ncrack icon indicating copy to clipboard operation
ncrack copied to clipboard

Published 20 hours ago • verified publisher icon nmap

(EID 1) nsock READ error #104 (Connection reset by peer)

Open taylorwin opened this issue 7 years ago • 3 comments

taylor@taylor:~$ ncrack -d10 -U username -P password 192.168.2.123:3389 Fetchfile found username Fetchfile found password

Starting Ncrack 0.6 ( http://ncrack.org ) at 2018-08-15 16:25 CST

ms-wbt-server://192.168.2.123:3389 (EID 1) Initiating new Connection ms-wbt-server://192.168.2.123:3389 pushed to list FULL ms-wbt-server://192.168.2.123:3389 (EID 1) nsock READ error #104 (Connection reset by peer) ms-wbt-server://192.168.2.123:3389 Pool: Append 'administrator' '123abc' ms-wbt-server://192.168.2.123:3389 popped from list FULL ms-wbt-server://192.168.2.123:3389 (EID 1) Attempts: total 0 completed 0 supported 0 --- rate 0.00 ms-wbt-server://192.168.2.123:3389 Pool: extract 'administrator' '123abc' ms-wbt-server://192.168.2.123:3389 (EID 2) Initiating new Connection ms-wbt-server://192.168.2.123:3389 Password list finished! ms-wbt-server://192.168.2.123:3389 pushed to list PAIRFINI ms-wbt-server://192.168.2.123:3389 (EID 2) nsock READ error #104 (Connection reset by peer) ms-wbt-server://192.168.2.123:3389 Pool: Append 'administrator' '123abc' ms-wbt-server://192.168.2.123:3389 popped from list PAIRFINI ms-wbt-server://192.168.2.123:3389 (EID 2) Attempts: total 0 completed 0 supported 0 --- rate 0.00 ms-wbt-server://192.168.2.123:3389 Pool: extract 'administrator' '123abc' ms-wbt-server://192.168.2.123:3389 (EID 3) Initiating new Connection ms-wbt-server://192.168.2.123:3389 pushed to list PAIRFINI ms-wbt-server://192.168.2.123:3389 (EID 3) nsock READ error #104 (Connection reset by peer) ms-wbt-server://192.168.2.123:3389 Pool: Append 'administrator' '123abc' ms-wbt-server://192.168.2.123:3389 popped from list PAIRFINI ms-wbt-server://192.168.2.123:3389 (EID 3) Attempts: total 0 completed 0 supported 0 --- rate 0.00 ms-wbt-server://192.168.2.123:3389 Pool: extract 'administrator' '123abc' ms-wbt-server://192.168.2.123:3389 (EID 4) Initiating new Connection ms-wbt-server://192.168.2.123:3389 pushed to list PAIRFINI ms-wbt-server://192.168.2.123:3389 (EID 4) nsock READ error #104 (Connection reset by peer) ms-wbt-server://192.168.2.123:3389 Pool: Append 'administrator' '123abc' ms-wbt-server://192.168.2.123:3389 popped from list PAIRFINI ms-wbt-server://192.168.2.123:3389 (EID 4) Attempts: total 0 completed 0 supported 0 --- rate 0.00 ms-wbt-server://192.168.2.123:3389 Pool: extract 'administrator' '123abc' ms-wbt-server://192.168.2.123:3389 (EID 5) Initiating new Connection ms-wbt-server://192.168.2.123:3389 pushed to list PAIRFINI ms-wbt-server://192.168.2.123:3389 (EID 5) nsock READ error #104 (Connection reset by peer) ms-wbt-server://192.168.2.123:3389 Pool: Append 'administrator' '123abc' ms-wbt-server://192.168.2.123:3389 popped from list PAIRFINI ms-wbt-server://192.168.2.123:3389 (EID 5) Attempts: total 0 completed 0 supported 0 --- rate 0.00 ms-wbt-server://192.168.2.123:3389 Pool: extract 'administrator' '123abc' ms-wbt-server://192.168.2.123:3389 (EID 6) Initiating new Connection ms-wbt-server://192.168.2.123:3389 pushed to list PAIRFINI ms-wbt-server://192.168.2.123:3389 (EID 6) nsock READ error #104 (Connection reset by peer) ms-wbt-server://192.168.2.123:3389 Pool: Append 'administrator' '123abc' ms-wbt-server://192.168.2.123:3389 popped from list PAIRFINI ms-wbt-server://192.168.2.123:3389 (EID 6) Attempts: total 0 completed 0 supported 0 --- rate 0.00 ms-wbt-server://192.168.2.123:3389 Pool: extract 'administrator' '123abc' ms-wbt-server://192.168.2.123:3389 (EID 7) Initiating new Connection ms-wbt-server://192.168.2.123:3389 pushed to list PAIRFINI ms-wbt-server://192.168.2.123:3389 (EID 7) nsock READ error #104 (Connection reset by peer) ms-wbt-server://192.168.2.123:3389 Pool: Append 'administrator' '123abc' ms-wbt-server://192.168.2.123:3389 popped from list PAIRFINI ms-wbt-server://192.168.2.123:3389 (EID 7) Attempts: total 0 completed 0 supported 0 --- rate 0.00 ms-wbt-server://192.168.2.123:3389 Pool: extract 'administrator' '123abc' ms-wbt-server://192.168.2.123:3389 (EID 8) Initiating new Connection ms-wbt-server://192.168.2.123:3389 pushed to list PAIRFINI ms-wbt-server://192.168.2.123:3389 (EID 8) nsock READ error #104 (Connection reset by peer) ms-wbt-server://192.168.2.123:3389 Pool: Append 'administrator' '123abc' ms-wbt-server://192.168.2.123:3389 popped from list PAIRFINI ms-wbt-server://192.168.2.123:3389 (EID 8) Attempts: total 0 completed 0 supported 0 --- rate 0.00 ms-wbt-server://192.168.2.123:3389 Pool: extract 'administrator' '123abc' ms-wbt-server://192.168.2.123:3389 (EID 9) Initiating new Connection ms-wbt-server://192.168.2.123:3389 pushed to list PAIRFINI ms-wbt-server://192.168.2.123:3389 (EID 9) nsock READ error #104 (Connection reset by peer) ms-wbt-server://192.168.2.123:3389 Pool: Append 'administrator' '123abc' ms-wbt-server://192.168.2.123:3389 popped from list PAIRFINI ms-wbt-server://192.168.2.123:3389 (EID 9) Attempts: total 0 completed 0 supported 0 --- rate 0.00 ms-wbt-server://192.168.2.123:3389 Pool: extract 'administrator' '123abc' ms-wbt-server://192.168.2.123:3389 (EID 10) Initiating new Connection ms-wbt-server://192.168.2.123:3389 pushed to list PAIRFINI ms-wbt-server://192.168.2.123:3389 (EID 10) nsock READ error #104 (Connection reset by peer) ms-wbt-server://192.168.2.123:3389 Pool: Append 'administrator' '123abc'

