Comments on: TSGrinder – Brute Force Terminal Services Server

By: Russ

Russ — Thu, 19 Mar 2009 15:37:58 +0000

One thing you guys can all do to prevent this kind of attack is place a legal notice on your machines. This was originally intended to prevent brute force attacks on Terminal Servers. The program doesn’t know to click ok to continue… I have enabled this and tested with tsgrinder and was unable to get past it…

A. You need to use the registry editor

1. Start the registry editor (regedit)
2. Move to HKEY_LOCAL_MACHINE/SOFTWARE/Microsoft/Windows NT/CurrentVersion/Winlogon
3. Double Click the “LegalNoticeCaption”, and enter the text to be in the title bar, click OK
4. Double Click the “LegalNoticeText”, and enter the warning text and click OK
5. Close the registry and logoff, when you logon you will see the warning

Works every time!

By: Jack Mehogoff

Jack Mehogoff — Thu, 05 Feb 2009 06:01:40 +0000

The newer Version of Windows Remote Desktop doesnt work with TSgrinder, the homos at MS made this possible, uninstall that garbage “update” and your problems will be solved, you cannot use TSgrinder on vista, because it comes with the homo client.

By: CypherBit

CypherBit — Fri, 30 Jan 2009 19:40:36 +0000

I too am getting:

timed_Event_send_recv: Wait failed: TIMEOUT
Couldn

By: Soja

Soja — Tue, 27 Jan 2009 16:34:16 +0000

timed_Event_send_recv: Wait failed: TIMEOUT
Couldn

By: ethicalhack3r

ethicalhack3r — Tue, 25 Nov 2008 14:09:43 +0000

@tal
Looks like it has timed out. Have you tried it on another box? Are you sure that the box your testing has a terminal server running?

By: tal

tal — Sat, 22 Nov 2008 21:20:17 +0000

hi
im getting
timed_Event_send_recv: Wait failed: TIMEOUT
Couldn’t get handle to client window
using xp

did anyone got the solution ?

please help//

By: razta

razta — Sun, 26 Oct 2008 11:56:00 +0000

@navin

“the same server tht U

By: navin

navin — Fri, 24 Oct 2008 12:38:28 +0000

@ razta

the same server tht U’d managed to connect to on XP din’t connect thru vista?? Or was it some diff. server??

Read my last comment

By: razta

razta — Thu, 23 Oct 2008 23:34:13 +0000

Im getting the same error in Vista, worked fine on XP.

By: Navin

Navin — Thu, 04 Sep 2008 15:40:05 +0000

Sure mate…we’re all here after all to help!! ;)
Ya I did have a similar error quite a few times when I tried to run Tsgrinder from my home PC:

“timed_Event_send_recv: Wait Failed: TIMEOUT
Couldn’t get handle to client window”

But it did work from the office PC

I think the problem tht Ure facing is tht the server U’re trying to bruteforce has disabled remote access…..If its a high profile server then probably its unable to serve any more connection requests

Try a diff server…I’d also suggest tht U read up on wht TSgrinder can do…. http://www.blackhat.com/presentations/bh-usa-03/bh-us-03-mullen.pdf

Do report on how it works out,
Cheers :)

PS thnks fr the blog appreciation