Printable View
Quote:
Originally posted here by Zetaphor
Please explain why you need the password, the method I am familiar with is scanning for netios, and then using the NET command to attach the share as a local share.
that would indeed be the method... unless the share was passworded, which it is.
you need a valid username and password to access it.
i have a username - his. i don't have a password - that's my problem.
Power outages don't need to be city-wide.... Create a limited one.... His room isn't on a circuit on it's own.With a bit od research you can determine what other rooms are on the same circuit. By the dexrous use of some high ampage devices, (hairdryers, coffee pots etc.), you can cause the circuit to fail. Once you have the list of devices that you need to add to that circuit at the same time everything else on it is switched on you are ready to work.
Wait till he's gone but your parents are around, pull the power on his box, boot to CD, grab SAM, kill box again, cause power outage, tell your parents what happened, (you need the witnesses..... ;) ), fix everything for your parents but conveniently forget your brother's room and go to your room looking innocent. A few days later you "magically" crack his box......
"Deviousness is the mark of a maturing mind" - me :D
Seems like a lot of work Tiger, wouldn't just installing a keylogger be a little easier? :pQuote:
Originally posted here by Tiger Shark
Power outages don't need to be city-wide.... Create a limited one.... His room isn't on a circuit on it's own.With a bit od research you can determine what other rooms are on the same circuit. By the dexrous use of some high ampage devices, (hairdryers, coffee pots etc.), you can cause the circuit to fail. Once you have the list of devices that you need to add to that circuit at the same time everything else on it is switched on you are ready to work.
Wait till he's gone but your parents are around, pull the power on his box, boot to CD, grab SAM, kill box again, cause power outage, tell your parents what happened, (you need the witnesses..... ;) ), fix everything for your parents but conveniently forget your brother's room and go to your room looking innocent. A few days later you "magically" crack his box......
"Deviousness is the mark of a maturing mind" - me :D
Cheers:
DjM:
Er... He's just going to click on that cute little executable his brother sends him? Naaahh... Still got to access the box somehow to get the keylogger onto it.... Doesn't sound like LoverSpy will work in this case...... ;)Quote:
Seems like a lot of work Tiger, wouldn't just installing a keylogger be a little easier?
I am not sure if this has been mentioned already, but... Could a brute forcer for netbios possibly do the job? If anyone has one, let me know, and I'll check.
eheeh well i guess he uses ie as his browser .... iv seen some nice litle exploits for it ... that download and execute the file so why not try that give him a link an there he looks at it file download execute an done ... iv done it works fine on ie 6.0 so i think that would be the easy way
but tihs with circuit outage ... mmmm i like that way of hack ahha so uniqe
I have to agree with DjM, get hold of a hardware keylogger. Seems like an easier an quicker way to access his computer, but what do I know? :what:
Gothtec, your stubborness to use a NetBIOS brute-forcer is the clear mark of a never-to-be hacker. Think without the box [as a good friend of mine says] when dealing with these things. You want to get access yo your bro's computer, then it does not make a difference how you succeed in that now does it? Even if you do brute-force NetBIOS, any such brute-forcing on the network, be this a real case, would trigger all alarms possible. Logs, IP traces, ISP calls, somebody knocking on your door to seize the equipment.
The best hack is the one that remains undetected, somebody once said. Look into everything said here, get Nessus on your Linux machine and scan your bro's computer, and read through this forum once more.
Again, in a real life situation, it would be less time consuming to phone the company you're trying to break into and tell them of your intentions, if you are going to brute-force on the network like that. There have been some really good suggestions made here, so please read this again.
cheers!
How would the ISP even know? He is doing this INSIDE his own network. It's FIREWALLED to the outside world... How would the ISP even know unless they were snooping around? And since he is quite certain his brother isn't running a firewall, there aren't going to be any firewall logs. And MOST people don't bother to check Event Viewer every day to see how many logins there have been... His hack is not supposed to remain undetected, he WANTS his brother to know about it... Why should he run nessus? He already found the only thing going on with his brothers computer. There is ONE service. He has to get in through that if he wants to get in directly with no user interaction. He has posted considering the other ways of doing it that others posted, and decided none of them will work, and that a brute forcer is the only way to do it...
-[PM.gothtec]-, Another thing you should try is if he ever turns his computer off and is not home (which you don't seem to mention but I'm guessing this doesn't happen) boot to knoppix and get his sam then crack it using JtR or some l0phtcrack or some other program like that...
My favorite brute forcing tool is NAT.exe. I have no idea where I got it but ive used it successfully a number of times. Good Luck