
|
if (hydra_data_ready_timed(sock, 0, 1000) > 0) {
|
||||||
|
buf = hydra_receive_line(sock);
|
||||||
|
if (strstr(buf, "VERSION ")) {
|
||||||
|
hydra_report_found_host(port, ip, "memcached", fp);
|
||||||
|
free(buf);
|
||||||
|
mcached_send_com_quit(sock);
|
||||||
|
if (sock >= 0)
|
||||||
|
sock = hydra_disconnect(sock);
|
||||||
|
hydra_report(stderr, "[ERROR] Memcached server does not need any authentication\n");
|
||||||
|
return;
|
||||||
|
}
|
||||||
|
free(buf);
|
||||||
|
}
|
||||||
|
sock = hydra_disconnect(sock);
|
||||||
|
//authentication is required, let's use libmemcached
|
||||||
|
next_run = 2;
|
||||||
|
break;
|
||||||
|
case 2:
|
||||||
|
next_run = start_mcached(sock, ip, port, options, miscptr, fp);
|
||||||
|
break;
|
||||||
|
case 3:
|
||||||
|
hydra_child_exit(0);
|
||||||
|
return;
|
||||||
|
default:
|
||||||
|
if (!verbose)
|
||||||
|
hydra_report(stderr, "[ERROR] Caught unknown return code, try verbose option for more details\n");
|
||||||
|
hydra_child_exit(2);
|
||||||
|
}
|
||||||
|
run = next_run;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
#endif
|
||||||
|
|
||||||
|
int32_t service_mcached_init(char *ip, int32_t sp, unsigned char options, char *miscptr, FILE * fp, int32_t port, char *hostname) {
|
||||||
|
// called before the childrens are forked off, so this is the function
|
||||||
|
// which should be filled if initial connections and service setup has to be
|
||||||
|
// performed once only.
|
||||||
|
//
|
||||||
|
// fill if needed.
|
||||||
|
//
|
||||||
|
// return codes:
|
||||||
|
// 0 all OK
|
||||||
|
// -1 error, hydra will exit, so print a good error message here
|
||||||
|
|
||||||
|
return 0;
|
||||||
|
}
|
26
hydra.c
26
hydra.c
|
@ -146,7 +146,10 @@ extern int32_t service_oracle_init(char *ip, int32_t sp, unsigned char options,
|
||||||
extern void service_radmin2(char *ip, int32_t sp, unsigned char options, char *miscptr, FILE * fp, int32_t port, char *hostname);
|
extern void service_radmin2(char *ip, int32_t sp, unsigned char options, char *miscptr, FILE * fp, int32_t port, char *hostname);
|
||||||
extern int32_t service_radmin2_init(char *ip, int32_t sp, unsigned char options, char *miscptr, FILE * fp, int32_t port, char *hostname);
|
extern int32_t service_radmin2_init(char *ip, int32_t sp, unsigned char options, char *miscptr, FILE * fp, int32_t port, char *hostname);
|
||||||
#endif
|
#endif
|
||||||
|
#ifdef LIBMCACHED
|
||||||
|
extern void service_mcached(char *ip, int32_t sp, unsigned char options, char *miscptr, FILE * fp, int32_t port, char *hostname);
|
||||||
|
extern int32_t service_mcached_init(char *ip, int32_t sp, unsigned char options, char *miscptr, FILE * fp, int32_t port, char *hostname);
|
||||||
|
#endif
|
||||||
|
|
||||||
extern int32_t service_adam6500_init(char *ip, int32_t sp, unsigned char options, char *miscptr, FILE * fp, int32_t port, char *hostname);
|
extern int32_t service_adam6500_init(char *ip, int32_t sp, unsigned char options, char *miscptr, FILE * fp, int32_t port, char *hostname);
|
||||||
extern int32_t service_cisco_init(char *ip, int32_t sp, unsigned char options, char *miscptr, FILE * fp, int32_t port, char *hostname);
|
extern int32_t service_cisco_init(char *ip, int32_t sp, unsigned char options, char *miscptr, FILE * fp, int32_t port, char *hostname);
|
||||||
|
@ -186,7 +189,7 @@ extern int32_t service_rpcap_init(char *ip, int32_t sp, unsigned char options, c
|
||||||
|
|
||||||
// ADD NEW SERVICES HERE
|
// ADD NEW SERVICES HERE
|
||||||
char *SERVICES =
|
char *SERVICES =
