hacking contest

hacking exploits security forum
hacking
compliance articles
upgrade backup exec
information security consultant

Pages: 1, 2, 3, 4, 5
Noyluck
Hi,
I've been trying too code this also, but so far no luck because it seems to use difrent encriptions every time you log in

like for example I tryed the pasword 12345678 twice on difrent servers

the first time it gave me :
server:
01 00 00 00 21 2C 1A 42 25 1B 86 2A F2 9A B7 D7 C2 D8 02 19 84 32 B5 C3 CD 74 80 3E 49 C2 E6 FC A5 81 AA 75 93 CC 39 8A A2
client:
01 00 00 00 21 B8 EC 86 A8 09 D2 47 EE 19 84 A3 B2 DB E3 F4 63 D4 4B 0C B4 D7 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

and the second time it gave me :
server:
01 00 00 00 21 78 1A 6D 75 1B F6 6D 0E 88 36 DB 5B BA 11 81 F6 61 6E AA E9 FE 05 E3 A8 6B 08 1F 33 04 E0 70 5E 5F D1 32 F3
client:
01 00 00 00 21 00 9B B6 6E 09 36 27 6F 2D A2 F9 70 81 2B AF 7C 5A B2 CB A3 5D 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00


these are hex codes for the ones that don't understand but as you can see there isn't realy a clear link except for the 01 00 00 00 which I think is a standart RA thingie and the 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 at the end which I think will be so for all paswords


I hope I gave you coders some good info and if you find out how the passes are encoded please mail me and I will make a working tool smile.gif

srr for my crappy English smile.gif
KieMaN
Tanks for the code
L0rD
Fine, so if someone can make a checker it will be a very good job biggrin.gif
Niekos
The programs stopped after a while. I hope VIXVVXIV makes a better/newer version soon smile.gif. Can VIXVVXIV give us some information on upcomming projects? Or are u stopped with the radmin programs?
L0rD
Nobody ?
JMP
QUOTE (L0rD @ Mar 23 2004, 12:04 PM)
Thx men, but where can i find a prog for brute forcing ? Or what one do you use ?

biggrin.gif

Try Brutus. Search on google, first link wink.gif
L0rD
Sorry but with Brutus it's impossible to do something... Maybe i do something wrong...

Can you explain me ?


Sorry for bugging you loool tongue.gif
Slav3r
I carnt seem to get a working URL to download this proggy sad.gif
T3cHn0b0y
delete this post...wrong topic blink.gif
asd10
Yo m8 did you change the pass???icannot log in sad.gif

yeserday i succsed to enter and now i cannot sad.gif

Asd10
Killaloop
QUOTE (asd10 @ Apr 8 2004, 09:22 AM)
Yo m8 did you change the pass???icannot log in sad.gif

yeserday i succsed to enter and now i cannot sad.gif

Asd10

well people should read the answers in the threads and not directly jump to the download link!!!
as written 3 times befor this tool is BACKDOORED
have fun scanning with it, VIXVVXIV will love to see your results
Reckless
jeez people .. someone said this tool is a suspicious one .. and the immediate next post is "Thanks for the tool its great "

How dumb can these people get ..
Just turn on a firewall b4 u start this proggie .. You'll see more activity than there is supposed to be on some ports ..
Fantafour
Whats about a new version ?

I'm getting stuck, when it checks 40-70 IPs... anyone knows why ?

cougar
anyone ever got scans which are vurnerable? I only 2 but i was lucky i guess. /Scanned 2 whole ranges, with 2 results. (which where hackable).

bah sad.gif
hellraiza
cougar I´ve always had the same problem and when I found something vulnerable it was just a client pc.
I didn´t think that there are much servers with radmin blank pass.
a tool with a dictionary attack would be something useful...
whiskah
QUOTE (Killaloop @ Apr 8 2004, 05:30 PM)

well people should read the answers in the threads and not directly jump to the download link!!!
as written 3 times befor this tool is BACKDOORED
have fun scanning with it, VIXVVXIV will love to see your results


I agree with you mate .. seems VIXVVXIV is collecting results from these poor people who don't seem to investigate the tool before using..

This program shouldn't be connecting somewhere else just to verify a pass..

I used textscanner to open the 2nd version and I see this on the code:

www.panten.org
www.panten.org/ip.php3

the last one resolves your IP when u go there

[EDIT]
here's the IP addresses where it connects upon startup

63.208.196.*
195.158.168.*

Reckless
There are loads of win98 machines with radmin blanks .. Only if there was a way to nail em sad.gif

dr0zaxx
Anyone here managed to figure out the protocol used by Remote Administrator? If so, I'll be more glad to code one. With nice functions of course tongue.gif
ILX
having the info to code a radmin telnet session would be very nice since i have the a scanbot for radmin servers.
having a .exe that could send the commands directly to the shell would be great
dr0zaxx
QUOTE
having the info to code a radmin telnet session would be very nice since i have the a scanbot for radmin servers.
having a .exe that could send the commands directly to the shell would be great


