NCRACK(1) Ncrack NCRACK(1) (NAME) ncrack - (SYNOPSIS) ncrack [] { } (DESCRIPTION) Ncrack . . Ncrack . . Ncrack . (Brute Force) . Ncrack . . " (BUGS)" . Ncrack ( ) . Ncrack . Ncrack . IP . : ftp ssh. . Ncrack $ ncrack 10.0.0.130:21 192.168.1.2:22 Starting Ncrack 0.6 ( http://ncrack.org ) at 2016-01-03 22:10 EEST Discovered credentials for ftp on 10.0.0.130 21/tcp: 10.0.0.130 21/tcp ftp: admin hello1 Discovered credentials for ssh on 192.168.1.2 22/tcp: 192.168.1.2 22/tcp ssh: guest 12345 192.168.1.2 22/tcp ssh: admin money$ Ncrack done: 2 services scanned in 156.03 seconds. Ncrack finished. Ncrack http://nmap.org/ncrack . http://nmap.org/ncrack/man.html . (OPTIONS SUMMARY) Ncrack . . Ncrack 0.7 ( http://ncrack.org ) Usage: ncrack [Options] {target and service specification} TARGET SPECIFICATION: Can pass hostnames, IP addresses, networks, etc. Ex: scanme.nmap.org, microsoft.com/24, 192.168.0.1; 10.0.0-255.1-254 -iX : Input from Nmap's -oX XML output format -iN : Input from Nmap's -oN Normal output format -iL : Input from list of hosts/networks --exclude : Exclude hosts/networks --excludefile : Exclude list from file SERVICE SPECIFICATION: Can pass target specific services in ://target (standard) notation or using -p which will be applied to all hosts in non-standard notation. Service arguments can be specified to be host-specific, type of service-specific (-m) or global (-g). Ex: ssh://10.0.0.10,at=10,cl=30 -m ssh:at=50 -g cd=3000 Ex2: ncrack -p ssh,ftp:3500,25 10.0.0.10 scanme.nmap.org google.com:80,ssl -p : services will be applied to all non-standard notation hosts -m :: options will be applied to all services of this type -g : options will be applied to every service globally Misc options: ssl: enable SSL over this service path : used in modules like HTTP ('=' needs escaping if used) db : used in modules like MongoDB to specify the database domain : used in modules like WinRM to specify the domain TIMING AND PERFORMANCE: Options which take