Python script made with Paramiko to SSH multiple endpoint and execute commands, upload and download files. Designed for lazy professionals in a hurry to escape client location to catch few coldones.
_____ _ _ _____ _ _
/ ____| | | | | / ____| (_) | |
| (___ ___ ___| | _____| |_| (___ __ _ _ _ _ _ __ _ __ ___| |
\___ \ / _ \ / __| |/ / _ \ __|\___ \ / _` | | | | | '__| '__/ _ \ |
____) | (_) | (__| < __/ |_ ____) | (_| | |_| | | | | | | __/ |
|_____/ \___/ \___|_|\_\___|\__|_____/ \__, |\__,_|_|_| |_| \___|_|
_________________________________________| |________________________
+++++++++++++++++++++++++++++++++++++++++|_|++++++++++++++++++++++++
©2023 masterofbrainstorming
Tool to help loop multiple SSH endpoints with ease.
Created for the breed of lazy auditors
Access, Upload, Dowload, Execute.
Version: 1.0
The script will require pandas, paramiko, argparse and flask in addition to python standard libraries. Script is written using python3.9.
pip install -r requirements.txtpositional arguments:
{ssh,scp} The command to execute (ssh or scp)
optional arguments:
-h, --help show this help message and exit
-d HOST [HOST ...], --destination HOST [HOST ...]
Destination IP address or hostname
-H [HOSTS], --hosts [HOSTS]
File containing IP:port separated by newline, if the port value is missing, default 22
-p [PORT], --port [PORT]
Will overwrite SSH port, default 22
-u [USERNAME], --user [USERNAME]
SSH username
--password [PASSWORD]
SSH password
--rsa [RSA] File location for RSA private key
--enc Add only if the private key requires a password
-e [EXECUTE ...], --execute [EXECUTE ...]
Owerwrite command to be executed
-S, --sudo Execute command with sudo
--up, --upload Files to be uploaded to hosts
--dl, --download Files to be downloaded from hosts
-f FILES [FILES ...], --files FILES [FILES ...]
Files to be downloaded from hosts
-l [LOCATION], --location [LOCATION]
Files to be uploaded or downloaded from hosts
-T [TIMEOUT], --timeout [TIMEOUT]
Timeout for the connection. Default is 1s
-t [THREADS], --threads [THREADS]
Thread pool count for ssh client, default is 8
-L, --log Enable log file, default False
-w, --web Enable webUI, default FalseThe script will require certain parameters in order to work. You must specify:
- positional argument (current implementation has only ssh and scp implentation)
- host or hostfile (go to examples/examples.csv)
- port (either supplied in hostfile or as cmd argument)
- password (either prompted or supplied via cmd) or private key (file destination)
-S, --sudo Execute command with sudo
-T [TIMEOUT], --timeout [TIMEOUT]
Timeout for the connection. Default is 1s
-t [THREADS], --threads [THREADS]
Thread pool count for ssh client, default is 8
-L, --log Enable log file, default False
-w, --web Enable webUI, default False
Using username, password and port:
socketsquirrel.py ssh -d <ip> <ip2> <ip3> -p 2222 -u example --password mypassword
[+] parsing cmd arguments
-> parsing options
[!] port override: 2222
[+] ssh
-> targets: [<ip>, <ip2>, <ip3>]
-> ports: [22, 22]
-> username: example
-> password: mypassword
-> private key: None
--> encrypted: None
-> sudo: None
-> command: pwd
-> timeout: 1
-> threads: 8
-> webui: NoneUsing rsa without passphrase:
socketsquirrel.py ssh -d <ip> <ip2> <ip3> -p 22 -u example --rsaUsing rsa with passphrase:
socketsquirrel.py ssh -d <ip> <ip2> <ip3> -p 22 -u example --rsa --encUsing commands:
socketsquirrel.py ssh -d <ip> <ip2> <ip3> -p 22 -u example --password mypassword -e 'cat /etc/passwd | grep $(whoami)'Using commands with sudo:
socketsquirrel.py ssh -d <ip> <ip2> <ip3> -p 22 -u example --password mypassword -e 'whoami' -SUsing webui to display results:
socketsquirrel.py ssh -d <ip> <ip2> <ip3> -p 22 -u example --password mypassword -e 'whoami' -S -wUsing hosts file:
socketsquirrel.py ssh -H examples/example.csv -u example --password mypasswordUploading files to location /tmp:
socketsquirrel.py scp -d <ip> <ip2> <ip3> -u example --password mypassword -p 22 -f file.txt --up -l '/tmp'Downloading files from location /tmp:
socketsquirrel.py scp -d <ip> <ip2> <ip3> -u example --password mypassword -p 22 -f file.txt --dl -l '/tmp'Made with flask. The webserver will start listening on localhost:5000 and display results
React
Typescript
Django
Laravel
Facebook
Microsoft
Google
Alibaba
D3
Tencent