Re: Scanning for blank admin passwords on a windows box

From: Erwin van der Zwan (erwin.zwan-van-derat_private)
Date: Mon Jul 15 2002 - 01:28:51 PDT

  • Next message: Anders Thulin: "Re: Scanning for blank admin passwords on a windows box"

    
     ('binary' encoding is not supported, stored as-is)
    In-Reply-To: <20020712015102.24426.qmailat_private>
    
    NBTEnum at http://ntsleuth.0catch.com might help do the trick.
    
    Other tools to use are:
    - NBTDump at http://www.atstake.com/research/tools/ or on foundstone
    - ENUM at http://razor.bindview.com/tools/index.shtml 
    - DUMPSEC at http://www.somarsoft.com 
    
    Hope this helps :-)
    
    --EvdZ
    
    > Jason wrote:
    >
    >I am looking for a fast multithreaded tool that can scan a range of IP 
    >addresses and look for blank administrator (or other user accounts) 
    >passwords on a windows NT/2000 server.
    >
    >If it can also try the username as password, server name as password that 
    >would also be nice.
    >
    >Doing blank password scanning using the following command line syntax is 
    >driving me crazy!
    >
    >FOR /L %i IN (1,1,254) DO net use \\XX.XX.XX.%i\IPC$ "" /u:Administrator
    >
    >Any help appreciated.
    >
    >Jason
    >
    >--------------------------------------------------------------------------
    --
    >This list is provided by the SecurityFocus Security Intelligence Alert 
    (SIA)
    >Service. For more information on SecurityFocus' SIA service which
    >automatically alerts you to the latest security vulnerabilities please 
    see:
    >https://alerts.securityfocus.com/
    >
    >
    
    ----------------------------------------------------------------------------
    This list is provided by the SecurityFocus Security Intelligence Alert (SIA)
    Service. For more information on SecurityFocus' SIA service which
    automatically alerts you to the latest security vulnerabilities please see:
    https://alerts.securityfocus.com/
    



    This archive was generated by hypermail 2b30 : Mon Jul 15 2002 - 08:57:32 PDT