Skip to content

Crownar get hits on all passwords on XRDP unix/linux RDPs #85

@scala666

Description

@scala666

I you run crowbar on a list of servers with password list and static user,
crowbar shows RDP-SUCCESS on same IP and port with ALL PASSWORDS.
Shows all xrdp RDPs ip as hits.
Servers that have XRDP software are always shown as success.

command line for kali linux crowbar
crowbar -b rdp -u administrator -C passwordfile.txt -S ipfile.txt -o outputfile.txt -n 400

p.s. shows RDP-SUCCESS: IP:PORT - ADMINISTRATOR:PASS all of them - more than one

or HITS on ACCOUNT_LOCKED_OR_PASSWORD_EXPIRED servers too... with same IP:port - administrator:pass .. all of them

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions