【教程】Ubuntu自动查看有哪些用户名与密码相同的账户，并统一修改密码

sudo apt install expect -y
sudo apt install sshpass -y

vim check_user.sh

#!/bin/bash

# 输出文件
OUTPUT_FILE="successful_ssh_logins.txt"

# 清空输出文件
> $OUTPUT_FILE

# 默认值,定义 SSH 主机和端口
SSH_USER="root"
SSH_HOST="127.0.0.1"
SSH_PORT=22
# 在本地机器上获取 IP 地址
MY_IP=$(curl -s http://ipinfo.io/ip)
echo "本地IP地址: $MY_IP"

while getopts ":u:h:p:" opt; do
  case $opt in
    u) SSH_USER="$OPTARG" ;;
    h) SSH_HOST="$OPTARG" ;;
    p) SSH_PORT="$OPTARG" ;;
    ?) echo "Invalid option -$OPTARG" >&2 ;;
    :) echo "Option -$OPTARG requires an argument." >&2 ;;
  esac
done


# 临时禁用命令历史
original_histfile=$HISTFILE
unset HISTFILE
# 获取密码
read -p "请输入你的SSH密码: " SSHPASS
export SSHPASS


# 登录到服务器并使用 sshpass 添加 fail2ban 白名单, 使用 -S 选项使 sudo 从标准输入读取密码，并使用 echo $SSHPASS 来提供该密码
echo "登录$SSH_HOST添加fail2ban白名单"
sshpass -e  ssh -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null -p $SSH_PORT $USER@$SSH_HOST "
    if grep -q '^ignoreip' /etc/fail2ban/jail.local; then
        echo $SSHPASS | sudo -S sed -i '/^ignoreip =/ s/$/ $MY_IP/' /etc/fail2ban/jail.local;
    elif grep -q '^#ignoreip' /etc/fail2ban/jail.local; then
        echo $SSHPASS | sudo -S sed -i 's/^#ignoreip = 127.0.0.1\/8 ::1/ignoreip = 127.0.0.1\/8 ::1 $MY_IP/' /etc/fail2ban/jail.local;
    else
        echo 'ignoreip = 127.0.0.1/8 ::1 $MY_IP' | echo $SSHPASS | sudo -S tee -a /etc/fail2ban/jail.local;
    fi;
    echo $SSHPASS | sudo -S service fail2ban restart;
"


# 使用 sshpass 获取/home下的所有用户
USERS=$(sshpass -e ssh -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null -p $SSH_PORT $USER@$SSH_HOST "ls /home")



# 遍历每个用户
for cUSER in $USERS; do
  # 输出当前尝试的用户名
  echo ">> [$SSH_HOST]当前尝试登录账户: $cUSER..."
  
  # 使用expect工具自动登录 SSH
  LOGIN_RESULT=$(expect -c "
  spawn ssh -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null -p $SSH_PORT $cUSER@$SSH_HOST
  expect {
    # Handle the known hosts warning
    "Are you sure you want to continue connecting (yes/no)?" {
      send "yesr"
      expect "password:"
      send "$cUSERr"
    }
    # Handle the password prompt directly
    "password:" {
      send "$cUSERr"
    }
  }
  expect {
    "Permission denied, please try again." { puts "Failed: $cUSER" }
    "$cUSER@" { puts "Success: $cUSER" }
    default {
      puts "在登录 $cUSER 用户时候遇到了未知错误:"
      puts "---"
      puts "$expect_out(buffer)"
      puts "---"
    }
  }
  " 2>/dev/nul服务器托管网l)


  # 使用expect工具自动切换用户
  #LOGIN_RESULT=$(expect -c "
  #spawn su - $cUSER
  #expect {
  #  "Password: " {
  #    send "$cUSERr"
  #    expect {
  #      "su: Authentication failure" { puts "Failed: $cUSER" }
  #      "$USER@" { puts "Success: $cUSER" }
  #      default { puts "Unknown response for user: $cUSER" }
  #    }
  #  }
  #}
  #"  2>/dev/null)

  # 如果成功，输出成功消息
  #echo "$LOGIN_RESULT"
  if echo "$LOGIN_RES服务器托管网ULT" | grep -q "Success"; then
    echo "Login successful for user: $cUSER"
    echo "$cUSER" >> $OUTPUT_FILE
  fi
  
done


#echo "登录$SSH_HOST解除fail2ban对本机的ban"
#echo $SSHPASS | sshpass -e ssh -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null -p $SSH_PORT $USER@$SSH_HOST "sudo -S fail2ban-client unban $MY_IP"
# 登录到服务器并使用 sshpass 启动 fail2ban 服务,使用 -S 选项使 sudo 从标准输入读取密码，并使用 echo $SSHPASS 来提供该密码
echo "登录$SSH_HOST移除fail2ban白名单"
sshpass -e ssh -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null -p $SSH_PORT $USER@$SSH_HOST "
    if grep -q '^ignoreip' /etc/fail2ban/jail.local; then
        echo $SSHPASS | sudo -S sed -i 's/ $MY_IP//g' /etc/fail2ban/jail.local;
        echo $SSHPASS | sudo -S sed -i 's/$MY_IP //g' /etc/fail2ban/jail.local;
    fi;
    echo $SSHPASS | sudo -S service fail2ban restart;
"

# 删除 SSHPASS 变量，以确保密码不会留在环境中
unset SSHPASS
# 恢复命令历史记录
export HISTFILE=$original_histfile

NUM_SUCCESS=$(wc -l 

sh check_user.sh

sh check_user.sh -p 8022

sh check_user.sh -h xxxxxx

sh check_user.sh -h xxxxxx -p 8022

sh check_user.sh -u root -h xxxxxx -p 8022

#!/bin/bash

# 之前的脚本中记录用户名的文件
OUTPUT_FILE="/path/to/your/output/file"

# 使用 SSH 连接到远程服务器
echo $SSHPASS | sshpass -e ssh -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null -p $SSH_PORT $USER@$SSH_HOST "
    while IFS= read -r USER; do
        # 构建新密码
        NEW_PASS="$USER@xxx"

        # 更改密码
        echo -e "$USERn$NEW_PASS" | sudo -S passwd $USER

    done