pyth0n3 Posted January 7, 2010 Report Share Posted January 7, 2010 (edited) Voi descrie o mica guida cum sa gasiti un service Terminal Server si sa efectuati un dictionary attack dintrun sistem Linux.Metode sunt mai multe ,aici voi descrie doar una .Voi folosi ca tool rdesktop 1.4.1 pt. Linux la care va trebui adaugata o patch pt a putea efectua dictionary attack.Rdesktop 1.4.1 il pueti gasi pe internet dar aici va pun un link de unde il puteti lua avand si un file de patch incorporatrdesktop-1.4.1.tar Primul lucru care trebuie sa faceti e sa gasiti un terminal server , care de o default e pe portul TCP 3389Puteti folosi urmatorul comand pt Nmap ,sau depinde ce scanner folositi voi . nmap -oN TerminalServer.txt -p 3389 --open 192.168.0.0/24 unde in loc de 192.168.0.0/24 veti specifica ip-urile care vreti sa scannati .Nmap va salva totul intrun file TerminalServer.txt .Un alt command e: nmap -PS3389 -iR 0 -p 3389 --open -oN TerminalServer.txtin loc de 0 puneti cate ip vreti ca sa scaneze.(de default 0 va scana la infinit) Si in acest caz Nmap salveaza totul in TerminalService.txt ,Optiunea - - open e ca sa arate doar open service.Dupa ce aveti destule obiective veti trece la faza nr 2 Dictionary attack.Descarcatii rdesktop-1.4.1.tar .Va trebui sa scoateti din archiva cu comandul tar -xf rdesktop-1.4.1.tarDupa care mergeti unde ati desfacut archiva , cd rdesktop-1.4.1Si dati urmatorul comand pt patch patch -p1 -i rdp-brute-force-r422.diff Acum va trebui sa compilati :./configure makemake installdupa ce ati terminat dati comandul rdesktop si va va arata toate optiunile.Ex :rdesktop -u administrator -p pass.txt 192.168.1.1unde pass.txt este dictionar de cuvinteUn administator va configura in asa fel incat unele vor permite doar cateva tentative si vor inchide restul .Acest lucru este ilegal ,ar fi bine sa fiti autorizati inainte de a face un scan pe orice retea.Totul poate fi salvat intrun file log.Am scris aceasta guida cu scop informativ ,doar cunoscand ceea ce face inamicul se pot lua masuri. Edited March 29, 2011 by pyth0n3 Quote Link to comment Share on other sites More sharing options...
Guest Praetorian Posted January 7, 2010 Report Share Posted January 7, 2010 Daca are careva un RDP, pm me... Quote Link to comment Share on other sites More sharing options...
Slym Posted January 7, 2010 Report Share Posted January 7, 2010 Daca are careva un RDP, pm me..."TinKode has chosen not to receive private messages or may not be allowed to receive private messages. Therefore you may not send your message to him/her.If you are trying to send this message to multiple recipients, remove TinKode from the recipient list and send the message again"Cate RDP vrei? Iti dau eu Quote Link to comment Share on other sites More sharing options...
Gabriel87 Posted December 17, 2010 Report Share Posted December 17, 2010 Slym , imi poti da si mie cateva pls Quote Link to comment Share on other sites More sharing options...
AdRyAnOTeAm Posted December 30, 2010 Report Share Posted December 30, 2010 Slym .. trimite si mie un RDP pm me Quote Link to comment Share on other sites More sharing options...
little123 Posted February 4, 2011 Report Share Posted February 4, 2011 Vreau si eu programul Quote Link to comment Share on other sites More sharing options...
Bobo12 Posted March 28, 2011 Report Share Posted March 28, 2011 Poti face un tutorial si pt Windows? Ar fi binevenit cred. Quote Link to comment Share on other sites More sharing options...
tao Posted March 28, 2011 Report Share Posted March 28, 2011 subscriu.....Bobo12noi celor fara linux... ne este mai dificil....dar poate ne poate ajuta cineva...multzumesc anticipat"SUCCESURI" Quote Link to comment Share on other sites More sharing options...
