Scanning for blank admin passwords on a windows box

From: Jason (cisspstudyat_private)
Date: Thu Jul 11 2002 - 18:51:02 PDT

  • Next message: French, Dave: "RE: escalating IUSR to admin rights via unicode and iis4"

    
     ('binary' encoding is not supported, stored as-is)
    I am looking for a fast multithreaded tool that can scan a range of IP 
    addresses and look for blank administrator (or other user accounts) 
    passwords on a windows NT/2000 server.
    
    If it can also try the username as password, server name as password that 
    would also be nice.
    
    Doing blank password scanning using the following command line syntax is 
    driving me crazy!
    
    FOR /L %i IN (1,1,254) DO net use \\XX.XX.XX.%i\IPC$ "" /u:Administrator
    
    Any help appreciated.
    
    Jason
    
    ----------------------------------------------------------------------------
    This list is provided by the SecurityFocus Security Intelligence Alert (SIA)
    Service. For more information on SecurityFocus' SIA service which
    automatically alerts you to the latest security vulnerabilities please see:
    https://alerts.securityfocus.com/
    



    This archive was generated by hypermail 2b30 : Fri Jul 12 2002 - 15:57:07 PDT