EN
ENNA

Patator

GPL-2.0

๐Ÿ”‘ Password Attacks ยท Python

Patator is a multi-purpose brute forcer with a modular design and flexible usage. Unlike single-protocol tools, Patator supports attacking FTP, SSH, Telnet, SMTP, HTTP, POP, IMAP, LDAP, SMB, MSSQL, MySQL, PostgreSQL, Oracle, Cisco, VNC, SNMP, DNS, and many other protocols through dedicated modules. Each module exposes protocol-specific options while sharing a common interface for wordlists, threading, logging, and result filtering. Patator's key advantage is its flexible action/condition system - you define what constitutes a successful or failed attempt based on response codes, response content, timing, or any combination, rather than relying on hardcoded success patterns. This makes it adaptable to unusual authentication implementations. It also provides clean output formatting, automatic response-based filtering to reduce noise, and CSV logging for post-analysis.

3.9kstars
828forks
36issues
Updated 10mo ago

Installation

apt (Debian/Ubuntu)

$ sudo apt install patator

pip

$ pip install patator

from source

$ git clone https://github.com/lanjelot/patator && cd patator && pip install -r requirements.txt

Use Cases

  • Brute forcing SSH, FTP, and SMB credentials with custom wordlists
  • Testing HTTP form-based authentication with flexible success/failure conditions
  • Attacking multiple protocol authentication services with a single tool
  • Password spraying across LDAP, MSSQL, and other enterprise services
  • Building custom brute force modules for non-standard authentication protocols

Tags

brute-forcemulti-protocolmodularsshhttpsmbftppentest

More in Password Attacks