|
||||||
"adam6500 asterisk afp cisco cisco-enable cvs firebird ftp[s] http[s]-{head|get|post} http[s]-{get|post}-form http-proxy http-proxy-urlenum icq imap[s] irc ldap2[s] ldap3[-{cram|digest}md5][s] mssql mysql ncp nntp oracle oracle-listener oracle-sid pcanywhere pcnfs pop3[s] postgres radmin2 rdp redis rexec rlogin rpcap rsh rtsp s7-300 sapr3 sip smb smtp[s] smtp-enum snmp socks5 ssh sshkey svn teamspeak telnet[s] vmauthd vnc xmpp";
|
"adam6500 asterisk afp cisco cisco-enable cvs firebird ftp[s] http[s]-{head|get|post} http[s]-{get|post}-form http-proxy http-proxy-urlenum icq imap[s] irc ldap2[s] ldap3[-{cram|digest}md5][s] memcached mssql mysql ncp nntp oracle oracle-listener oracle-sid pcanywhere pcnfs pop3[s] postgres radmin2 rdp redis rexec rlogin rpcap rsh rtsp s7-300 sapr3 sip smb smtp[s] smtp-enum snmp socks5 ssh sshkey svn teamspeak telnet[s] vmauthd vnc xmpp";
|
||||||
|
|
||||||
#define MAXBUF 520
|
#define MAXBUF 520
|
||||||
#define MAXLINESIZE ( ( MAXBUF / 2 ) - 4 )
|
#define MAXLINESIZE ( ( MAXBUF / 2 ) - 4 )
|
||||||
|
@ -381,6 +384,9 @@ static const struct {
|
||||||
{ "ldap3", service_ldap_init, service_ldap3, usage_ldap },
|
{ "ldap3", service_ldap_init, service_ldap3, usage_ldap },
|
||||||
{ "ldap3-crammd5", service_ldap_init, service_ldap3_cram_md5, usage_ldap },
|
{ "ldap3-crammd5", service_ldap_init, service_ldap3_cram_md5, usage_ldap },
|
||||||
{ "ldap3-digestmd5", service_ldap_init, service_ldap3_digest_md5, usage_ldap },
|
{ "ldap3-digestmd5", service_ldap_init, service_ldap3_digest_md5, usage_ldap },
|
||||||
|
#ifdef LIBMCACHED
|
||||||
|
{"memcached", service_mcached_init, service_mcached, NULL},
|
||||||
|
#endif
|
||||||
SERVICE(mssql),
|
SERVICE(mssql),
|
||||||
#ifdef HAVE_MATH_H
|
#ifdef HAVE_MATH_H
|
||||||
SERVICE3("mysql", mysql),
|
SERVICE3("mysql", mysql),
|
||||||
|
@ -1239,6 +1245,7 @@ int32_t hydra_lookup_port(char *service) {
|
||||||
{"oracle-listener", PORT_ORACLE, PORT_ORACLE_SSL},
|
{"oracle-listener", PORT_ORACLE, PORT_ORACLE_SSL},
|
||||||
{"oracle-sid", PORT_ORACLE, PORT_ORACLE_SSL},
|
{"oracle-sid", PORT_ORACLE, PORT_ORACLE_SSL},
|
||||||
{"oracle", PORT_ORACLE, PORT_ORACLE_SSL},
|
{"oracle", PORT_ORACLE, PORT_ORACLE_SSL},
|
||||||
|
{"memcached", PORT_MCACHED, PORT_MCACHED_SSL},
|
||||||
{"mssql", PORT_MSSQL, PORT_MSSQL_SSL},
|
{"mssql", PORT_MSSQL, PORT_MSSQL_SSL},
|
||||||
{"mysql", PORT_MYSQL, PORT_MYSQL_SSL},
|
{"mysql", PORT_MYSQL, PORT_MYSQL_SSL},
|
||||||
{"postgres", PORT_POSTGRES, PORT_POSTGRES_SSL},
|
{"postgres", PORT_POSTGRES, PORT_POSTGRES_SSL},
|
||||||
|
@ -2072,6 +2079,10 @@ int main(int argc, char *argv[]) {
|
||||||
SERVICES = hydra_string_replace(SERVICES, "firebird ", "");
|
SERVICES = hydra_string_replace(SERVICES, "firebird ", "");
|
||||||
strcat(unsupported, "firebird ");
|
strcat(unsupported, "firebird ");
|
||||||
#endif
|
#endif
|
||||||
|
#ifndef LIBMCACHED
|
||||||
|
SERVICES = hydra_string_replace(SERVICES, "memcached ", "");
|
||||||
|
strcat(unsupported, "memcached ");
|
||||||
|
#endif
|
||||||
#ifndef LIBMYSQLCLIENT
|
#ifndef LIBMYSQLCLIENT
|
||||||
SERVICES = hydra_string_replace(SERVICES, "mysql ", "mysql(v4) ");
|
SERVICES = hydra_string_replace(SERVICES, "mysql ", "mysql(v4) ");
|
||||||
strcat(unsupported, "mysql5 ");
|
strcat(unsupported, "mysql5 ");
|
||||||
|
@ -2106,6 +2117,7 @@ int main(int argc, char *argv[]) {
|
||||||
SERVICES = hydra_string_replace(SERVICES, "svn ", "");
|
SERVICES = hydra_string_replace(SERVICES, "svn ", "");
|
||||||
strcat(unsupported, "svn ");
|
strcat(unsupported, "svn ");
