Gedi

Wow, red button, not heard that name in a long time

yeah, don't think its wise to discuss hackin techniques on here....hehe.

I'll drop you a mail later when I get home from work, or you can find me in IRC on the undernet.org network in channels #hackuk, #as-mag and #hackphreak between 6pm and 3am.

[Edited by Gedi - 9/3/2003 3:53:37 PM]

ChristianR

iTrader: (1)

I am doing intrusion tests etc on our network at the moment.

Does anyone have a brute force program?

l0phtcrack needs a admin account or similair, but I am after one i guess like ntbrute, which seems to remotely bruteforce a server. All you need to do is supply a username and the server?

Does anyone have this or other programs which do the above?

Also any other software which will be relevant for the testing purpose.

ChristianR

iTrader: (1)

for 2000

David_Wallis

www.astalavista.com

Gedi

tell me exactly what you want to do and i'll tell a few ways in which you can attack it.

e.g. is it just the password your after???

Its not a very common method of attack amongst the hacker community but possible nevertheless.

Brute force programs are to cumbersome over a network. You wouldn't attack servers in that manner. Its like burgling a house with a ghetto blaster on your shoulder

Foot_Tapper

Dameware ?????

king_tut

GFI-Languard does all the testing you should need to do, just download the demo copy and try it, it rocks.

Gedi

yes, as king tut says, that is a decent program. If you want to go down the route of network security scanners then there are other good alternatives too.
Retina is an excelent tool while I have also heard good reports from Shadow security scanner.

However my personal favorite is without a doubt Nessus. You will need a unix server to run the deamon on though.

As with all software packages though, its not the real thing, it can only simulate and cannot think for its self in ingenious ways like good, true hackers do. If you want a full pen test you will have to bring in contractors.

ChristianR

iTrader: (1)

Gedi > already use redbutton or sim program to get account info. I just want to try the different routes from brute force to sniffing etc...

by all means drop me an email offline if you wish with ways/ideas you may have?

Will take a look at that langaurd, and already used dameware previously.

ChristianR

iTrader: (1)

look forward to your email - has been a long time since I looked in to this sort of thing you see.. court order didn't allow it!