Patator
GPL-2.0๐ Password Attacks ยท Python
Patator is a multi-purpose brute forcer with a modular design and flexible usage. Unlike single-protocol tools, Patator supports attacking FTP, SSH, Telnet, SMTP, HTTP, POP, IMAP, LDAP, SMB, MSSQL, MySQL, PostgreSQL, Oracle, Cisco, VNC, SNMP, DNS, and many other protocols through dedicated modules. Each module exposes protocol-specific options while sharing a common interface for wordlists, threading, logging, and result filtering. Patator's key advantage is its flexible action/condition system - you define what constitutes a successful or failed attempt based on response codes, response content, timing, or any combination, rather than relying on hardcoded success patterns. This makes it adaptable to unusual authentication implementations. It also provides clean output formatting, automatic response-based filtering to reduce noise, and CSV logging for post-analysis.
Installation
apt (Debian/Ubuntu)
$ sudo apt install patatorpip
$ pip install patatorfrom source
$ git clone https://github.com/lanjelot/patator && cd patator && pip install -r requirements.txtUse Cases
- Brute forcing SSH, FTP, and SMB credentials with custom wordlists
- Testing HTTP form-based authentication with flexible success/failure conditions
- Attacking multiple protocol authentication services with a single tool
- Password spraying across LDAP, MSSQL, and other enterprise services
- Building custom brute force modules for non-standard authentication protocols
Tags
Details
- Category
- ๐ Password Attacks
- Language
- Python
- Repository
- lanjelot/patator
- License
- GPL-2.0
- Platforms
- ๐งlinux
Links
Alternatives & Comparisons
More in Password Attacks
John the Ripper
CFast password cracker. Supports hundreds of hash types and ciphers. CPU and GPU modes.
Hashcat
CWorld's fastest password recovery tool. GPU-accelerated with support for 300+ hash types.
THC Hydra
CFast online password brute-forcer. Supports 50+ protocols including SSH, FTP, HTTP, SMB, MySQL.
Medusa
CSpeedy, parallel, modular brute-forcer. Supports HTTP, MySQL, SMB, SSH, Telnet, and more.
CeWL
RubyCustom wordlist generator. Spiders a target site and builds password lists from scraped words.
SecLists
ShellThe security tester's companion. Huge collection of wordlists - usernames, passwords, URLs, fuzzing payloads, shells.