Penetration Testing: RE: Terminal Server brute force

["Ozan Gonenc" <ogonenc () adga ca>]

This utility helps automate manual login/password attempts.  Works pretty
well for dictionary type attacks.  It's a bit slow, especially when you have
two clients going at the same time.

tscrack 2.0.37 Dictionary Based Windows Terminal Services Cracker

Something to keep you busy until TSGrinder comes out.

______________________________
Ozan Gonenc
IT Security Specialist
AEPOS Technologies Corporation
http://www.aepos.com



> -----Original Message-----
> From: Deus, Attonbitus [mailto:Thor () HammerofGod com]
> Sent: November 27, 2002 20:24
> To: visigoth; Robert E. Lee
> Cc: Joe Luna; pen-test () securityfocus com
> Subject: Re: Terminal Server brute force
>
>
> At 01:00 PM 11/27/2002, visigoth wrote:
> > On Tue, Nov 26, 2002 at 08:48:40PM -0800, Robert E. Lee wrote:
> > > TSGrinder is still not listed as available.  Does anyone
> know when it
> > > might become available?
> > >
> > > robert
> > Never, as near as I can tell.  It was initially slated for
> release at the
> > 2001 BH/DC, then the 2002, and now I get no messages back
> from thor...  The
> > recent stability of rdesktop TS client for linux makes me
> consider beginning
> > the process of creating one...  I think I'll take a look
> this weekend and see
> > how tough it looks.  This is a tool that would be really
> nice to have..
>
> Sorry- I try to return all email I get- sometimes I just don't get to.
>
> TSGrinderII will indeed be released- I have a kludge copy
> running now, but
> I must get some binary editing of an undocumented .dll done
> before I can
> give it to the community.  TSGrinder (I) went through several design
> changes, and I eventually scrapped it once I found out some
> cool stuff we
> could do with the rclient package MS released (Thanks to Mark
> Burnett) .
>
> A grinder for Linux already exists, but I'm not sure if the
> guys who did it
> have released it.  I'll check with them and find out.  To be
> honest, I have
> just not had the time to give to the project- damn bills keep
> piling up and
> for some reason these people expect me to pay them ;)))
>
> I'll get off my butt and get the material together for the
> guy doing the
> binary work for me-  It should not be too long now that I've
> got a bit of
> time available now.
>
> Thanks!!!
>
> AD
>
>
>
> --------------------------------------------------------------
> --------------
> This list is provided by the SecurityFocus Security
> Intelligence Alert (SIA)
> Service. For more information on SecurityFocus' SIA service which
> automatically alerts you to the latest security
> vulnerabilities please see:
> https://alerts.securityfocus.com/

----------------------------------------------------------------------------
This list is provided by the SecurityFocus Security Intelligence Alert (SIA)
Service. For more information on SecurityFocus' SIA service which
automatically alerts you to the latest security vulnerabilities please see:
https://alerts.securityfocus.com/