Re: hacking a NT domain after the member server

From: Erik Birkholz (erik@foundstone.com)
Date: 06/18/02


Date: Tue, 18 Jun 2002 13:07:55 -0700
From: "Erik Birkholz" <erik@foundstone.com>
To: <bart2k@hushmail.com>, <cisspstudy@yahoo.com>, <pen-test@securityfocus.com>

You should try tsenum.exe from the great and mighty Thor www.hammerofgod.com

Hit any box in the domain and it will enumerate the role of all the servers. It rocks!

Thor is currently modifying the code to add a few new features that will "rock the house"

On a completely random and happy note; I would like to say "cheers" to the guys making free tools that we all use in our testing of MS environment tool makers of the world...

Thanks to chip, arne, thor, david, jd, robin, roleof, ews, todd s, rfp, schiffman et al, marc et al, maceo and of course LeBlanc. Thanks guys, I for one appreciate it.

Erik B

Erik Pace Birkholz, CISSP
Principal Consultant - FOUNDSTONE
323 252 5916

----------------------------------------------------------------------------
This list is provided by the SecurityFocus Security Intelligence Alert (SIA)
Service. For more information on SecurityFocus' SIA service which
automatically alerts you to the latest security vulnerabilities please see:
https://alerts.securityfocus.com/



Relevant Pages

  • Re: faster scans? (nmap)
    ... one host using nmap for syn scans in burst mode with the ... >>>This list is provided by the SecurityFocus Security Intelligence Alert ... For more information on SecurityFocus' SIA service which ...
    (Pen-Test)
  • Re: pen test help please asap
    ... > Machine A on client site makes a configurable encrypted OUTBOUND ... > This list is provided by the SecurityFocus Security Intelligence Alert ... For more information on SecurityFocus' SIA service which ... This list is provided by the SecurityFocus Security Intelligence Alert ...
    (Pen-Test)
  • Re: ettercap help
    ... Anyways have never tried Ettercap for VNC. ... > This list is provided by the SecurityFocus Security Intelligence Alert ... For more information on SecurityFocus' SIA service which ... This list is provided by the SecurityFocus Security Intelligence Alert ...
    (Pen-Test)
  • RE: CFM SQL injection
    ... You should better use union or alike get unauthorized data from the ... This list is provided by the SecurityFocus Security Intelligence Alert ... For more information on SecurityFocus' SIA service which ...
    (Pen-Test)
  • Re: ettercap help
    ... > I can get it to sniff telnet, ftp, pop, smb, but no vnc. ... > This list is provided by the SecurityFocus Security Intelligence Alert ... For more information on SecurityFocus' SIA service which ...
    (Pen-Test)