?

taylorwin avatar Aug 15 '18 08:08 taylorwin

taylor@taylor:~$ ncrack -d10 -U username -P password -p rdp 192.168.2.123 Fetchfile found username Fetchfile found password

Starting Ncrack 0.6 ( http://ncrack.org ) at 2018-08-15 16:34 CST

rdp://192.168.2.123:3389 (EID 1) Initiating new Connection rdp://192.168.2.123:3389 pushed to list FULL rdp://192.168.2.123:3389 (EID 1) nsock READ error #104 (Connection reset by peer) rdp://192.168.2.123:3389 Pool: Append 'administrator' '123abc' rdp://192.168.2.123:3389 popped from list FULL rdp://192.168.2.123:3389 (EID 1) Attempts: total 0 completed 0 supported 0 --- rate 0.00 rdp://192.168.2.123:3389 Pool: extract 'administrator' '123abc' rdp://192.168.2.123:3389 (EID 2) Initiating new Connection rdp://192.168.2.123:3389 Password list finished! rdp://192.168.2.123:3389 pushed to list PAIRFINI rdp://192.168.2.123:3389 (EID 2) nsock READ error #104 (Connection reset by peer) rdp://192.168.2.123:3389 Pool: Append 'administrator' '123abc' rdp://192.168.2.123:3389 popped from list PAIRFINI rdp://192.168.2.123:3389 (EID 2) Attempts: total 0 completed 0 supported 0 --- rate 0.00 rdp://192.168.2.123:3389 Pool: extract 'administrator' '123abc' rdp://192.168.2.123:3389 (EID 3) Initiating new Connection rdp://192.168.2.123:3389 pushed to list PAIRFINI rdp://192.168.2.123:3389 (EID 3) nsock READ error #104 (Connection reset by peer) rdp://192.168.2.123:3389 Pool: Append 'administrator' '123abc' rdp://192.168.2.123:3389 popped from list PAIRFINI rdp://192.168.2.123:3389 (EID 3) Attempts: total 0 completed 0 supported 0 --- rate 0.00 rdp://192.168.2.123:3389 Pool: extract 'administrator' '123abc' rdp://192.168.2.123:3389 (EID 4) Initiating new Connection rdp://192.168.2.123:3389 pushed to list PAIRFINI rdp://192.168.2.123:3389 (EID 4) nsock READ error #104 (Connection reset by peer) rdp://192.168.2.123:3389 Pool: Append 'administrator' '123abc' rdp://192.168.2.123:3389 popped from list PAIRFINI rdp://192.168.2.123:3389 (EID 4) Attempts: total 0 completed 0 supported 0 --- rate 0.00 rdp://192.168.2.123:3389 Pool: extract 'administrator' '123abc' rdp://192.168.2.123:3389 (EID 5) Initiating new Connection rdp://192.168.2.123:3389 pushed to list PAIRFINI rdp://192.168.2.123:3389 (EID 5) nsock READ error #104 (Connection reset by peer) rdp://192.168.2.123:3389 Pool: Append 'administrator' '123abc' rdp://192.168.2.123:3389 popped from list PAIRFINI rdp://192.168.2.123:3389 (EID 5) Attempts: total 0 completed 0 supported 0 --- rate 0.00 rdp://192.168.2.123:3389 Pool: extract 'administrator' '123abc' rdp://192.168.2.123:3389 (EID 6) Initiating new Connection rdp://192.168.2.123:3389 pushed to list PAIRFINI rdp://192.168.2.123:3389 (EID 6) nsock READ error #104 (Connection reset by peer) rdp://192.168.2.123:3389 Pool: Append 'administrator' '123abc' rdp://192.168.2.123:3389 popped from list PAIRFINI rdp://192.168.2.123:3389 (EID 6) Attempts: total 0 completed 0 supported 0 --- rate 0.00 rdp://192.168.2.123:3389 Pool: extract 'administrator' '123abc' rdp://192.168.2.123:3389 (EID 7) Initiating new Connection

