Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

(EID 1) nsock READ error #104 (Connection reset by peer) #49

Open
taylorwin opened this issue Aug 15, 2018 · 3 comments
Open

(EID 1) nsock READ error #104 (Connection reset by peer) #49

taylorwin opened this issue Aug 15, 2018 · 3 comments

Comments

@taylorwin
Copy link

taylor@taylor:~$ ncrack -d10 -U username -P password 192.168.2.123:3389
Fetchfile found username
Fetchfile found password

Starting Ncrack 0.6 ( http://ncrack.org ) at 2018-08-15 16:25 CST

ms-wbt-server://192.168.2.123:3389 (EID 1) Initiating new Connection
ms-wbt-server://192.168.2.123:3389 pushed to list FULL
ms-wbt-server://192.168.2.123:3389 (EID 1) nsock READ error #104 (Connection reset by peer)
ms-wbt-server://192.168.2.123:3389 Pool: Append 'administrator' '123abc'
ms-wbt-server://192.168.2.123:3389 popped from list FULL
ms-wbt-server://192.168.2.123:3389 (EID 1) Attempts: total 0 completed 0 supported 0 --- rate 0.00
ms-wbt-server://192.168.2.123:3389 Pool: extract 'administrator' '123abc'
ms-wbt-server://192.168.2.123:3389 (EID 2) Initiating new Connection
ms-wbt-server://192.168.2.123:3389 Password list finished!
ms-wbt-server://192.168.2.123:3389 pushed to list PAIRFINI
ms-wbt-server://192.168.2.123:3389 (EID 2) nsock READ error #104 (Connection reset by peer)
ms-wbt-server://192.168.2.123:3389 Pool: Append 'administrator' '123abc'
ms-wbt-server://192.168.2.123:3389 popped from list PAIRFINI
ms-wbt-server://192.168.2.123:3389 (EID 2) Attempts: total 0 completed 0 supported 0 --- rate 0.00
ms-wbt-server://192.168.2.123:3389 Pool: extract 'administrator' '123abc'
ms-wbt-server://192.168.2.123:3389 (EID 3) Initiating new Connection
ms-wbt-server://192.168.2.123:3389 pushed to list PAIRFINI
ms-wbt-server://192.168.2.123:3389 (EID 3) nsock READ error #104 (Connection reset by peer)
ms-wbt-server://192.168.2.123:3389 Pool: Append 'administrator' '123abc'
ms-wbt-server://192.168.2.123:3389 popped from list PAIRFINI
ms-wbt-server://192.168.2.123:3389 (EID 3) Attempts: total 0 completed 0 supported 0 --- rate 0.00
ms-wbt-server://192.168.2.123:3389 Pool: extract 'administrator' '123abc'
ms-wbt-server://192.168.2.123:3389 (EID 4) Initiating new Connection
ms-wbt-server://192.168.2.123:3389 pushed to list PAIRFINI
ms-wbt-server://192.168.2.123:3389 (EID 4) nsock READ error #104 (Connection reset by peer)
ms-wbt-server://192.168.2.123:3389 Pool: Append 'administrator' '123abc'
ms-wbt-server://192.168.2.123:3389 popped from list PAIRFINI
ms-wbt-server://192.168.2.123:3389 (EID 4) Attempts: total 0 completed 0 supported 0 --- rate 0.00
ms-wbt-server://192.168.2.123:3389 Pool: extract 'administrator' '123abc'
ms-wbt-server://192.168.2.123:3389 (EID 5) Initiating new Connection
ms-wbt-server://192.168.2.123:3389 pushed to list PAIRFINI
