EvilZone

Hacking and Security => Hacking and Security => : Gr3yH@tf00l July 16, 2014, 03:39:31 AM

: Remote Shutdown
: Gr3yH@tf00l July 16, 2014, 03:39:31 AM
Ok so I've been trying to remotely shutdown a windows computer using my ubuntu laptop. I've been trying: net rpc shutdown -I 192.168.0.XXX -U Hacker        |  This approach is not working and the attached image is the error message I've been getting... Any help would be appreciated
: Re: Remote Shutdown
: Gr3yH@tf00l July 16, 2014, 03:52:17 AM
I thought that was what it was saying also. Since this was just a practice and I was using my own computers I looked up the IP address on the target computer and just to be sure ran nmap on the computer performing the shutdown. My best guess would be that it has something to do with the victim computers firewall. If that is the case any ideas what to do then?
: Re: Remote Shutdown
: voodoo July 16, 2014, 04:11:46 AM
If you have access to the victim computer drop the firewall and test again.
: Re: Remote Shutdown
: Nordic July 16, 2014, 04:35:21 AM
If not Windows firewall as another user mentioned, my money would be on a permissions issue. Consider tcpdump'ing the traffic and attaching the pcap to the thread so that we can see the handshake happen and determine if it is in fact a connectivity issue.

Additionally, check the Windows side for any logs which would indicate a failed login. I'm assuming you're not in a domain environment here.
: Re: Remote Shutdown
: Gr3yH@tf00l July 16, 2014, 06:37:02 PM
So what would I do about the space cause Alien Hacker is the username?
: Re: Remote Shutdown
: Kulverstukas July 16, 2014, 06:43:27 PM
You surround it with double quotes.
: Re: Remote Shutdown
: Gr3yH@tf00l July 16, 2014, 11:42:41 PM
Ok just tried that. The below attachment is what I got.
: Re: Remote Shutdown
: Gr3yH@tf00l July 17, 2014, 12:08:18 AM
Yes I am targeting the other machine with user/pass. But wouldn't it also work to target my own machine?
: Re: Remote Shutdown
: Gr3yH@tf00l July 17, 2014, 01:51:54 AM
So the admin account. That is what I am targeting
: Re: Remote Shutdown
: Gr3yH@tf00l July 20, 2014, 12:36:32 AM
Correct
: Re: Remote Shutdown
: Hashn0x July 26, 2014, 06:37:55 AM
I think you mistyped the password because if you or my second bet is that you are being refused connection because of the administrator permission, you know the alert type of notification about software, connection permissions acces in windows. make sure you are connected to Alien Hacker in order to bypass the security, being admin means you have all privileges.
: Re: Remote Shutdown
: voodoo July 27, 2014, 07:06:11 PM
Correct syntax:
:
net rpc shutdown -I <ip address> -U <username>%<password>
Have you tried dropping the firewall on the victim?
: Re: Remote Shutdown
: proxx July 27, 2014, 07:21:27 PM
I think you mistyped the password because if you or my second bet is that you are being refused connection because of the administrator permission, you know the alert type of notification about software, connection permissions acces in windows. make sure you are connected to Alien Hacker in order to bypass the security, being admin means you have all privileges.
Not entirely true, on windows admin doesnt have full root access only SYSTEM has that.
Which is retared to say the least.
: Re: Remote Shutdown
: voodoo July 27, 2014, 07:44:20 PM
Which is retarded to say the least.

well we are talking about windows.
: Re: Remote Shutdown
: techb July 29, 2014, 01:43:13 PM
You never mentioned what version of Windows your using.
: Re: Remote Shutdown
: Nymeros July 29, 2014, 03:15:47 PM
Try to use dat login: "computername\username"