pyth0n3 Posted March 29, 2011 Author Report Share Posted March 29, 2011 (edited) Pasul 1 TSgrinder sau Tscracktsgrinder.exe [options] serverOptions:-w dictionary file (default 'dict')-l 'leet' translation file-d domain name-u username (default 'administrator'-b banner flag-n number of simultaneous threads-D debug level (default 9, lower number is more output)tscrack [switch] [switch [arg]] ... <Host or IP[:port]>Switches:-h : Print usage help and exit-V : Print version info and exit-s : Print chipher strenght info and exit-b : Enable failed password beep-t : Use two simultaneous connections-N : Prevent System Log entries on targeted serv-U : Uninstall tscrack and remove components-f <number> : Wordlist entry to start cracking with-F <delay> : Sampling Frequency (Delay between samples in ms)-l <user> : Account name to use, defaults to Administrator-w <wordlist> : Wordlist to use; tscrack tries blank passes if omitted-p <password> : Use <password> to logon instead of wordlist/blank pass-D <domain> : Specify domain to attempt logon toPasul 1 terminatSucces! Edited March 29, 2011 by pyth0n3 Quote Link to comment Share on other sites More sharing options...
tao Posted April 5, 2011 Report Share Posted April 5, 2011 foarte mutzumesc"The best way to make a man happy is to say: THANK YOU !!! " sau sa-i dai o bere !!! eu dau doua Quote Link to comment Share on other sites More sharing options...
tao Posted April 5, 2011 Report Share Posted April 5, 2011 Totusi niste sfaturi daca se poate:am o adresa de ip cu 3389 deschis. nu stiu nici user nici parola. ce e mai bine si repede sa fac?cum aflu user name exact ca sa pot folosi mai bine un brute?userul administrator nu se poate schimba? ma refer la acela cu drepturi de admin. ideea e ca am gasit (completat) o lista de parole dar nu a gasit nimic. poate sa fie alt user decat administrator? ce ma sfatuiti?Multzumesc anticipat Quote Link to comment Share on other sites More sharing options...
tao Posted April 5, 2011 Report Share Posted April 5, 2011 Totusi niste sfaturi daca se poate:am o adresa de ip cu 3389 deschis. nu stiu nici user nici parola. ce e mai bine si repede sa fac?cum aflu user name exact ca sa pot folosi mai bine un brute?userul administrator nu se poate schimba? ma refer la acela cu drepturi de admin. ideea e ca am gasit (completat) o lista de parole dar nu a gasit nimic. poate sa fie alt user decat administrator? ce ma sfatuiti?Multzumesc anticipatSau poate alta solutie despre accesul prin rdp(3389) Quote Link to comment Share on other sites More sharing options...
omnicrom Posted April 5, 2011 Report Share Posted April 5, 2011 Salut.As dori si eu un rdp de America daca se poate sa ma ajute cineva. Quote Link to comment Share on other sites More sharing options...
slardar Posted April 5, 2011 Report Share Posted April 5, 2011 TSgrinder si cu alalalt sunt 2 cacaturi de tool-uri anticeCum voi astia de carton dati scan de pe winbloz si mai vreti sa prindeti si multe servere ca apoi sa le vindeti cu 2 euro, o sa aveti nevoie de brutere complexe. Baietii de la antichat aveau unul bunicel, l-am testat anu trecut. Quote Link to comment Share on other sites More sharing options...
tao Posted April 5, 2011 Report Share Posted April 5, 2011 SLARDAR:kmultzumesc de raspuns. (asta ca sa nu ne avantam in razboi despre win si linux sau altceva) 1.Nu mi-am dat cu parerea despre tsgrinder si tscrack(si nu o sa incep acum) dar ma intrebam daca este si alta solutie.2.Eu nu m-am referit la scannere de rdp sau brute complexe , ci doar ptr o singura adresa de ip pentru care am nevoie de user si pass( posibil sa nu fie Administrator sau cele uzuale).3.Nu pentru vanzare de 2 $ am eu nevoie de asa ceva.Daca solutia cere plata putem face si asta. (rezonabil bineinteles)Multzumesc anticipat."SUCCESURI" Quote Link to comment Share on other sites More sharing options...
slardar Posted April 6, 2011 Report Share Posted April 6, 2011 tao:da-i frumos un nmap, vezi ce are instalat pe acolo, incerci brute pe tot ce se poate nu numa rdpDaca esti pe windows si vrei sa faci brute doar la un singur IP, iei frumos tool-ul "Bruter" si incerci cu elPentru RDP o fi bun si TSgrinder ala, la urma urmei ai doar un targetVezi poate are 80 deschis, vezi ceva site-uri etc Quote Link to comment Share on other sites More sharing options...
tao Posted April 7, 2011 Report Share Posted April 7, 2011 slardar:multzumesc frumos Quote Link to comment Share on other sites More sharing options...
lost_dreams277 Posted October 20, 2011 Report Share Posted October 20, 2011 (edited) Salut,Cum pornesc scannerul si as vrea sa ia fiecare ip din txt si nu shtiu cum.Ma puteti ajuta?Multumesc Edited October 20, 2011 by lost_dreams277 Quote Link to comment Share on other sites More sharing options...
