Re: Terminal Services Banner - Rdesktop, Tsgrind, Tscrack

[Shohn Trojacek <trojacek () gmail com>]

Thanks for writing back; however, the question still stands with
regard to the legal banner ;)

Shohn

On Tue, Jun 8, 2010 at 1:46 PM, Jacky Jack <jacksonsmth698 () gmail com> wrote:
> I never do bruteforce on this except checking weak passwords a few times
> mainly because of account lockout, which is not a desired option in pentest
> engagement.
>
> On Fri, Jun 4, 2010 at 9:29 PM, Shohn Trojacek <trojacek () gmail com> wrote:
> > Hello:
> >
> > Trying not to reinvent the wheel here, does anyone have any idea with
> > regard to a method for performing dictionary attack against terminal
> > servers that have the legal banner enabled? I'm finding that in all
> > cases the legal banner seems to stop the password guessing. I'm
> > guessing that a modification to simply send a keypress through is all
> > that is needed.
> >
> > I've tried this with rdesktop brute force patch (both patches),
> > tsgrinder, tscrack, etc. but to no avail. Any plans by the authors of
> > those tools to update or release source :P
> >
> > Shohn
> >
> > ------------------------------------------------------------------------
> > This list is sponsored by: Information Assurance Certification Review
> > Board
> >
> > Prove to peers and potential employers without a doubt that you can
> > actually do a proper penetration test. IACRB CPT and CEPT certs require a
> > full practical examination in order to become certified.
> >
> > http://www.iacertification.org
> > ------------------------------------------------------------------------

------------------------------------------------------------------------
This list is sponsored by: Information Assurance Certification Review Board

Prove to peers and potential employers without a doubt that you can actually do a proper penetration test. IACRB CPT 
and CEPT certs require a full practical examination in order to become certified. 

http://www.iacertification.org
------------------------------------------------------------------------