How did you code it? Do you have detailed information on the protocol?
NiteWorM
QUOTE
QUOTE (Killaloop @ Apr 8 2004, 05:30 PM)

well people should read the answers in the threads and not directly jump to the download link!!!
as written 3 times befor this tool is BACKDOORED
have fun scanning with it, VIXVVXIV will love to see your results



this tool is extremely dodgy i decided to give it a go and got a few unpassworded box's but i then decided to go back and check the passworded ones and i found a few of them were unpassworded blink.gif this tool seems to unrieable to even be good enough to think about using, its nice to see u make something urself but remove the backdoor and fix it up and it will be all good
asd10
QUOTE (wizy @ Mar 22 2004, 05:29 PM)
I wrote a perl/bash solution. It doesnt check passwords, but it scans for radmin existing.

Ill post it here. Usage is pretty simple. Put radmin.pl and radmin.sh in the same directory. Then run ./radmin.sh FILE SAVEFILE PORT
file is a list of ips, SAVEFILE is the file to output the good ips (ones with radmin on PORT), and port is whatever port you think the radmin is on, like:
./radmin.sh ip-list good-list 4899

Again, this doesnt check passwords. But if anyone wants to add that, go right ahead.

can some1 compile those files that our m8 made?
i didnt succsed to do it:(

thnx in advance!

AsD10
Killaloop
QUOTE (asd10 @ May 9 2004, 07:02 PM)

can some1 compile those files that our m8 made?
i didnt succsed to do it:(

thnx in advance!

AsD10

this is a perl script.
I dont get it, why do people always try to compile scripts?
or don't you understand what a script is, or don't you see the difference between perl and c/c++
btw...what do people use when trying to compile? visual c++ ?

it's really somewhat annoying all this "compile this compile that" question.. doh its perl.
if I would be in charge here I would delete everyone trying to compile a perl script.
oh well

smile.gif

/edit
shite you play with your life j/k
tongue.gif
shite
so how does one compile a perl script wink.gif wink.gif
asd10
i installed ActivePerl-5.6.1.635-MSWin32-x86.msi

saved those files with the name he has given..added the file i told to add...
and its not working:(

AsD10
asd10
no1 can help?
thyr0x1ne
bhaa

sometimes , for little perl script using poor or usual "libraries" , you can use tinyperl on sourceforge.net ( google it ) and compile to make a little binary.

for others script , install activeperl package , then run the script in "console" mode ( at least its not an executable , even if u have active perl on your system ) ... launch it as a DOS console executable ...

nothing more i can add , and im pretty sure all those questions allready had their answers
Baracuda
QUOTE (dr0zaxx @ Apr 15 2004, 10:23 AM)
Anyone here managed to figure out the protocol used by Remote Administrator?

check the src code of some of the phatbot mods out there....
moby5532
man, this discussion led to nothing...
147111
man...these appz are just wonderfull!!! really good work VIXVVXIV !!! hope i`ll be able to too nice stuff like this some day well thanx a lot!!!

just a suggestion : the ability to load ip lists from [is that radmin...] txt files...would spare a lot of time
jaylen0
Hi, Im not able to download from any of the links, any chance someone could post another link to the latest version of this awesome tool?
Reaper527
QUOTE (whiskah @ Apr 14 2004, 05:12 AM)
QUOTE (Killaloop @ Apr 8 2004, 05:30 PM)

well people should read the answers in the threads and not directly jump to the download link!!!
as written 3 times befor this tool is BACKDOORED
have fun scanning with it, VIXVVXIV will love to see your results


I agree with you mate .. seems VIXVVXIV is collecting results from these poor people who don't seem to investigate the tool before using..

This program shouldn't be connecting somewhere else just to verify a pass..

I used textscanner to open the 2nd version and I see this on the code:

www.panten.org
www.panten.org/ip.php3

the last one resolves your IP when u go there

[EDIT]
here's the IP addresses where it connects upon startup

63.208.196.*
195.158.168.*

seems people are saying this is a great tool again, read the post i'm quoting (specificallly reffering to 147111 and jaylen0.)
jaylen0
ouch, too bad... looked like a great little tool. well thanks for the reality check I should have read all of the replies.
twistedps
QUOTE (VIXVVXIV @ Dec 4 2003, 08:12 PM)
QUOTE (zoulou @ Dec 4 2003, 06:01 PM)
your tool working fine, but somethimes on a ip its hangs hole the time

maybe put time out in or something

maybe intressting that the tool can chek some weak passwords like , admin etc

thx VIXVVXIV

ok i have put time out there :-)

here new version

[URL]http://www.fategate.de/IP-Tools/VIXVVXIV/rAdMiN [nOpAsS] iP cHeCkEr v.2 bY_VIXVVXIV.for.governmentsecurity.org.rar[/URL]

your VIXVVXIV ph34r.gif

ive heard rumors this is trojaned and the results get sent back to you... is this true? and can you release the source, i have a hard time finding out how you encrypt the key before sending it when you need to generate an algorythm for the hash.
VIXVVXIV
QUOTE (whiskah @ Apr 14 2004, 05:12 AM)
QUOTE (Killaloop @ Apr 8 2004, 05:30 PM)

well people should read the answers in the threads and not directly jump to the download link!!!
as written 3 times befor this tool is BACKDOORED
have fun scanning with it, VIXVVXIV will love to see your results


I agree with you mate .. seems VIXVVXIV is collecting results from these poor people who don't seem to investigate the tool before using..

