[Nick Saban]

Does anybody have experiences with this? If so, please let me know, I am interested in learning about using Dubrute.

[Ligeti]

Open RDP? or FreeRDP

I googled Dubrute and "About 34,400 results (0.33 seconds)" of which the first two seems to be interesting videos on YouTube about how to hack using Drubrute...

Dubrute sounds interesting (I never heard of it before)... I am reading more about it now

Peace

[Nick Saban]

Open RDP? or FreeRDP

I googled Dubrute and "About 34,400 results (0.33 seconds)" of which the first two seems to be interesting videos on YouTube about how to hack using Drubrute...

Dubrute sounds interesting (I never heard of it before)... I am reading more about it now

Peace

I did use google and youtube. But none of which tells me how to scan for open rdp ports.

[Ligeti]

Ah open RDP ports... I see!

Using nmap of course! I believe it is port 3389 (both TCP and UDP)... to you may want to run something like:

Code:

nmap -sT <ip address> -p 3389

And

Code:

nmap -sU <ip address> -p 3389

I know nothing about Dubrute (yet not much to talk about it), but generally when you want to scan a port you use or nc, nmap, or any port scanner... the most "famous" one/method is using nmap (or zenmap which is the same but with a nice GUI)

I hope that will help/guide you somehow, please let me know if you need more help/info.

Peace

[Nick Saban]

Ah open RDP ports... I see!

Using nmap of course! I believe it is port 3389 (both TCP and UDP)... to you may want to run something like:

Code:

nmap -sT <ip address> -p 3389

And

Code:

nmap -sU <ip address> -p 3389

I know nothing about Dubrute (yet not much to talk about it), but generally when you want to scan a port you use or nc, nmap, or any port scanner... the most "famous" one/method is using nmap (or zenmap which is the same but with a nice GUI)

I hope that will help/guide you somehow, please let me know if you need more help/info.

Peace

Not quite what I am looking for. I saw in another forum this guy had a sleeper program that checked THOUSANDS of ip's (outside of the network) and scanned them for RDP ports. Then, after a while, when the program found some open ports for him, he would use dubrute to get inside. I have tried pm'ing user, but he never replies... asshole.

[Ligeti]

Oh I see... well, unfortunately that's listed under black hat activity, and I can't help you with that (nor can anyone in this community... we are ethical)

Plus the fact I don't recommend you doing so.

Peace

[lady_godiva]

If you knew a litte bit about nmap you'd know how you can scan a specific port for multiple ips.

If you knew how RDP works, you'd realize that dubrute is extremely easy to use (evidence says that you do not know what you are doing).

If you knew that scanning thousand of ips and using things like dubrute is a stupid idea, you wouldn't even have opened this thread

[Insider]

I don't condone black hat activity, but I'll leave this here. Not sure if it's clean or not, but what you're looking for would be an "RDP" scanner.



Download links in the describtion.

[lady_godiva]

I don't condone black hat activity, but I'll leave this here. Not sure if it's clean or not, but what you're looking for would be an "RDP" scanner.



Download links in the describtion.

Not very correct, as the name states pretty clearly it is a bruteforce tool. It just try to bruteforce credentials for the RDP protocol against target with port 3389.

[dmaxx]

I don't condone black hat activity, but I'll leave this here. Not sure if it's clean or not, but what you're looking for would be an "RDP" scanner.



Download links in the describtion.

Not very correct, as the name states pretty clearly it is a bruteforce tool. It just try to bruteforce credentials for the RDP protocol against target with port 3389.

also, such tool(dubrute) can easily been stopped from bruteforcing by adding two new keys like "LEGALNOTICECAPTION" and "LEGALNOTICETEXT" and enter a plain text value for each of them in the windows register in the folder named

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon

which requirer the person to hit "OK" to be able to access the CTRL+ALT+DEL option and effective terminate password blasting, well aleast as far as i have heard anyway, please no flamming if am mistaken tough:epic: