Re: Scanning for blank admin passwords on a windows box

From: Erwin van der Zwan (erwin.zwan-van-der@siemens.nl)
Date: Mon Jul 15 2002 - 04:28:51 EDT

('binary' encoding is not supported, stored as-is) In-Reply-To: <20020712015102.24426.qmail@mail.securityfocus.com>

NBTEnum at http://ntsleuth.0catch.com might help do the trick.

Other tools to use are:
- NBTDump at http://www.atstake.com/research/tools/ or on foundstone
- ENUM at http://razor.bindview.com/tools/index.shtml
- DUMPSEC at http://www.somarsoft.com

Hope this helps :-)

--EvdZ

> Jason wrote:
>
>I am looking for a fast multithreaded tool that can scan a range of IP
>addresses and look for blank administrator (or other user accounts)
>passwords on a windows NT/2000 server.
>
>If it can also try the username as password, server name as password that
>would also be nice.
>
>Doing blank password scanning using the following command line syntax is
>driving me crazy!
>
>FOR /L %i IN (1,1,254) DO net use \\XX.XX.XX.%i\IPC$ "" /u:Administrator
>
>Any help appreciated.
>
>Jason
>
>-------------------------------------------------------------------------- 

--
>This list is provided by the SecurityFocus Security Intelligence Alert 
(SIA)
>Service. For more information on SecurityFocus' SIA service which
>automatically alerts you to the latest security vulnerabilities please 
see:
>https://alerts.securityfocus.com/
>
>
----------------------------------------------------------------------------
This list is provided by the SecurityFocus Security Intelligence Alert (SIA)
Service. For more information on SecurityFocus' SIA service which
automatically alerts you to the latest security vulnerabilities please see:
https://alerts.securityfocus.com/

This archive was generated by hypermail 2.1.7 : Sat Apr 12 2008 - 10:53:23 EDT