Metasploit Revealed: Secrets of the Expert Pentester

Secure Shell

SSH is commonly used for remote administration over an encrypted channel. SSH uses TCP port 22 for communication.

Let's go through some of the SSH auxiliaries:

• ssh_enumusers: This auxiliary module probes the SSH server on the target system to get a list of users (configured to work with SSH service) on the remote system.

Its auxiliary module name is auxiliary/scanner/ssh/ssh_enumusers, and you will have to configure the following parameters:

• • RHOSTS: IP address or IP range of the target to be scanned
  • USER_FILE: Path to the file containing a list of usernames

We can see this auxiliary module in the following screenshot:

• ssh_login: This auxiliary module performs a brute-force attack on the target SSH server.

Its auxiliary ...