01-15-2016, 12:56 PM
We will be going over how to scan IP addresses, get password lists and brute the RDP accounts.
Everything is this tutorial will be free and download link is at the bottom of the thread!
Programs in the file that must be used:
![[Image: ee554d426e1397038be5e5fc8a84608d.png]](http://gyazo.com/ee554d426e1397038be5e5fc8a84608d.png)
![[Image: 39281f167718d924e144e0331d4d0ce7.png]](http://gyazo.com/39281f167718d924e144e0331d4d0ce7.png)
![[Image: 5bfee5ea569a8b3074d10d17cc89cd9b.png]](http://gyazo.com/5bfee5ea569a8b3074d10d17cc89cd9b.png)
![[Image: 2ac180f888e466ad5364fbb2e7bf4844.png]](http://gyazo.com/2ac180f888e466ad5364fbb2e7bf4844.png)
![[Image: ce3f848bf2e6fa02569865443c02fb77.png]](http://gyazo.com/ce3f848bf2e6fa02569865443c02fb77.png)
>Step One:
Install the given nmap installation file provided in the archive.
![[Image: 5b89ceb18c8ac5a839a25825e7a2ac4e.png]](http://gyazo.com/5b89ceb18c8ac5a839a25825e7a2ac4e.png)
-Double Click
Follow all the >Steps and be sure to install to here:
![[Image: d182220d0cbbfa5076e31a8eedc6be75.png]](http://gyazo.com/d182220d0cbbfa5076e31a8eedc6be75.png)
>Step Two:
Go to: "Scanner" folder.
You will see:
![[Image: 8a7884bfa809ef7ef639e8b35c82fdaa.png]](http://gyazo.com/8a7884bfa809ef7ef639e8b35c82fdaa.png)
"rdp.nse" is for Nmap, do not edit it
"results" gives open IP addresses that are running an RDP server.
"scanner" is a batch file that runs rdp.nse and saves open IP addresses to "results"
Open scanner and let it run for awhile. I like to wait until results has 10,000 or so IPs.
![[Image: 53f54be72b5264c58994d950e72f13f5.png]](http://gyazo.com/53f54be72b5264c58994d950e72f13f5.png)
>Step Three:
Open up your "results" file
![[Image: ef3d123994d29c4a6b2476298735700b.png]](http://gyazo.com/ef3d123994d29c4a6b2476298735700b.png)
Copy all the text by clicking, "Control and A" then "Control and C".
>Step Four:
Navigate to:
/DuBrute/ips.txt
Now paste all the gathered IPs by clicking, "Control and V".
>Step Five:
Open DuBrute
![[Image: 11472004e08468c83140d925bd9fbabf.png]](http://gyazo.com/11472004e08468c83140d925bd9fbabf.png)
![[Image: 4849edc1212d3dcc48f482b9c2561b35.png]](http://gyazo.com/4849edc1212d3dcc48f482b9c2561b35.png)
>Step Six:
Click: "Generation"
![[Image: 3bd5696de936d8f817f879f62d5203de.png]](http://gyazo.com/3bd5696de936d8f817f879f62d5203de.png)
>Step Seven:
Link the needed files:
![[Image: 57d9cb48fffc9558534b07e59b104add.png]](http://gyazo.com/57d9cb48fffc9558534b07e59b104add.png)
![[Image: 52e58615647b0a71de45a720f56be7a8.png]](http://gyazo.com/52e58615647b0a71de45a720f56be7a8.png)
![[Image: 1b6777846ad640b8b21efbf31b4657f2.png]](http://gyazo.com/1b6777846ad640b8b21efbf31b4657f2.png)
**For the login and password list, I have provided a few lists for you.
passwords.txt has 84x passwords.
This will make cracking each account take a very long time, however, it will have a very high success rate.
![[Image: 5515c4b058e7393ceb2afe8704e956f9.png]](http://gyazo.com/5515c4b058e7393ceb2afe8704e956f9.png)
I also provided a shorter list to speed through lists:
![[Image: 11fe0cb8cfbe6b42a346c949f0036a83.png]](http://gyazo.com/11fe0cb8cfbe6b42a346c949f0036a83.png)
![[Image: b3a0d7a337f9060d53ce73a2606734dc.png]](http://gyazo.com/b3a0d7a337f9060d53ce73a2606734dc.png)
For this example we will be using the shortlist.
Load the shortlist into "User" and "Pass" sections.
Your generation window should look like:
![[Image: 647c289a4531624dac052bdfea4d487f.png]](http://gyazo.com/647c289a4531624dac052bdfea4d487f.png)
>Step Eight:
Put the source file to: test1
![[Image: ec3d85beb3f175aa73dc0f0d0b86d2ae.png]](http://gyazo.com/ec3d85beb3f175aa73dc0f0d0b86d2ae.png)
Click "Make"
![[Image: fde147929612014823aafa88c610f607.png]](http://gyazo.com/fde147929612014823aafa88c610f607.png)
Then click "Exit"
>Step Nine:
Click "Config"
![[Image: c1765e3374571b4ac863d28bfb4997b6.png]](http://gyazo.com/c1765e3374571b4ac863d28bfb4997b6.png)
Put all your settings like mine:
![[Image: 8a6f0873bba31e9c8635a79db33ea3cc.png]](http://gyazo.com/8a6f0873bba31e9c8635a79db33ea3cc.png)
Click "Ok"
>Step Ten:
Start crackin!
