Comments on: TSGrinder – Brute Force Terminal Services Server http://www.darknet.org.uk/2008/07/tsgrinder-brute-force-terminal-services-server/ Ethical Hacking, Penetration Testing & Computer Security Sun, 08 Nov 2009 07:15:43 +0000 http://wordpress.org/?v=2.8.5 hourly 1 By: Russ http://www.darknet.org.uk/2008/07/tsgrinder-brute-force-terminal-services-server/#comment-134898 Russ Thu, 19 Mar 2009 15:37:58 +0000 http://www.darknet.org.uk/?p=898#comment-134898 One thing you guys can all do to prevent this kind of attack is place a legal notice on your machines. This was originally intended to prevent brute force attacks on Terminal Servers. The program doesn't know to click ok to continue... I have enabled this and tested with tsgrinder and was unable to get past it... A. You need to use the registry editor 1. Start the registry editor (regedit) 2. Move to HKEY_LOCAL_MACHINE/SOFTWARE/Microsoft/Windows NT/CurrentVersion/Winlogon 3. Double Click the "LegalNoticeCaption", and enter the text to be in the title bar, click OK 4. Double Click the "LegalNoticeText", and enter the warning text and click OK 5. Close the registry and logoff, when you logon you will see the warning Works every time! One thing you guys can all do to prevent this kind of attack is place a legal notice on your machines. This was originally intended to prevent brute force attacks on Terminal Servers. The program doesn’t know to click ok to continue… I have enabled this and tested with tsgrinder and was unable to get past it…

A. You need to use the registry editor

1. Start the registry editor (regedit)
2. Move to HKEY_LOCAL_MACHINE/SOFTWARE/Microsoft/Windows NT/CurrentVersion/Winlogon
3. Double Click the “LegalNoticeCaption”, and enter the text to be in the title bar, click OK
4. Double Click the “LegalNoticeText”, and enter the warning text and click OK
5. Close the registry and logoff, when you logon you will see the warning

Works every time!

]]> By: Jack Mehogoff http://www.darknet.org.uk/2008/07/tsgrinder-brute-force-terminal-services-server/#comment-125513 Jack Mehogoff Thu, 05 Feb 2009 06:01:40 +0000 http://www.darknet.org.uk/?p=898#comment-125513 The newer Version of Windows Remote Desktop doesnt work with TSgrinder, the homos at MS made this possible, uninstall that garbage "update" and your problems will be solved, you cannot use TSgrinder on vista, because it comes with the homo client. The newer Version of Windows Remote Desktop doesnt work with TSgrinder, the homos at MS made this possible, uninstall that garbage “update” and your problems will be solved, you cannot use TSgrinder on vista, because it comes with the homo client.

]]> By: CypherBit http://www.darknet.org.uk/2008/07/tsgrinder-brute-force-terminal-services-server/#comment-125483 CypherBit Fri, 30 Jan 2009 19:40:36 +0000 http://www.darknet.org.uk/?p=898#comment-125483 I too am getting: timed_Event_send_recv: Wait failed: TIMEOUT Couldn’t get handle to client window This is on an XP SP3 to a 2003 R2 SP2, any assistance would be greatly appreciated. I too am getting:

timed_Event_send_recv: Wait failed: TIMEOUT
Couldn’t get handle to client window

This is on an XP SP3 to a 2003 R2 SP2, any assistance would be greatly appreciated.

]]> By: Soja http://www.darknet.org.uk/2008/07/tsgrinder-brute-force-terminal-services-server/#comment-125448 Soja Tue, 27 Jan 2009 16:34:16 +0000 http://www.darknet.org.uk/?p=898#comment-125448 timed_Event_send_recv: Wait failed: TIMEOUT Couldn’t get handle to client window i get this error on my win2000 server and also on my XP Laptop. it dus brute force for 1/2 hours but after that it stops and it gives me that error. The remote server has port: 3389 opend and it has remote desktop access enabled. So what is the problem ??? :( i give u money by Paypal or creditcard if u can solve this problem 100% ContacT: johnghowson2@hotmail.com timed_Event_send_recv: Wait failed: TIMEOUT
Couldn’t get handle to client window

i get this error on my win2000 server and also on my XP Laptop.

it dus brute force for 1/2 hours but after that it stops and it gives me that error.

