Re: Hydra For Windows?

On 10/23/06, Mister Dookie <misterdookie@xxxxxxxxx> wrote:
I just want to be able to scan the network to make sure people
aren't using the company name or a simple derivation of the
company name as their password.

medusa (http://www.foofus.net/jmk/medusa/medusa.html) supports smb
brute force, you may be able to use that for this purpose if you
connected to administrative shares/etc. (this of course presumes that
connecting to the administrative shares is permitted)

depending on the number of hosts/passwords you're talking about, it
may be simpler/sufficient to just write an automated conn. script
using perl | vbscript | wmi and loop through ...

--
jason

------------------------------------------------------------------------
This List Sponsored by: Cenzic

Need to secure your web apps?
Cenzic Hailstorm finds vulnerabilities fast.
Click the link to buy it, try it or download Hailstorm for FREE.
http://www.cenzic.com/products_services/download_hailstorm.php?camp=701600000008bOW
------------------------------------------------------------------------