ms-wbt-server://192.168.2.123:3389 (EID 5) nsock READ error #104 (Connection reset by peer)
ms-wbt-server://192.168.2.123:3389 Pool: Append 'administrator' '123abc'
ms-wbt-server://192.168.2.123:3389 popped from list PAIRFINI
ms-wbt-server://192.168.2.123:3389 (EID 5) Attempts: total 0 completed 0 supported 0 --- rate 0.00
ms-wbt-server://192.168.2.123:3389 Pool: extract 'administrator' '123abc'
ms-wbt-server://192.168.2.123:3389 (EID 6) Initiating new Connection
ms-wbt-server://192.168.2.123:3389 pushed to list PAIRFINI
ms-wbt-server://192.168.2.123:3389 (EID 6) nsock READ error #104 (Connection reset by peer)
ms-wbt-server://192.168.2.123:3389 Pool: Append 'administrator' '123abc'
ms-wbt-server://192.168.2.123:3389 popped from list PAIRFINI
ms-wbt-server://192.168.2.123:3389 (EID 6) Attempts: total 0 completed 0 supported 0 --- rate 0.00
ms-wbt-server://192.168.2.123:3389 Pool: extract 'administrator' '123abc'
ms-wbt-server://192.168.2.123:3389 (EID 7) Initiating new Connection
ms-wbt-server://192.168.2.123:3389 pushed to list PAIRFINI
ms-wbt-server://192.168.2.123:3389 (EID 7) nsock READ error #104 (Connection reset by peer)
ms-wbt-server://192.168.2.123:3389 Pool: Append 'administrator' '123abc'
ms-wbt-server://192.168.2.123:3389 popped from list PAIRFINI
ms-wbt-server://192.168.2.123:3389 (EID 7) Attempts: total 0 completed 0 supported 0 --- rate 0.00
ms-wbt-server://192.168.2.123:3389 Pool: extract 'administrator' '123abc'
ms-wbt-server://192.168.2.123:3389 (EID 8) Initiating new Connection
ms-wbt-server://192.168.2.123:3389 pushed to list PAIRFINI
ms-wbt-server://192.168.2.123:3389 (EID 8) nsock READ error #104 (Connection reset by peer)
ms-wbt-server://192.168.2.123:3389 Pool: Append 'administrator' '123abc'
ms-wbt-server://192.168.2.123:3389 popped from list PAIRFINI
ms-wbt-server://192.168.2.123:3389 (EID 8) Attempts: total 0 completed 0 supported 0 --- rate 0.00
ms-wbt-server://192.168.2.123:3389 Pool: extract 'administrator' '123abc'
ms-wbt-server://192.168.2.123:3389 (EID 9) Initiating new Connection
ms-wbt-server://192.168.2.123:3389 pushed to list PAIRFINI
ms-wbt-server://192.168.2.123:3389 (EID 9) nsock READ error #104 (Connection reset by peer)
ms-wbt-server://192.168.2.123:3389 Pool: Append 'administrator' '123abc'
ms-wbt-server://192.168.2.123:3389 popped from list PAIRFINI
ms-wbt-server://192.168.2.123:3389 (EID 9) Attempts: total 0 completed 0 supported 0 --- rate 0.00
ms-wbt-server://192.168.2.123:3389 Pool: extract 'administrator' '123abc'
ms-wbt-server://192.168.2.123:3389 (EID 10) Initiating new Connection
ms-wbt-server://192.168.2.123:3389 pushed to list PAIRFINI
ms-wbt-server://192.168.2.123:3389 (EID 10) nsock READ error #104 (Connection reset by peer)
ms-wbt-server://192.168.2.123:3389 Pool: Append 'administrator' '123abc'

