Columns => Gates => Topic started by: don on January 04, 2007, 01:06:44 AM

Title: [Article]-Video: Terminal Server / RDP Password Cracking
Post by: don on January 04, 2007, 01:06:44 AM

Well video fans, Chris is at it again. You'll love this one. One more time he gives you a minimalist intro and quick video that will have you doing your own research for hours and quite possibly days. Have fun.

Quote

MS Terminal Services for Windows Server (http://www.microsoft.com/windowsserver2003/technologies/terminalservices/default.mspx), Remote Assistance for Windows XP (http://www.microsoft.com/technet/prodtechnol/winxppro/maintain/rmassist.mspx) and RDP (http://en.wikipedia.org/wiki/Remote_Desktop_Protocol) allow for remote interactive connections to Windows Servers and Windows XP machines. Just like Telnet and SSH, these can be powerful connections that in most cases are only protected with a username and password. There are several publicly available tools that will perform dictionary and bruteforce attacks against Terminal Services and Remote Assistance services. These tools include TSGrinder (http://www.hammerofgod.com/download.html) and TScrack (http://web.archive.org/web/20030203164146/http://softlabs.spacebitch.com/tscrack/) for Windows and Rdesktop (http://www.rdesktop.org/) (with a patch) for *nix. In this video we will see some example attacks using these tools.

For further details and references on all technology and concepts seen in the video, please read its companion article, Tutorial: MS Terminal Server Cracking (http://www.ethicalhacker.net/content/view/106/24/).

Enjoy and keep an eye out for future videos. Feel free to post comments and suggestions for future videos.

Thanks,
Chris Gates

Watch video here:
http://www.ethicalhacker.net/content/view/105/24/

Don

Title: Re: [Article]-Video: Terminal Server / RDP Password Cracking
Post by: slimjim100 on January 04, 2007, 01:34:02 AM

Outstanding work Chris!!!

Brian
AKA slimjim100

Title: Re: [Article]-Video: Terminal Server / RDP Password Cracking
Post by: Kev on January 04, 2007, 08:51:39 AM

Very well done! Thanks

Title: Re: [Article]-Video: Terminal Server / RDP Password Cracking
Post by: LSOChris on January 04, 2007, 09:03:06 AM

cool thanks guys!

there is a tutorial that goes with it that shoud be published shortly.

Title: Re: [Article]-Video: Terminal Server / RDP Password Cracking
Post by: d1spat3r on January 04, 2007, 09:59:01 AM

Awesome again Chris! Keep up the ~~good~~ great work.

Title: Re: [Article]-Video: Terminal Server / RDP Password Cracking
Post by: don on January 05, 2007, 04:08:13 PM

Submitted to digg:

http://www.digg.com/security/Video_Terminal_Server_RDP_Password_Cracking

Don

Title: Re: [Article]-Video: Terminal Server / RDP Password Cracking
Post by: slimjim100 on January 05, 2007, 08:12:37 PM

Dugg :) Again Awsome work Chris!

Title: Re: [Article]-Video: Terminal Server / RDP Password Cracking
Post by: jimbob on January 08, 2007, 04:43:38 AM

Thanks Chris, good work. It never fails to amaze me that brute force password attacks are one of the oldest tricks in the book and remain still so successful. I won't bother asking if anyone has seen the movie Wargames ;)

Jim

EH-Net

Columns => Gates => Topic started by: don on January 04, 2007, 01:06:44 AM