Full Version: Blank Passwords
rbk6xs5
I need to run a script on our network to determine if we have machines in the field with a blank password. Does anyone know how I can achieve this?
jurk-off
you mean you want to look if yur vulnerable??? then use the ipcscan and check yur ips wink.gif
GAN_GR33N
depending on how many computers you are scanning.

if you need to scan alot of boxes i would run "enum.exe" to get usernames.
then use NAT to check for null or weak passwords.

if you only need to scan a few i would try the C.I.S. scanner and disable the modes you don't need
wei
if you use windows, maybe MS Baseline Security Analyzer can satisfy your need smile.gif
virus
I suggest GFI LANGuard. Its has the function to establish 'null sessions'. Check it out .... http://www.gfi.com/lannetscan/
rbk6xs5
wow, lots of great ideas. Thanks everyone! I'll post back the solution I used when I get everything working smile.gif
Edvon
So what solution did u use? wink.gif

Or still not wotking? :|
sylver
î think MS Baseline Security Analyzer is the best solution, then u would also see if u need important updates...
DumpZ
Are u using a MS Windows domaincontroller? cuz else u can just use pwdump2 in combination with l0pthcrack.

pwdump2 can dump the password hashes.
and l0pthcrack cracks them.

If u r not using aan MS Windows domaincontroller use can scan ur networkt with ipcscan.exe
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.

 
Invision Power Board © 2001-2005 Invision Power Services, Inc.