Archive for February, 2009

Bruteforcing Windows over SMB: Tips and Tricks

Filed under: Hacking, NetBIOS/SMB

Today, I'm going to share some knowledge and techniques on bruteforcing Windows passwords. Hopefully, some of you have thought about this and can give me even more advice. If you know anything, post it!

Read More
Permalink Comments (3) Ron Bowes Feb 20, 2009

How Pwdump6 works, and how Nmap can do it

Filed under: Hacking, NetBIOS/SMB

Today I want to discuss how the pwdump6 and fgdump tools work, in detail, and how I was able to integrate pwdump6 into my Nmap scripts. Is this integration useful? Maybe or maybe not, but it was definitely an interesting problem.

Read More
Permalink Comments (7) Ron Bowes Feb 9, 2009

More password dictionaries

Filed under: Hacking

Last month, I posted about some password dictionaries I've collected. Well, thanks to a hacker who compromised PHPBB's site, I added another. There's a big caveat to this one, though -- these passwords are apparently based on ones that were cracked by the hacker, so they're only an accurate representation of weak passwords.

Read More
Permalink Comments (2) Ron Bowes Feb 7, 2009