I have tried many tools and to do not seem to be successful with locking out an account I am testing on my network with an RDP domain. I used crowbar, ncrack and THC hydra but they don't seem to be working accurately. Can someone point me in the right direction on how to approach this for testing?

  • 1
    is the RDP account set up to lock out after a certain number of attempts? – schroeder Aug 20 '18 at 20:13
  • @schroeder yep, they lockout after 5 attempts. – john_zombie Aug 20 '18 at 20:13
  • 1
    have you tried by hand to ensure your end-to-end process is working correctly? – schroeder Aug 20 '18 at 20:17
  • @schroeder I will have my admins try that. If that does not work what would be the next step? – john_zombie Aug 20 '18 at 20:19
  • 3
    If 3 tools do not work, I think you need to start troubleshooting the process, not the tools. Hydra is the gold standard for this task. Either the target, the network, or the common way that you are using all 3 tools should be looked at – schroeder Aug 20 '18 at 20:20

If you are having issues with hydra and ncrack, I might suggest trying Patator, but really you want to troubleshoot what is going on.

For a thorough check that also involves an additional layer of testing, try — https://github.com/SySS-Research/Seth

| improve this answer | |

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.