27 replies to this topic

[Nova]

I have been working on it for weeks to try and get rid of bugs and stuff, but heres the first beta release of this. please read the -=important=- before using it

    ==================================================="
     =    Nova's Radmin Dictionary Password Hacker     ="
     =    novation@talk21.com                          ="
     =    usage: cscript nrdph.vbs                     ="
     =    password source = password.txt               ="
     ==================================================="

Many Thnks goes out to rafter who joins me here in the trial section, Regards M8


-=IMPORTANT=-

1/ This script runs in cscript, it must be run from the bat file or there will be no way to stop the process

2/ The script takes over your machine, it executes radmin and types in the passwords, you must leave your computer to work while it is attempting to log in,
i hold absolutly no responsibility of the outcomes if you start opening windows and browsing the net ect...

3/ I have setup the script for an optimal connection, if your connection to the server is bad i highly advise you to edit the script and change the sleep parameters

4/ Before starting the script for the first time, radmin.exe has to be setup correctly, /TOOLS/OPTIONS/ "+ Do not show splash screen" "+ Do not start if radmin is already running"

5/ Password.txt will hold your passwords, Please note it can be a long proccess similar to that of TSgrind so choose your passwords wisley

6/ The script can only brute force the single password authentication

7/ Finally, if the script is modified or altered to improve please can you send a copy my way out of gratitude.. Thanks PM for email


Have Phun

http://www.classifiedcars.co.uk/temp/RADMIN.rar

[tshark]

hey. nice script man! I've been looking for something like this for a while. Now for your next step i think you should make a radmin scanner that looks for servers with null passwords (i already know there is one out there) and then the servers it does find with a password would be brute forced with this script.

Keep up the good work!

- T

[belgther]

well but you have to add a proxy changer like brurus does...
because such servers ban your ip temporarily after trying a certain number of passwords

[H3wo]

nice job m8

hope it works..

going to try it.. giving you later info

beardednose says:
Here's the first offical THANKS post of this thread. Don't do it!
Another 10-point winner....

[WeSkeR]

tested on my lan and works fine for me

it takes ages, but nice idea

maybe its possible to add a log for accepted passwords

[R3myBoy]

Tha new radmin (v2.2) is protected against brute force attacks.
So i guess tha tool will only work on 2.1 servs ...

[dennis28]

nice tool

maybe an idea to close the radmin.exe after each attempt and open it again instead of opening a new one everytime and keeping the old one open

or get rid of the connection info when it failed
if you run it now after about five minutes you have about 200 orso radmin.exe opended in your task manager

maybe an idea

[Nova]

after about five minutes you have about 200 orso radmin.exe opended in your task manager

<{POST_SNAPBACK}>

Yeh the beta radmin viewer 3 supplied has the option to only run one radmin at a time and shouldnt open anymore up if there is already one open, #4 in the readme bit,


it was setup, so as when you got the authentication failed popup the script should press <enter> and that should have closed radmin, the problems you are having are timing problems,

/it opens radmin/ waits 1 second / types in password then <enter>/ waits 1 second/ press's <enter> to close radmin/waits 1 second/ goto top.

if you are not connected in time it will issue the next command regardless, timing thingymujiggies. sleep 1000

i understand about 2.2



ahh, instead of logging the passwords of sucessful logins there is another way,

download RAdmin AutoLogin Beta from

hxxp://www.x2software.net/forums/showthread.php?t=46

then modify the code to send keys alt+s before it preeses <enter> to send password and this will save the password in radmin if you sucessfully login,

dunno how to code but it might look something like

WshShell.AppActivate "Enter password for <Entry name>"
WshShell.SendKeys PASSWORD
WshShell.SendKeys "{ALT} & {S}"
WScript.Sleep 1000
WshShell.SendKeys "{ENTER}"
WScript.Sleep 1000
WshShell.SendKeys "{ENTER}"

might work

[dennis28]

thx for the explanation gonna give it a go


edit/
can't seem to get rid of the dialog box "bad password"
if you select the box after each try then it works

is there a code to select the dialog box to let it close after each try ?

[Dirkjan]

Nice script man!
Going to try it out

Another winner! I'm running out of warning points....
BN

[VIXVVXIV]

nicE Nova !

I have Code too a rAdmin bruter for a long time.

its only for Radmin 2.1 !

Radmin v.2.1 brUter by VIXTools v.0.0.1


German / Deutsch - Wichtig
----------------

1.) Sie müssen das Startbild von Radmin deaktivieren,
    bevor Sie Radmin mit "Radmin v.2.1 brUter by VIXTools v.0.0.1" starten !

2.) Sie können ganz normal am PC weiter arbeiten,
    "Radmin v.2.1 brUter by VIXTools v.0.0.1" wird sie nicht behindern;-).

Viel Spaß !!!



English - Important
--------

1.) Befor you work with "Radmin v.2.1 brUter by VIXTools v.0.0.1",
    deactivate on the start of Radmin.exe the splash screen !

2.) During the bruter is running, he doesn´t handicap you by your working!!!

Have fun !!!


Visit http://www.vixtools.de.vu

Have fun

VIXVVXIV

[Nova]

ahh thats nice work VIX

thats the sort of thing i was aiming for

Cheers

[jaune]

thank man for prog nice good !!

merci 1000 fois pour ton prog !

[Zer0Limit]

10X man
I will try this prog and i will see if it good. good idea

[SorCerer]

Logging passwords for Nova's version:

WshShell.AppActivate(str) returns 1 if succeeds. All we have to do is add

If WshShell.AppActivate("Telnet -") Then
WScript.echo "!pass found for " & ip & ":" & line
WshShell.SendKeys "exit"
WScript.Sleep 1000
End If

after the first <WshShell.SendKeys "{ENTER}"> and run the .bat file like this

nrdph.bat > a.txt

Check a.txt after the scanner has finished

-SorCerer