|
||||||
#endif
|
#endif
|
||||||
|
|
||||||
#ifndef LIBOPENSSL
|
#ifndef LIBOPENSSL
|
||||||
// for ftps
|
// for ftps
|
||||||
SERVICES = hydra_string_replace(SERVICES, "ftp[s]", "ftp");
|
SERVICES = hydra_string_replace(SERVICES, "ftp[s]", "ftp");
|
||||||
|
@ -2527,7 +2539,7 @@ int main(int argc, char *argv[]) {
|
||||||
if (strcmp(hydra_options.service, "afp") == 0 || strcmp(hydra_options.service, "firebird") == 0 || strncmp(hydra_options.service, "mysql", 5) == 0 ||
|
if (strcmp(hydra_options.service, "afp") == 0 || strcmp(hydra_options.service, "firebird") == 0 || strncmp(hydra_options.service, "mysql", 5) == 0 ||
|
||||||
strcmp(hydra_options.service, "ncp") == 0 || strcmp(hydra_options.service, "oracle") == 0 || strcmp(hydra_options.service, "postgres") == 0 ||
|
strcmp(hydra_options.service, "ncp") == 0 || strcmp(hydra_options.service, "oracle") == 0 || strcmp(hydra_options.service, "postgres") == 0 ||
|
||||||
strncmp(hydra_options.service, "ssh", 3) == 0 || strcmp(hydra_options.service, "sshkey") == 0 || strcmp(hydra_options.service, "svn") == 0 ||
|
strncmp(hydra_options.service, "ssh", 3) == 0 || strcmp(hydra_options.service, "sshkey") == 0 || strcmp(hydra_options.service, "svn") == 0 ||
|
||||||
strcmp(hydra_options.service, "sapr3") == 0) {
|
strcmp(hydra_options.service, "sapr3") == 0 || strcmp(hydra_options.service, "memcached") == 0) {
|
||||||
fprintf(stderr, "[WARNING] module %s does not support HYDRA_PROXY* !\n", hydra_options.service);
|
fprintf(stderr, "[WARNING] module %s does not support HYDRA_PROXY* !\n", hydra_options.service);
|
||||||
proxy_string = NULL;
|
proxy_string = NULL;
|
||||||
}
|
}
|
||||||
|
@ -2604,6 +2616,13 @@ int main(int argc, char *argv[]) {
|
||||||
fprintf(stderr, "[WARNING] The icq module is not working with the modern protocol version! (somebody else will need to fix this as I don't care for icq)\n");
|
fprintf(stderr, "[WARNING] The icq module is not working with the modern protocol version! (somebody else will need to fix this as I don't care for icq)\n");
|
||||||
i = 1;
|
i = 1;
|
||||||
}
|
}
|
||||||
|
if (strcmp(hydra_options.service, "memcached") == 0)
|
||||||
|
#ifdef LIBMCACHED
|
||||||
|
i = 1;
|
||||||
|
#else
|
||||||
|
bail("Compiled without LIBMCACHED support, module not available!");
|
||||||
|
#endif
|
||||||
|
|
||||||
if (strcmp(hydra_options.service, "mysql") == 0) {
|
if (strcmp(hydra_options.service, "mysql") == 0) {
|
||||||
i = 1;
|
i = 1;
|
||||||
if (hydra_options.tasks > 4) {
|
if (hydra_options.tasks > 4) {
|
||||||
|
@ -2660,6 +2679,7 @@ int main(int argc, char *argv[]) {
|
||||||
#else
|
#else
|
||||||
bail("Compiled without LIBNCP support, module not available!");
|
bail("Compiled without LIBNCP support, module not available!");
|
||||||
#endif
|
#endif
|
||||||
|
|
||||||
if (strcmp(hydra_options.service, "pcanywhere") == 0)
|
if (strcmp(hydra_options.service, "pcanywhere") == 0)
|
||||||
i = 1;
|
i = 1;
|
||||||
if (strcmp(hydra_options.service, "http-proxy") == 0) {
|
if (strcmp(hydra_options.service, "http-proxy") == 0) {
|
||||||
|
|
2
hydra.h
2
hydra.h
|
@ -144,6 +144,8 @@
|
||||||
#define PORT_RPCAP 2002
|
#define PORT_RPCAP 2002
|
||||||
#define PORT_RPCAP_SSL 2002
|
#define PORT_RPCAP_SSL 2002
|
||||||
#define PORT_RADMIN2 4899
|
#define PORT_RADMIN2 4899
|
||||||
|
#define PORT_MCACHED 11211
|
||||||
|
#define PORT_MCACHED_SSL 11211
|
||||||
|
|
||||||
#define False 0
|
#define False 0
|
||||||
#define True 1
|
#define True 1
|
||||||
|
|
Loading…
Add table
Add a link
Reference in a new issue