![[Image: 1a16dd2db3333e690a2e7022e3303e34.png]](http://gyazo.com/1a16dd2db3333e690a2e7022e3303e34.png)
**
As the program brute forces RDP accounts, it will save them to:
"Hacked"
![[Image: 534924a0a0a52d5d20b3a8a718702cb3.png]](http://gyazo.com/534924a0a0a52d5d20b3a8a718702cb3.png)
Here is my list:
Spoiler (Click to View)
Code:
75.146.169.158@user;user US
87.197.153.20@administrator;123456 Slovakia
209.251.184.123@administrator;1 US
188.231.0.68@admin;12345 kuwait
217.81.132.105@administrator;1: germany
190.26.100.122@admin;1234:colombia
41.198.210.91@test;test: nigeria
188.202.125.188@administrator;letmein: netherland
59.90.112.24@admin;admin
59.162.103.40@admin;admin
124.30.20.236@test;123456
124.124.102.109@administrator;1234
124.124.102.108@administrator;1234
124.125.240.71@admin;admin
59.90.103.242@admin;123456
59.90.86.65@admin;admin
59.90.163.49@admin;admin
59.90.110.239@administrator;admin
59.90.180.220@administrator;123456
59.99.229.143@admin;admin
59.144.88.3@admin;password
59.90.248.39@administrator;admin
59.181.120.97@admin;abcd
59.165.96.205@administrator;123
61.16.236.226@administrator;administrator
59.177.49.222@test;test
59.90.216.33@test;test
59.176.34.9@administrator;password
59.90.121.36@admin;admin
59.90.34.32@administrator;admin
59.99.229.65@test;test
59.90.10.82@admin;admin
59.181.133.58@test;123
59.99.228.53@administrator;123
61.12.2.171@user;12345
61.8.144.252@Administrator;test
59.181.126.110@user;user
125.16.63.230@user;user
59.90.34.32@administrator;admin
59.144.18.22@test;test
Please note, I have sold all of these RDP accounts awhile ago, they most likely will not work anymore.
I hope you enjoyed my tutorial! If you have any questions, feel free to ask me!![[Image: smile.png]](http://hackingforum.ru/images/smilies/smile.png)
>>Download<<
http://rghost.net/47044010
SHA256: 897c0d65042cb24889f43410f0b01927516db81816ce60a13462f6fc7133cd9a
SHA1: 0136960bb17109ead069b377ebe7752663da6238
MD5: b0034e8762aa2f06f602b753de6eb13a
Everything is this tutorial will be free and download link is at the bottom of the thread!
Programs in the file that must be used:
>Step One:
Install the given nmap installation file provided in the archive.
-Double Click
Follow all the >Steps and be sure to install to here:
>Step Two:
Go to: "Scanner" folder.
You will see:
"rdp.nse" is for Nmap, do not edit it
"results" gives open IP addresses that are running an RDP server.
"scanner" is a batch file that runs rdp.nse and saves open IP addresses to "results"
Open scanner and let it run for awhile. I like to wait until results has 10,000 or so IPs.
>Step Three:
Open up your "results" file
Copy all the text by clicking, "Control and A" then "Control and C".
>Step Four:
Navigate to:
/DuBrute/ips.txt
Now paste all the gathered IPs by clicking, "Control and V".
>Step Five:
Open DuBrute
>Step Six:
Click: "Generation"
>Step Seven:
Link the needed files:
**For the login and password list, I have provided a few lists for you.
passwords.txt has 84x passwords.
This will make cracking each account take a very long time, however, it will have a very high success rate.
I also provided a shorter list to speed through lists:
For this example we will be using the shortlist.
Load the shortlist into "User" and "Pass" sections.
Your generation window should look like:
>Step Eight:
Put the source file to: test1
Click "Make"
Then click "Exit"
>Step Nine:
Click "Config"
Put all your settings like mine:
Click "Ok"
>Step Ten:
Start crackin!
**
As the program brute forces RDP accounts, it will save them to:
"Hacked"
Here is my list:
Spoiler (Click to View)
Code:
75.146.169.158@user;user US
87.197.153.20@administrator;123456 Slovakia
209.251.184.123@administrator;1 US
188.231.0.68@admin;12345 kuwait
217.81.132.105@administrator;1: germany
190.26.100.122@admin;1234:colombia
41.198.210.91@test;test: nigeria
188.202.125.188@administrator;letmein: netherland
59.90.112.24@admin;admin
59.162.103.40@admin;admin
124.30.20.236@test;123456
124.124.102.109@administrator;1234
124.124.102.108@administrator;1234
124.125.240.71@admin;admin
59.90.103.242@admin;123456
59.90.86.65@admin;admin
59.90.163.49@admin;admin
59.90.110.239@administrator;admin
59.90.180.220@administrator;123456
59.99.229.143@admin;admin
59.144.88.3@admin;password
59.90.248.39@administrator;admin
59.181.120.97@admin;abcd
59.165.96.205@administrator;123
61.16.236.226@administrator;administrator
59.177.49.222@test;test
59.90.216.33@test;test
59.176.34.9@administrator;password
59.90.121.36@admin;admin
59.90.34.32@administrator;admin
59.99.229.65@test;test
59.90.10.82@admin;admin
59.181.133.58@test;123
59.99.228.53@administrator;123
61.12.2.171@user;12345
61.8.144.252@Administrator;test
59.181.126.110@user;user
125.16.63.230@user;user
59.90.34.32@administrator;admin
59.144.18.22@test;test
Please note, I have sold all of these RDP accounts awhile ago, they most likely will not work anymore.
I hope you enjoyed my tutorial! If you have any questions, feel free to ask me!
>>Download<<
http://rghost.net/47044010
SHA256: 897c0d65042cb24889f43410f0b01927516db81816ce60a13462f6fc7133cd9a
SHA1: 0136960bb17109ead069b377ebe7752663da6238
MD5: b0034e8762aa2f06f602b753de6eb13a
Albania - Kosovo
