Showing posts with label Telnet. Show all posts
Showing posts with label Telnet. Show all posts

Saturday, March 1, 2014

[Ncrack] High-Speed Network Authentication Cracker


Ncrack is a high-speed network authentication cracking tool. It was built to help companies secure their networks by proactively testing all their hosts and networking devices for poor passwords. Security professionals also rely on Ncrack when auditing their clients. Ncrack was designed using a modular approach, a command-line syntax similar to Nmap and a dynamic engine that can adapt its behaviour based on network feedback. It allows for rapid, yet reliable large-scale auditing of multiple hosts.

Ncrack's features include a very flexible interface granting the user full control of network operations, allowing for very sophisticated bruteforcing attacks, timing templates for ease of use, runtime interaction similar to Nmap's and many more. Protocols supported include RDP, SSH, http(s), SMB, pop3(s), VNC, FTP, and telnet.

Ncrack was started as a "Google Summer of Code" Project in 2009. While it is already useful for some purposes, it is still unfinished, alpha quality software. It is released as a standalone tool and can be downloaded from the section below. Be sure to read the Ncrack man page to fully understand Ncrack usage. If you are a developer and want to write your own Ncrack modules, studying the Ncrack Developer's Guide would be the first step.

Saturday, February 1, 2014

[TYFYP] Massive Telnet Password Tester



Commercial name: TYFYP (Thank you for your password), to the honor of ADTRAN telnet banner motd welcome message.

Please use it ONLY in LAN IPs. This is a very rudimentary program only for investigation purposes. Developed on Retina Display machine, so there may be UI errors in normal resolution screens.

REQUIREMENTS:

  • Windows.
  • .NET Framework v4.5

HOW TO USE:

  • Open TYFYP.exe or complile it in Visual Studio.
  • Select a .txt file with IPs list you want to try.
  • Write a default telnet username, password and enable password.
  • Click "Run".

WHAT IT WILL DO:

  • Check IP by IP telnet username and password.
  • If there is a connection, it will try enable password.
  • You will see green lines in case of successful connection, red lines if not.
  • Clear red lines means there wasn't telnet service listening (or your network connection fails).

FUTURE IMPROVEMENTS:

  • Be able to read telnet user, password and enable password directly from IP list txt. This will allow to try multiples password for each IP.
  • Make it multi-threading.