• XSS.stack #1 – первый литературный журнал от юзеров форума

Rdp brute forcer

Отслеживать
Guest сказал(а):
NLbrutev1.2.zip
VT
Anyone who's used this or other similar tools, is there a statistic on the combinations per second?
And do the endpoint security products monitor/block the RDP protocol being bombarded with requests?
 
shrekushka сказал(а):
Anyone who's used this or other similar tools, is there a statistic on the combinations per second?
And do the endpoint security products monitor/block the RDP protocol being bombarded with requests?
I'll be disappointed if this is not rhetorical satire
 
DimmuBurgor сказал(а):
I'll be disappointed if this is not rhetorical satire
1. I don't ever use Windows at all.
2. The question might've been stupid but was genuine.

PS. And I know nothing of the protocol.
 
Последнее редактирование:
shrekushka сказал(а):
1. I don't ever use Windows at all.
2. The question might've been stupid but was genuine.

PS. And I know nothing of the protocol.
LeapfrogOS FTW, right? Anywho, your intuition behooves you... that software is not unlike someone trying to pick a lock with the jaws of life
 
DimmuBurgor сказал(а):
I'll be disappointed if this is not rhetorical satire
DimmuBurgor сказал(а):
LeapfrogOS FTW, right? Anywho, you intuition behooves you... that software is about as effective as picking a lock with the jaws of life
Somewhat insulting. Didn't get much info about the protocol but got it.
But I'm still interested in knowing if the protocol allows for a brute-force potential. That was the question.
 
Последнее редактирование:
shrekushka сказал(а):
Somewhat insulting. Didn't get much info about the protocol but got it.
But I'm still interested in knowing if the protocol allows for a brute-force potential. That was the question.
For AD the default is 10min I believe with a 1min thaw time. Gpmc and secpol policies are actually for some reason set without throttling consecutive attempts, but oddly have a 30min thaw time with factory settings. Imagine there might be more granular control over shit in sccm or whatever its called now days
 
DimmuBurgor сказал(а):
For AD the default is 10min I believe with a 1min thaw time. Gpmc and secpol policies are actually for some reason set without throttling consecutive attempts, but oddly have a 30min thaw time with factory settings. Imagine there might be more granular control over shit in sccm or whatever its called now days
btw if u got an ssh bruter, of anyone in here reading this please drop it in this thread lol, thanks
 
DimmuBurgor сказал(а):
For AD the default is 10min I believe with a 1min thaw time. Gpmc and secpol policies are actually for some reason set without throttling consecutive attempts, but oddly have a 30min thaw time with factory settings. Imagine there might be more granular control over shit in sccm or whatever its called now days
Thanks. I don't understand the AD, Windows specific details but if I ever get to test it and/or study this AD crap, I'll remember to update this thread.
 
NLBrute ranges at around 300 passwords per second on the average dedik, and keep in mind it can only bruteforce RDP servers with NLA security, it does not have an RDP standard security implementation.
 
Пожалуйста, обратите внимание, что пользователь заблокирован
у меня есть готовое решение. Но не хочется, чтобы мой код по рукам ходил, поэтому увы цена не всех устроит.
 
osnova сказал(а):
у меня есть готовое решение. Но не хочется, чтобы мой код по рукам ходил, поэтому увы цена не всех устроит.
Write an advertisement under the commercial section then. Also it seems that there would be little in the way of risk to share anecdotes about function logic and other generalizations?
 
osnova сказал(а):
у меня есть готовое решение. Но не хочется, чтобы мой код по рукам ходил, поэтому увы цена не всех устроит.
Does it support RDP standard security? Did you implement RDP yourself?
 
Пожалуйста, обратите внимание, что пользователь заблокирован
m43stro сказал(а):
Does it support RDP standard security? Did you implement RDP yourself?
Does it support RDP standard security? - yeah
Did you implement RDP yourself - yeah
 
osnova сказал(а):
Does it support RDP standard security? - yeah
Did you implement RDP yourself - yeah
Very nice, you have my respect. I am stuck at the ClientInfo PDU, getting an unencrypted 88 byte SendData response instead of 82 byte encrypted ClientValidLicenseData.
I have CredSSP, TLS/SSL authentication working though.

Did you look into Kerberos?
 
admin


Напишите ответ...
  • Вставить:
Прикрепить файлы
Верх