Skip to content

Tool created for Red Team to test default credentials on SSH and WinRM and then execute scripts with those credentials before the password can be changed by Blue Team.

License

Notifications You must be signed in to change notification settings

RITRedteam/StreetCred

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

27 Commits
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

StreetCred

Tool created for Red Team to test default credentials on SSH and WinRM and then execute scripts with those credentials before the password can be changed by Blue Team.

Setup

The configuration file is located at config/config.yml. This is what will be looked for when the -c option is utilized.

If using the command line, just supply options as noted in the section below.

Using Docker

If you plan on using Docker, a config file must be used.

docker build -t default .
docker run default

Using the command line

go run main.go [options]
OR
go build main.go then ./main [options]

Example command

go run main.go -o output.txt -p password123 -u users.txt -b boxes.txt -s script.ps1

All Options

  -c
      If using a config file, use of this arg will set to bool value to true. Other arguments do not have to be provided.
  -b string
      Path to file containing list of boxes.
  -o string
      Output file name for successful responses. (default "output.txt")
  -p string
      Password to attempt on users and boxes.
  -s string
      Path to a script that should be executed on successful SSH/WinRM logon. If this option is not set, a script will not be executed.
  -u string
      Path to file containing list of users.

About

Tool created for Red Team to test default credentials on SSH and WinRM and then execute scripts with those credentials before the password can be changed by Blue Team.

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published