acj

Maybe soon this will finally show up on pen-test… 🙂

A while back I encountered an issue when using TSGrinder:

C:usrsbintsgrinder
>tsgrinder -u administrator -b -n 2 192.168.1.5
timed_Event_send_recv: Wait failed: TIMEOUT
Couldn’t get handle to client window

I was busy and didn’t have time to mess with it and it still worked on
one of my…[Read more]

There was an update to mstsc mid-last year that broke the call backs.  I’ve been trying to send this to pen-test, but it hasn’t been posted yet.  I did send it to Thor, and he said he was going to take a look at it.  I will post in a sec…

Actual brute forcing for getting into a system remotely or during a pen-test, I do think is a waste of time.  However, a dictionary attack against the resource (e.g. load up TSGrinder with a list of passwords and usernames) is not a waste of time.  9 times out of 10 I’ve been able to get in that way (against routers, ssh, etc).

The only time I…[Read more]