Re: Ncrack,How to solve Dropping connection limit endlessly?

[Fotis Chantzis <ithilgore.ryu.l () gmail com>]

Do you know if the attacked system goes offline for whatever reason? This
might be a possible scenario where that happens. How long do you let Ncrack
"recover" after dropping the connections? Ncrack will keep trying dropping
the connections as long as it keeps getting timeouts from the attacked
system because otherwise it might cause a Denial of Service attack against
it.

On Fri, Nov 18, 2016 at 2:33 AM, michael johns <kasuallll367 () gmail com>
wrote:

> well i use 20-30 threads to be sure i don't receive many nsock
> errors,sometimes i receive that nsock timeouts but after 5-10-20 errors in
> row ncrack fixes and continue,but sometimes even if i use only 10 threads i
> received that error --> dropping connections endlessly,so i must stop and
> run again or sometimes stops and stay like that endessly and again must
> manually stop and start again,ufff it's exhausting
> I use ncrack0.5 latest version
> I use windows7 and windows2008 rc2 to crak rdp's, do u know a trick or
> something to remedy this errors? thank you
>
> ​
>
> On Fri, Nov 18, 2016 at 3:46 AM, Fotis Chantzis <ithilgore.ryu.l () gmail com
> > wrote:
>
> > Normally Ncrack should start increasing the connection limit when the
> > timeouts stop. Was the scenario in your case different?
> >
> > On Thu, Nov 17, 2016 at 2:51 AM, michael johns <kasuallll367 () gmail com>
> > wrote:
> >
> > > ''nsock response with status TIMEOUT error
> > > Dropping connection limit due to connection error''
> > >
> > > My big problem is that sometimes i receive that type of error
> > > endlessly,so the only solution is  to STOP the script.Ok so i was curious
> > > and immediately i checked  the attacked rdp to see if it is still alive and
> > > was down,then i wait 10 seconds i checked again the atacked  rdp and was UP
> > > again,I don't know which is the best solution to solve this
> > >
> > > _______________________________________________
> > > Sent through the dev mailing list
> > > https://nmap.org/mailman/listinfo/dev
> > > Archived at http://seclists.org/nmap-dev/

_______________________________________________
Sent through the dev mailing list
https://nmap.org/mailman/listinfo/dev
Archived at http://seclists.org/nmap-dev/