Re: Hydra For Windows?

On Tue, 24 Oct 2006, Jason Ross wrote:

[snip]

depending on the number of hosts/passwords you're talking about, it may be simpler/sufficient to just write an automated conn. script using perl | vbscript | wmi and loop through ...

If you have access to a UNIX host or can boot a Linux Live CD, you could also consider modifying my very simple smbrute script:

http://www.0xdeadbeef.info/code/smbrute

Or writing your own (bash/Perl/BAT are your friends). As a side note: beware of account locking!

PS. Depending on your configuration and goals, samba-tng and specifically rpcclient's commands may also turn out to be very useful for information gathering purposes. If you're stuck with Windows as attack platform try enum, GetAcct, and similar testing tools.

--
Marco Ivaldi
Antifork Research, Inc. http://0xdeadbeef.info/
3B05 C9C5 A2DE C3D7 4233 0394 EF85 2008 DBFD B707


------------------------------------------------------------------------
This List Sponsored by: Cenzic

Need to secure your web apps?
Cenzic Hailstorm finds vulnerabilities fast.
Click the link to buy it, try it or download Hailstorm for FREE.
http://www.cenzic.com/products_services/download_hailstorm.php?camp=701600000008bOW
------------------------------------------------------------------------

Relevant Pages

  • Re: WMI Timeout possible?
    ... In my case, they script just hangs, no errors, no warnings, nothing. ... > for each loop from a dictionary object. ... > fine...just this snag with the WMI timeout thing. ... > 3.4) compare collected data to preexisting data from the OLE source ...
    (microsoft.public.scripting.vbscript)
  • Re: XSS - how to run script
    ... without evasion, with or without script tag) is the XSS cheat sheet: ... > Cenzic Hailstorm finds vulnerabilities fast. ...
    (Pen-Test)
  • RE: XSS - how to run script
    ... with or without script tag) ... XSS cheat sheet: ... XSS - how to run script ... Cenzic Hailstorm finds vulnerabilities fast. ...
    (Pen-Test)
  • RE: DNS mapping
    ... The tool bidiblah was then based off of a lot of the methods described ... Subject: DNS mapping ... inputting the address test.com to the script and then ... Cenzic Hailstorm finds vulnerabilities fast. ...
    (Pen-Test)
  • RE: DNS mapping
    ... Onderwerp: DNS mapping ... I was wondering if there is an easy way to write a script to use for reverse ... Cenzic Hailstorm finds vulnerabilities fast. ... Click the link to buy it, try it or download Hailstorm for FREE. ...
    (Pen-Test)