brerodrigues / ssh_phishing

Dummy ssh server to grab passwords

ssh_phishing

A python script that creates a dummy ssh server. Send to your friends to get credentials.

To generate a key use: ssh-keygen -t rsa -b 4096 -C '[e-mail]' -f rsa_key

Run with the key file and port as argument: python3 ssh_phishing.py rsa_key 6666

The server

$ python ssh_phishing.py rsa_key 6666
Waiting for connections on port 6666...
Connection from: 127.0.0.1
Waiting for authentication...
Username: m.user
Password: my_pass
------------------------------
Username: m.user
Password: 123456
------------------------------
Username: m.user
Password: 123456

The victim

$ ssh m.user@localhost -p 6666
m.user@localhost's password: 
Permission denied, please try again.
m.user@localhost's password: 
Permission denied, please try again.
m.user@localhost's password: 
m.user@localhost: Permission denied (password).
$

Output is saved to a file in the current working directory called passwords.txt.