Penetration Testing mailing list archives

RE: Terminal Server brute force


From: "Ozan Gonenc" <ogonenc () adga ca>
Date: Fri, 29 Nov 2002 14:52:27 -0500

This utility helps automate manual login/password attempts.  Works pretty
well for dictionary type attacks.  It's a bit slow, especially when you have
two clients going at the same time.

tscrack 2.0.37 Dictionary Based Windows Terminal Services Cracker

Something to keep you busy until TSGrinder comes out.

______________________________
Ozan Gonenc
IT Security Specialist
AEPOS Technologies Corporation
http://www.aepos.com



-----Original Message-----
From: Deus, Attonbitus [mailto:Thor () HammerofGod com]
Sent: November 27, 2002 20:24
To: visigoth; Robert E. Lee
Cc: Joe Luna; pen-test () securityfocus com
Subject: Re: Terminal Server brute force


At 01:00 PM 11/27/2002, visigoth wrote:
On Tue, Nov 26, 2002 at 08:48:40PM -0800, Robert E. Lee wrote:
TSGrinder is still not listed as available.  Does anyone
know when it
might become available?

robert

Never, as near as I can tell.  It was initially slated for
release at the
2001 BH/DC, then the 2002, and now I get no messages back
from thor...  The
recent stability of rdesktop TS client for linux makes me
consider beginning
the process of creating one...  I think I'll take a look
this weekend and see
how tough it looks.  This is a tool that would be really
nice to have..

Sorry- I try to return all email I get- sometimes I just don't get to.

TSGrinderII will indeed be released- I have a kludge copy
running now, but
I must get some binary editing of an undocumented .dll done
before I can
give it to the community.  TSGrinder (I) went through several design
changes, and I eventually scrapped it once I found out some
cool stuff we
could do with the rclient package MS released (Thanks to Mark
Burnett) .

A grinder for Linux already exists, but I'm not sure if the
guys who did it
have released it.  I'll check with them and find out.  To be
honest, I have
just not had the time to give to the project- damn bills keep
piling up and
for some reason these people expect me to pay them ;)))

I'll get off my butt and get the material together for the
guy doing the
binary work for me-  It should not be too long now that I've
got a bit of
time available now.

Thanks!!!

AD



--------------------------------------------------------------
--------------
This list is provided by the SecurityFocus Security
Intelligence Alert (SIA)
Service. For more information on SecurityFocus' SIA service which
automatically alerts you to the latest security
vulnerabilities please see:
https://alerts.securityfocus.com/



----------------------------------------------------------------------------
This list is provided by the SecurityFocus Security Intelligence Alert (SIA)
Service. For more information on SecurityFocus' SIA service which
automatically alerts you to the latest security vulnerabilities please see:
https://alerts.securityfocus.com/


Current thread: