RE: Terminal Server brute force

From: Ozan Gonenc (ogonenc@adga.ca)
Date: Fri Nov 29 2002 - 14:52:27 EST


This utility helps automate manual login/password attempts. Works pretty
well for dictionary type attacks. It's a bit slow, especially when you have
two clients going at the same time.

tscrack 2.0.37 Dictionary Based Windows Terminal Services Cracker

Something to keep you busy until TSGrinder comes out.

______________________________
Ozan Gonenc
IT Security Specialist
AEPOS Technologies Corporation
http://www.aepos.com

> -----Original Message-----
> From: Deus, Attonbitus [mailto:Thor@HammerofGod.com]
> Sent: November 27, 2002 20:24
> To: visigoth; Robert E. Lee
> Cc: Joe Luna; pen-test@securityfocus.com
> Subject: Re: Terminal Server brute force
>
>
> At 01:00 PM 11/27/2002, visigoth wrote:
> >On Tue, Nov 26, 2002 at 08:48:40PM -0800, Robert E. Lee wrote:
> > > TSGrinder is still not listed as available. Does anyone
> know when it
> > > might become available?
> > >
> > > robert
> >
> >Never, as near as I can tell. It was initially slated for
> release at the
> >2001 BH/DC, then the 2002, and now I get no messages back
> from thor... The
> >recent stability of rdesktop TS client for linux makes me
> consider beginning
> >the process of creating one... I think I'll take a look
> this weekend and see
> >how tough it looks. This is a tool that would be really
> nice to have..
>
> Sorry- I try to return all email I get- sometimes I just don't get to.
>
> TSGrinderII will indeed be released- I have a kludge copy
> running now, but
> I must get some binary editing of an undocumented .dll done
> before I can
> give it to the community. TSGrinder (I) went through several design
> changes, and I eventually scrapped it once I found out some
> cool stuff we
> could do with the rclient package MS released (Thanks to Mark
> Burnett) .
>
> A grinder for Linux already exists, but I'm not sure if the
> guys who did it
> have released it. I'll check with them and find out. To be
> honest, I have
> just not had the time to give to the project- damn bills keep
> piling up and
> for some reason these people expect me to pay them ;)))
>
> I'll get off my butt and get the material together for the
> guy doing the
> binary work for me- It should not be too long now that I've
> got a bit of
> time available now.
>
> Thanks!!!
>
> AD
>
>
>
> --------------------------------------------------------------
> --------------
> This list is provided by the SecurityFocus Security
> Intelligence Alert (SIA)
> Service. For more information on SecurityFocus' SIA service which
> automatically alerts you to the latest security
> vulnerabilities please see:
> https://alerts.securityfocus.com/
>

----------------------------------------------------------------------------
This list is provided by the SecurityFocus Security Intelligence Alert (SIA)
Service. For more information on SecurityFocus' SIA service which
automatically alerts you to the latest security vulnerabilities please see:
https://alerts.securityfocus.com/



This archive was generated by hypermail 2.1.7 : Sat Apr 12 2008 - 10:53:26 EDT