Skip to content

crowbar don't work with valid credential #83

Description

@Montigomo

hello
try to run crowbar with valid user name and password

┌──(zzzzzzz㉿kali-pve)-[~]
└─$ sudo crowbar -b rdp -u user -c PASSWD -s 192.168.10.92/32 -o good.txt -vv -d
2023-11-22 08:24:39 START
2023-11-22 08:24:39 Crowbar v0.4.2
2023-11-22 08:24:39 Brute Force Type: rdp
2023-11-22 08:24:39      Output File: /home/agitech/crowbar/good.txt
2023-11-22 08:24:39         Log File: /home/agitech/crowbar.log
2023-11-22 08:24:39    Discover Mode: True
2023-11-22 08:24:39     Verbose Mode: 2
2023-11-22 08:24:39       Debug Mode: False
2023-11-22 08:24:39 Discovery mode - port scanning: 192.168.10.92
2023-11-22 08:24:39 Trying 192.168.10.92:3389
2023-11-22 08:24:39 CMD: /usr/bin/xfreerdp /v:192.168.10.92 /port:3389 /u:user /p:PASSWD /cert-ignore -clipboard +auth-only
2023-11-22 08:24:39 LOG-RDP: 192.168.10.92:3389 - user:PASSWD
2023-11-22 08:24:40 STOP
2023-11-22 08:24:40 No results found...

ok, run xfreerdp

/usr/bin/xfreerdp /v:192.168.10.92 /port:3389 /u:user /p:PASSWD /cert-ignore -clipboard +auth-only
[08:33:46:644] [28506:28507] [ERROR][com.freerdp.core] - Authentication only, exit status 0
[08:33:46:644] [28506:28507] [ERROR][com.freerdp.client.x11] - Authentication only, exit status 0
[08:33:46:647] [28506:28506] [ERROR][com.freerdp.core] - freerdp_abort_connect:freerdp_set_last_error_ex ERRCONNECT_CONNECT_CANCELLED [0x0002000B]
[08:33:44:965] [28506:28507] [INFO][com.freerdp.client.x11] - Authentication only. Don't connect to X.

ok then just run and succesefully connect to remote machine rdp.

xfreerdp /f /v:192.168.10.92 /port:3389 /u:user /p:PASSWD /cert-ignore
--- output
[08:42:00:689] [32588:32588] [ERROR][com.freerdp.core] - freerdp_abort_connect:freerdp_set_last_error_ex ERRCONNECT_CONNECT_CANCELLED [0x0002000B]
[08:41:55:333] [32588:32589] [INFO][com.freerdp.gdi] - Local framebuffer format  PIXEL_FORMAT_BGRX32
[08:41:55:333] [32588:32589] [INFO][com.freerdp.gdi] - Remote framebuffer format PIXEL_FORMAT_BGRA32
[08:41:55:395] [32588:32589] [INFO][com.freerdp.channels.rdpsnd.client] - [static] Loaded fake backend for rdpsnd
[08:41:55:395] [32588:32589] [INFO][com.freerdp.channels.drdynvc.client] - Loading Dynamic Virtual Channel rdpgfx

where the shoe pinches?

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions