Re: problem with ncrack

[David Fifield <david () bamsoftware com>]

On Fri, Feb 08, 2013 at 05:16:14AM -0800, getridofthespam wrote:
> All our unix systems are configured with a default root password: localroot
> The people the system is build for are requested to change the default password.
> I wanted to use ncrack to verify id the root password is still  localroot.
>
> # ncrack -n -U uf -P pf  10.10.10.10:22
>
> where uf is a file containing root and pf a file containing localhost.
>
> I expected ncrack to return immediately with a yes or no as a matter of speaking but
> it takes ages to complete. Am I missing something?

Try running with the -d7 option. Do you see it trying many credentials
or only one? You should see lines like this:

ssh://10.10.10.10:22 (EID 1) Login failed: 'root' 'localroot'
ssh://10.10.10.01:22 (EID 1) Connection closed by peer
ssh://10.10.10.10:22 (EID 1) Attempts: total 1 completed 1 supported 1 --- rate 1.33
ssh://10.10.10.10:22 finished.

David Fifield
_______________________________________________
Sent through the dev mailing list
http://nmap.org/mailman/listinfo/dev
Archived at http://seclists.org/nmap-dev/