RE: Terminal Server brute force

From: Ozan Gonenc (ogonencat_private)
Date: Fri Nov 29 2002 - 11:52:27 PST

Next message: misat_private: "Re: Insurance"

Previous message: Friendly Guy: "RE: Cisco UBR920 cable router - SNMP to change telnet passwords?"
In reply to: Deus, Attonbitus: "Re: Terminal Server brute force"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This utility helps automate manual login/password attempts.  Works pretty
well for dictionary type attacks.  It's a bit slow, especially when you have
two clients going at the same time.

tscrack 2.0.37 Dictionary Based Windows Terminal Services Cracker

Something to keep you busy until TSGrinder comes out.

______________________________
Ozan Gonenc
IT Security Specialist
AEPOS Technologies Corporation
http://www.aepos.com



> -----Original Message-----
> From: Deus, Attonbitus [mailto:Thorat_private]
> Sent: November 27, 2002 20:24
> To: visigoth; Robert E. Lee
> Cc: Joe Luna; pen-testat_private
> Subject: Re: Terminal Server brute force
>
>
> At 01:00 PM 11/27/2002, visigoth wrote:
> >On Tue, Nov 26, 2002 at 08:48:40PM -0800, Robert E. Lee wrote:
> > > TSGrinder is still not listed as available.  Does anyone
> know when it
> > > might become available?
> > >
> > > robert
> >
> >Never, as near as I can tell.  It was initially slated for
> release at the
> >2001 BH/DC, then the 2002, and now I get no messages back
> from thor...  The
> >recent stability of rdesktop TS client for linux makes me
> consider beginning
> >the process of creating one...  I think I'll take a look
> this weekend and see
> >how tough it looks.  This is a tool that would be really
> nice to have..
>
> Sorry- I try to return all email I get- sometimes I just don't get to.
>
> TSGrinderII will indeed be released- I have a kludge copy
> running now, but
> I must get some binary editing of an undocumented .dll done
> before I can
> give it to the community.  TSGrinder (I) went through several design
> changes, and I eventually scrapped it once I found out some
> cool stuff we
> could do with the rclient package MS released (Thanks to Mark
> Burnett) .
>
> A grinder for Linux already exists, but I'm not sure if the
> guys who did it
> have released it.  I'll check with them and find out.  To be
> honest, I have
> just not had the time to give to the project- damn bills keep
> piling up and
> for some reason these people expect me to pay them ;)))
>
> I'll get off my butt and get the material together for the
> guy doing the
> binary work for me-  It should not be too long now that I've
> got a bit of
> time available now.
>
> Thanks!!!
>
> AD
>
>
>
> --------------------------------------------------------------
> --------------
> This list is provided by the SecurityFocus Security
> Intelligence Alert (SIA)
> Service. For more information on SecurityFocus' SIA service which
> automatically alerts you to the latest security
> vulnerabilities please see:
> https://alerts.securityfocus.com/
>


----------------------------------------------------------------------------
This list is provided by the SecurityFocus Security Intelligence Alert (SIA)
Service. For more information on SecurityFocus' SIA service which
automatically alerts you to the latest security vulnerabilities please see:
https://alerts.securityfocus.com/

Next message: misat_private: "Re: Insurance"
Previous message: Friendly Guy: "RE: Cisco UBR920 cable router - SNMP to change telnet passwords?"
In reply to: Deus, Attonbitus: "Re: Terminal Server brute force"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Sat Nov 30 2002 - 12:43:28 PST