The remote server has port: 3389 opend and it has remote desktop access enabled.

So what is the problem ??? :(

i give u money by Paypal or creditcard if u can solve this problem 100%
ContacT: johnghowson2@hotmail.com

]]> By: ethicalhack3r http://www.darknet.org.uk/2008/07/tsgrinder-brute-force-terminal-services-server/#comment-125137 ethicalhack3r Tue, 25 Nov 2008 14:09:43 +0000 http://www.darknet.org.uk/?p=898#comment-125137 @tal Looks like it has timed out. Have you tried it on another box? Are you sure that the box your testing has a terminal server running? @tal
Looks like it has timed out. Have you tried it on another box? Are you sure that the box your testing has a terminal server running?

]]> By: tal http://www.darknet.org.uk/2008/07/tsgrinder-brute-force-terminal-services-server/#comment-125126 tal Sat, 22 Nov 2008 21:20:17 +0000 http://www.darknet.org.uk/?p=898#comment-125126 hi im getting timed_Event_send_recv: Wait failed: TIMEOUT Couldn't get handle to client window using xp did anyone got the solution ? please help// hi
im getting
timed_Event_send_recv: Wait failed: TIMEOUT
Couldn’t get handle to client window
using xp

did anyone got the solution ?

please help//

]]> By: razta http://www.darknet.org.uk/2008/07/tsgrinder-brute-force-terminal-services-server/#comment-125011 razta Sun, 26 Oct 2008 11:56:00 +0000 http://www.darknet.org.uk/?p=898#comment-125011 @navin "the same server tht U’d managed to connect to on XP din’t connect thru vista??" Yes "Or was it some diff. server??" Same server @navin

“the same server tht U’d managed to connect to on XP din’t connect thru vista??” Yes

“Or was it some diff. server??” Same server

]]> By: navin http://www.darknet.org.uk/2008/07/tsgrinder-brute-force-terminal-services-server/#comment-125002 navin Fri, 24 Oct 2008 12:38:28 +0000 http://www.darknet.org.uk/?p=898#comment-125002 @ razta the same server tht U'd managed to connect to on XP din't connect thru vista?? Or was it some diff. server?? Read my last comment @ razta

the same server tht U’d managed to connect to on XP din’t connect thru vista?? Or was it some diff. server??

Read my last comment

]]> By: razta http://www.darknet.org.uk/2008/07/tsgrinder-brute-force-terminal-services-server/#comment-124995 razta Thu, 23 Oct 2008 23:34:13 +0000 http://www.darknet.org.uk/?p=898#comment-124995 Im getting the same error in Vista, worked fine on XP. Im getting the same error in Vista, worked fine on XP.

]]> By: Navin http://www.darknet.org.uk/2008/07/tsgrinder-brute-force-terminal-services-server/#comment-124741 Navin Thu, 04 Sep 2008 15:40:05 +0000 http://www.darknet.org.uk/?p=898#comment-124741 Sure mate...we're all here after all to help!! ;) Ya I did have a similar error quite a few times when I tried to run Tsgrinder from my home PC: "timed_Event_send_recv: Wait Failed: TIMEOUT Couldn't get handle to client window" But it did work from the office PC I think the problem tht Ure facing is tht the server U're trying to bruteforce has disabled remote access.....If its a high profile server then probably its unable to serve any more connection requests Try a diff server...I'd also suggest tht U read up on wht TSgrinder can do.... http://www.blackhat.com/presentations/bh-usa-03/bh-us-03-mullen.pdf Do report on how it works out, Cheers :) PS thnks fr the blog appreciation Sure mate…we’re all here after all to help!! ;)
Ya I did have a similar error quite a few times when I tried to run Tsgrinder from my home PC:

“timed_Event_send_recv: Wait Failed: TIMEOUT
Couldn’t get handle to client window”

But it did work from the office PC

I think the problem tht Ure facing is tht the server U’re trying to bruteforce has disabled remote access…..If its a high profile server then probably its unable to serve any more connection requests

Try a diff server…I’d also suggest tht U read up on wht TSgrinder can do…. http://www.blackhat.com/presentations/bh-usa-03/bh-us-03-mullen.pdf

Do report on how it works out,
Cheers :)

PS thnks fr the blog appreciation

]]>