This program shouldn't be connecting somewhere else just to verify a pass..

I used textscanner to open the 2nd version and I see this on the code:

www.panten.org
www.panten.org/ip.php3

the last one resolves your IP when u go there

[EDIT]
here's the IP addresses where it connects upon startup

63.208.196.*
195.158.168.*

There are no Backdoors in my Tools !!!

I Use www.panten.org/ip.php3 in many Tools by me biggrin.gif !
i really have forgotten to del this www.panten.org/ip.php3 (Function) !!! tongue.gif

Have Fun smile.gif !!!

Ps.: I have Code a rAdMiN Bruteforce Tool cool.gif it works fine, but it is in Beta Stadium rolleyes.gif !!!

Your VIXVVXIV ph34r.gif
jhd
can you rlz it please
asd10
yo m8,

PLEEEZ rls that-the bruteforce. it will be a very good idea.

meanwhile pls rls new version without those php3. biggrin.gif


thnx in advance,

AsD10
BrAinZ
It looks like someone has managed to change the password on one of my Radmin servers sad.gif

It wasn't exactly a weak password, so I wonder how that happened?

I still have the serv-u FTP server running there, with full access, any obvious way to reset it again?

HMS
hmm, release some new versions m8 smile.gif

i am w8ing for it biggrin.gif

they sound w00t tongue.gif
twistedps
yes, i would like to see a version without any tracking info, thank you.
ivan288
stilll waiting mate....
101
scan RAdmin via command line , i included it into DFind.

http://www.governmentsecurity.org/forum/in...?showtopic=9120

thread closed smile.gif
asd10
yeah....but will still waiting for the pass checker:D biggrin.gif

so? when it will be ready?? biggrin.gif
Stephen79
QUOTE (BrAinZ @ Jun 13 2004, 10:08 AM)
It looks like someone has managed to change the password on one of my Radmin servers sad.gif

It wasn't exactly a weak password, so I wonder how that happened?

I still have the serv-u FTP server running there, with full access, any obvious way to reset it again?

create a small BAT file to overwrite the password key in the registry in the same way I imagine u installed it.

SuXor
Hiii , the link for toolz is dead sad.gif

you are other link ?

twistedps
QUOTE (asd10 @ Jul 1 2004, 02:46 PM)
yeah....but will still waiting for the pass checker:D biggrin.gif

so? when it will be ready?? biggrin.gif

not possible. sends hashes and they differ each time.
panda
HEY ! can someone give me those radmin tools because i lost from my computer and the links from here are DED! Pls Pls Pls mad.gif
mortello
QUOTE (panda @ Aug 4 2004, 05:57 PM)
HEY ! can someone give me those radmin tools because i lost from my computer and the links from here are DED! Pls Pls Pls mad.gif

Did you read the thread, there was a spyware in the program, sending the IPs to someone else....do you really want that

second of all...requesting is not permitted here....you should know that
panda
QUOTE (mortello @ Aug 5 2004, 01:02 AM)
QUOTE (panda @ Aug 4 2004, 05:57 PM)
HEY ! can someone give me those radmin tools because i lost from my computer and the links from here are DED! Pls Pls Pls  mad.gif

Did you read the thread, there was a spyware in the program, sending the IPs to someone else....do you really want that

second of all...requesting is not permitted here....you should know that

i do not know that requesting is not permited, and about those radmin tools i don't know, i don't care, but what i know is that i found many IPs whit them.
VIXVVXIV
Hi,

here is the "Radmin 2.1 bruter v.0.0.1" !

i have upload it

[url=http:///url]

or

hxxp://www.vixtools.de.vu

its only for Radmin 2.1 !

CODE
Radmin v.2.1 brUter by VIXTools v.0.0.1


German / Deutsch - Wichtig
----------------

1.) Sie müssen das Startbild von Radmin deaktivieren,
   bevor Sie Radmin mit "Radmin v.2.1 brUter by VIXTools v.0.0.1" starten !

2.) Sie können ganz normal am PC weiter arbeiten,
   "Radmin v.2.1 brUter by VIXTools v.0.0.1" wird sie nicht behindern;-).

Viel Spaß !!!



English - Important
--------

1.) Befor you work with "Radmin v.2.1 brUter by VIXTools v.0.0.1",
   deactivate on the start of Radmin.exe the splash screen !

2.) During the bruter is running, he doesn´t handicap you by your working!!!

Have fun !!!


Have fun

VIXVVXIV
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.

 
Invision Power Board © 2001-2005 Invision Power Services, Inc.