Terminal Server RDP Cracking by ChrisG

[zapper067]

The password is reygb54889427gb2487g4 5g4b5g78g642bg8276346t3146t896­t1387t63vt87%$@%^$^&@$^^*&^&(*­)^&O%*(%

I bet the hack will die of embarrassment

[babouras84]

Pretty damn lame.

As casper said the admin msut be a total dumbass to allow all these exploits.

Besides even the default domain password policy has a treshold account lockout policy

Waste of time..

[tytecypha]

no one said he was hacking dumb-ass, there is a difference between hacking and cracking ,read the script

[mraissam1997]

what if the username is not Administrator ????

[MrJai205]

honestly, it is a cool trick.. since windows terminal services authenticate against logins in the SAM db, you could've just used L0phtCrack to attack the server. Using L0phtcrack, you have the ability to do a Dic and NTLM hash hybrid attacks. You are also SOL if you need a token to login with as well. Also, don't listen to much to some posers , I use NMAP for pen test all the time.. It is required to know for the CEH and CISSP Exams

[vaasnaad]

@MrJai205 This is why I have a script that blocks IPs after 10 unsuccessful tries. lol Cool trick though I'm going to have to look at more of your videos.

[zabo78]

disturbed down with sickness

[grampamanz]

lousy music

[sidant1991]

LOVE DIS SONG!!!!



[chris63041]

my name is chris gower lol haha!!!!! o and cool hack!!!!!

[eddrumer]

uuuuuuuuuuww A A A AAAHH! OW OW OW !.disturbed fuckin rockin srsr

[WingsOfAltair]

fucking idiot the program only tests like 10 passwords :\ fucking bullshit

[Melpheos1er]

this is not hacking. This is being a script kiddie.

[SyStmz]

err... nobody claims this is hacking...

[Melpheos1er]

oops yep my bad. It says cracking in the title.

Yet, it's not cracking neither as cracking involves deciphering a password not using trial and error bruteforce

[Nervejunktion]

using a command shell and cracking are different then being a script kiddie...

as you can see he typed in the commands himself instead of using a script.

YOU FOOL

[dellthinker]

@Melpheos1er my thoughts exactly. Brute forcing always gave me migraines.

[mraissam]

buddy , how do u find the correct username first ?

[amdma2003]

tsgrinder, and patched rdesktop does not work when you enable "Always prompt client for password upon connection" in group policy on the server side. It just hangs on the first connection.

[excite236]

what song is that? anyone?

[Nervejunktion]

Happy birthday

[zizzu3000]

hope the police get u and put you in a jail with 10 gays with 30 cm dick long that fuck u night and day in your lamer ass, btw u doing nothing special u are a lamer and u must die

[WTCL3G3ND]

StFu Casper14242.

u dont need to explain how to fix this.

u sound like a newbie

[Casper14242]

You have got to be kidding me. No decent admin would leave all the holes open that you used to get in in this video.

1) Change the default TS Port

2) Account lockout on N valid logon attempts

3) Enforce use of secure passwords (even your leet dictionary attack will have problems here)

Add those up and your little bag of tricks wont get in.

Plus in a decent sized company they will have a SSL VPN or similar preventing direct access to RDP port anyway.

Bunch of script kiddies

[WTCLeGeND]

i got more than 40 Open RD's

VNC and REmote desktop

i send u the IP's and u learn me 2 how to crack ok ?

msnservices4 [AT] hotmail [Dot] com

splintercell1337 [AT] hotmail [dot] com

French and Dutch Victims

[T3RM1NH4CK3R]

it always says: Failed to open device eth9 QUITTING! :( ? what is the problem

[T3RM1NH4CK3R]

if somebody know where to download it pleas say.

[T3RM1NH4CK3R]

i cant fined TSCrack on the internet, where can i download it pleas :( ? pleas post rapidshare URL in your "About This Video" video information.

[Dengar13]

Very nice, thanks.

[jingling30]

why would any admin use port 3389 anyways? that's the first step in thwarting port scans

[fIXjACK008]

YOU CAN USE TSPROBE TO DEFEAT THAT.

[jchaves3]

Nice! Song name by the way?