From: Marco Ivaldi (raptor@0xdeadbeef.info)
Date: Wed Oct 25 2006 - 05:48:31 EDT
On Tue, 24 Oct 2006, Jason Ross wrote:
[snip]
> depending on the number of hosts/passwords you're talking about, it may
> be simpler/sufficient to just write an automated conn. script using perl
> | vbscript | wmi and loop through ...
If you have access to a UNIX host or can boot a Linux Live CD, you could
also consider modifying my very simple smbrute script:
http://www.0xdeadbeef.info/code/smbrute
Or writing your own (bash/Perl/BAT are your friends). As a side note:
beware of account locking!
PS. Depending on your configuration and goals, samba-tng and specifically
rpcclient's commands may also turn out to be very useful for information
gathering purposes. If you're stuck with Windows as attack platform try
enum, GetAcct, and similar testing tools.
-- Marco Ivaldi Antifork Research, Inc. http://0xdeadbeef.info/ 3B05 C9C5 A2DE C3D7 4233 0394 EF85 2008 DBFD B707 ------------------------------------------------------------------------ This List Sponsored by: Cenzic Need to secure your web apps? Cenzic Hailstorm finds vulnerabilities fast. Click the link to buy it, try it or download Hailstorm for FREE. http://www.cenzic.com/products_services/download_hailstorm.php?camp=701600000008bOW ------------------------------------------------------------------------
This archive was generated by hypermail 2.1.7 : Sat Apr 12 2008 - 10:57:14 EDT