taylorwin avatar Aug 15 '18 08:08 taylorwin

is there a workaround for this? i get same result, and doesn't appear to be NLA related

ciberesponce avatar Apr 26 '19 18:04 ciberesponce

I can reproduce this as follows:

docker run --rm --network host -e POSTGRES_HOST_AUTH_METHOD=trust postgres /usr/bin/ncrack -vv -d10 -T3 --user anonymous --pass test -f psql://127.0.0.1:5432

postgres output is continuously:

2022-03-10 23:01:49.129 UTC [7146] FATAL:  role "anonymous" does not exist
2022-03-10 23:01:49.131 UTC [7147] FATAL:  role "anonymous" does not exist
2022-03-10 23:01:49.134 UTC [7148] FATAL:  role "anonymous" does not exist
2022-03-10 23:01:49.137 UTC [7149] FATAL:  role "anonymous" does not exist
2022-03-10 23:01:49.139 UTC [7150] FATAL:  role "anonymous" does not exist
2022-03-10 23:01:49.142 UTC [7151] FATAL:  role "anonymous" does not exist
2022-03-10 23:01:49.145 UTC [7152] FATAL:  role "anonymous" does not exist
2022-03-10 23:01:49.148 UTC [7153] FATAL:  role "anonymous" does not exist
2022-03-10 23:01:49.150 UTC [7154] FATAL:  role "anonymous" does not exist
2022-03-10 23:01:49.153 UTC [7155] FATAL:  role "anonymous" does not exist
2022-03-10 23:01:49.155 UTC [7156] FATAL:  role "anonymous" does not exist
2022-03-10 23:01:49.158 UTC [7157] FATAL:  role "anonymous" does not exist
2022-03-10 23:01:49.161 UTC [7158] FATAL:  role "anonymous" does not exist
2022-03-10 23:01:49.164 UTC [7159] FATAL:  role "anonymous" does not exist

And ncrack output is continously:

psql://127.0.0.1:5432 (EID 730) nsock READ error #104 (Connection reset by peer)
psql://127.0.0.1:5432 Pool: Append 'anonymous' 'test' 
psql://127.0.0.1:5432 popped from list PAIRFINI
psql://127.0.0.1:5432 (EID 730) Attempts: total 0 completed 0 supported 0 --- rate 0.00 
psql://127.0.0.1:5432 Pool: extract 'anonymous' 'test'
psql://127.0.0.1:5432 (EID 731) Initiating new Connection
psql://127.0.0.1:5432 pushed to list PAIRFINI
psql://127.0.0.1:5432 (EID 731) nsock READ error #104 (Connection reset by peer)
psql://127.0.0.1:5432 Pool: Append 'anonymous' 'test' 
psql://127.0.0.1:5432 popped from list PAIRFINI
psql://127.0.0.1:5432 (EID 731) Attempts: total 0 completed 0 supported 0 --- rate 0.00 
psql://127.0.0.1:5432 Pool: extract 'anonymous' 'test'
psql://127.0.0.1:5432 (EID 732) Initiating new Connection
psql://127.0.0.1:5432 pushed to list PAIRFINI
psql://127.0.0.1:5432 (EID 732) nsock READ error #104 (Connection reset by peer)
psql://127.0.0.1:5432 Pool: Append 'anonymous' 'test' 
psql://127.0.0.1:5432 popped from list PAIRFINI
psql://127.0.0.1:5432 (EID 732) Attempts: total 0 completed 0 supported 0 --- rate 0.00 
psql://127.0.0.1:5432 Pool: extract 'anonymous' 'test'
psql://127.0.0.1:5432 (EID 733) Initiating new Connection
psql://127.0.0.1:5432 pushed to list PAIRFINI

$ncrack --version

Ncrack version 0.7 ( http://ncrack.org )
Modules: SSH, RDP, FTP, Telnet, HTTP(S), Wordpress, POP3(S), IMAP, CVS, SMB, VNC, SIP, Redis, PostgreSQL, MQTT, MySQL, MSSQL, MongoDB, Cassandra, WinRM, OWA, DICOM

albertcui avatar Mar 11 '22 00:03 albertcui