Re: Hydra For Windows?

[Marco Ivaldi <raptor () 0xdeadbeef info>]

On Tue, 24 Oct 2006, Jason Ross wrote:

[snip]

> depending on the number of hosts/passwords you're talking about, it may 
> be simpler/sufficient to just write an automated conn. script using perl 
> | vbscript | wmi and loop through ...

If you have access to a UNIX host or can boot a Linux Live CD, you could 
also consider modifying my very simple smbrute script:

http://www.0xdeadbeef.info/code/smbrute

Or writing your own (bash/Perl/BAT are your friends). As a side note: 
beware of account locking!

PS. Depending on your configuration and goals, samba-tng and specifically 
rpcclient's commands may also turn out to be very useful for information 
gathering purposes. If you're stuck with Windows as attack platform try 
enum, GetAcct, and similar testing tools.

--
Marco Ivaldi
Antifork Research, Inc.   http://0xdeadbeef.info/
3B05 C9C5 A2DE C3D7 4233  0394 EF85 2008 DBFD B707


------------------------------------------------------------------------
This List Sponsored by: Cenzic

Need to secure your web apps?
Cenzic Hailstorm finds vulnerabilities fast.
Click the link to buy it, try it or download Hailstorm for FREE.
http://www.cenzic.com/products_services/download_hailstorm.php?camp=701600000008bOW
------------------------------------------------------------------------