Penetration Testing mailing list archives
Re: Hydra For Windows?
From: Marco Ivaldi <raptor () 0xdeadbeef info>
Date: Wed, 25 Oct 2006 11:48:31 +0200 (CEST)
On Tue, 24 Oct 2006, Jason Ross wrote: [snip]
depending on the number of hosts/passwords you're talking about, it may be simpler/sufficient to just write an automated conn. script using perl | vbscript | wmi and loop through ...
If you have access to a UNIX host or can boot a Linux Live CD, you could also consider modifying my very simple smbrute script:
http://www.0xdeadbeef.info/code/smbruteOr writing your own (bash/Perl/BAT are your friends). As a side note: beware of account locking!
PS. Depending on your configuration and goals, samba-tng and specifically rpcclient's commands may also turn out to be very useful for information gathering purposes. If you're stuck with Windows as attack platform try enum, GetAcct, and similar testing tools.
-- Marco Ivaldi Antifork Research, Inc. http://0xdeadbeef.info/ 3B05 C9C5 A2DE C3D7 4233 0394 EF85 2008 DBFD B707 ------------------------------------------------------------------------ This List Sponsored by: Cenzic Need to secure your web apps? Cenzic Hailstorm finds vulnerabilities fast. Click the link to buy it, try it or download Hailstorm for FREE. http://www.cenzic.com/products_services/download_hailstorm.php?camp=701600000008bOW ------------------------------------------------------------------------
Current thread:
- Hydra For Windows? Mister Dookie (Oct 24)
- RE: Hydra For Windows? h0W@rD Sh33n (Oct 24)
- RE: Hydra For Windows? kim kihong (Oct 25)
- Re: Hydra For Windows? pand0ra (Oct 24)
- Re: Hydra For Windows? Lee Lawson (Oct 25)
- Re: Hydra For Windows? Jason Ross (Oct 24)
- <Possible follow-ups>
- RE: Hydra For Windows? Dino Dogan (Oct 24)
- Re: Hydra For Windows? DaKahuna (Oct 25)
- Re: Hydra For Windows? Marco Ivaldi (Oct 25)
- RE: Hydra For Windows? h0W@rD Sh33n (Oct 24)