News - Main Page
Whitepapers
Tools and Download
Presentations

download

licence

summary

acccheck

The tool is designed as a password dictionary attack tool that targets windows authentication via the SMB protocol. It is really a wrapper script around the 'smbclient' binary, and as a result is dependent on it for its execution.

The simplest way to run the tool is as follows:

./acccheck.pl -t 10.10.10.1

This mode of execution attempts to connect to the target ADMIN$ share with the username 'Administrator' and a [BLANK] for the password.

./acccheck.pl -t 10.10.10.1 -u test -p test

This mode of execution attempts to connect to the target IPC$ share with the username 'test' and a password 'test'.

Each -t, -u and -p flags can be substituted by -T, -U and -P, where each represents an input file rather than a single input from standard in.

E.g.
./acccheck.pl -T iplist -U userfile -P passwordfile

Only use -v mode on very small dictionaries, otherwise, this has the affect of slowing the scan down to the rate the system writes to standard out.

Any username/password combinations found are written to a file called 'cracked' in the working directory.

Last Updated : 09/04/2008 18:48:49


Related Applications

  • Apache UsersEnumerate the usernames on any system that uses Apache and the UserDir module.
  • MIBparseMIBparse.pl has been designed as an offline parser to quickly parse output from SNMP tools such as 'snmpwalk'.
  • phrasen|drescherA tool for bruteforce guessing pass phrases, password hashes or remote accounts of various services
  • SSHatterPassword brute forcer for SSH
  • udp-proto-scannerudp-proto-scanner.pl discovers UDP services by sending triggers to a list of hosts.