?
@taylorwin
Copy link
Author

taylor@taylor:~$ ncrack -d10 -U username -P password -p rdp 192.168.2.123
Fetchfile found username
Fetchfile found password

Starting Ncrack 0.6 ( http://ncrack.org ) at 2018-08-15 16:34 CST

rdp://192.168.2.123:3389 (EID 1) Initiating new Connection
rdp://192.168.2.123:3389 pushed to list FULL
rdp://192.168.2.123:3389 (EID 1) nsock READ error #104 (Connection reset by peer)
rdp://192.168.2.123:3389 Pool: Append 'administrator' '123abc'
rdp://192.168.2.123:3389 popped from list FULL
rdp://192.168.2.123:3389 (EID 1) Attempts: total 0 completed 0 supported 0 --- rate 0.00
rdp://192.168.2.123:3389 Pool: extract 'administrator' '123abc'
rdp://192.168.2.123:3389 (EID 2) Initiating new Connection
rdp://192.168.2.123:3389 Password list finished!
rdp://192.168.2.123:3389 pushed to list PAIRFINI
rdp://192.168.2.123:3389 (EID 2) nsock READ error #104 (Connection reset by peer)
rdp://192.168.2.123:3389 Pool: Append 'administrator' '123abc'
rdp://192.168.2.123:3389 popped from list PAIRFINI
rdp://192.168.2.123:3389 (EID 2) Attempts: total 0 completed 0 supported 0 --- rate 0.00
rdp://192.168.2.123:3389 Pool: extract 'administrator' '123abc'
rdp://192.168.2.123:3389 (EID 3) Initiating new Connection
rdp://192.168.2.123:3389 pushed to list PAIRFINI
rdp://192.168.2.123:3389 (EID 3) nsock READ error #104 (Connection reset by peer)
rdp://192.168.2.123:3389 Pool: Append 'administrator' '123abc'
rdp://192.168.2.123:3389 popped from list PAIRFINI
rdp://192.168.2.123:3389 (EID 3) Attempts: total 0 completed 0 supported 0 --- rate 0.00
rdp://192.168.2.123:3389 Pool: extract 'administrator' '123abc'
rdp://192.168.2.123:3389 (EID 4) Initiating new Connection
rdp://192.168.2.123:3389 pushed to list PAIRFINI
rdp://192.168.2.123:3389 (EID 4) nsock READ error #104 (Connection reset by peer)
rdp://192.168.2.123:3389 Pool: Append 'administrator' '123abc'
rdp://192.168.2.123:3389 popped from list PAIRFINI
rdp://192.168.2.123:3389 (EID 4) Attempts: total 0 completed 0 supported 0 --- rate 0.00
rdp://192.168.2.123:3389 Pool: extract 'administrator' '123abc'
rdp://192.168.2.123:3389 (EID 5) Initiating new Connection
rdp://192.168.2.123:3389 pushed to list PAIRFINI
rdp://192.168.2.123:3389 (EID 5) nsock READ error #104 (Connection reset by peer)
rdp://192.168.2.123:3389 Pool: Append 'administrator' '123abc'
rdp://192.168.2.123:3389 popped from list PAIRFINI
rdp://192.168.2.123:3389 (EID 5) Attempts: total 0 completed 0 supported 0 --- rate 0.00
rdp://192.168.2.123:3389 Pool: extract 'administrator' '123abc'
rdp://192.168.2.123:3389 (EID 6) Initiating new Connection
rdp://192.168.2.123:3389 pushed to list PAIRFINI
rdp://192.168.2.123:3389 (EID 6) nsock READ error #104 (Connection reset by peer)
rdp://192.168.2.123:3389 Pool: Append 'administrator' '123abc'
rdp://192.168.2.123:3389 popped from list PAIRFINI
rdp://192.168.2.123:3389 (EID 6) Attempts: total 0 completed 0 supported 0 --- rate 0.00
rdp://192.168.2.123:3389 Pool: extract 'administrator' '123abc'
rdp://192.168.2.123:3389 (EID 7) Initiating new Connection

@ciberesponce
Copy link

is there a workaround for this? i get same result, and doesn't appear to be NLA related

@albertcui
Copy link

albertcui commented Mar 11, 2022 •
edited
Loading

I can reproduce this as follows:

docker run --rm --network host -e POSTGRES_HOST_AUTH_METHOD=trust postgres
/usr/bin/ncrack -vv -d10 -T3 --user anonymous --pass test -f psql://127.0.0.1:5432

postgres output is continuously:

2022-03-10 23:01:49.129 UTC [7146] FATAL:  role "anonymous" does not exist
2022-03-10 23:01:49.131 UTC [7147] FATAL:  role "anonymous" does not exist
2022-03-10 23:01:49.134 UTC [7148] FATAL:  role "anonymous" does not exist
2022-03-10 23:01:49.137 UTC [7149] FATAL:  role "anonymous" does not exist
2022-03-10 23:01:49.139 UTC [7150] FATAL:  role "anonymous" does not exist
2022-03-10 23:01:49.142 UTC [7151] FATAL:  role "anonymous" does not exist
2022-03-10 23:01:49.145 UTC [7152] FATAL:  role "anonymous" does not exist
2022-03-10 23:01:49.148 UTC [7153] FATAL:  role "anonymous" does not exist
2022-03-10 23:01:49.150 UTC [7154] FATAL:  role "anonymous" does not exist
2022-03-10 23:01:49.153 UTC [7155] FATAL:  role "anonymous" does not exist
2022-03-10 23:01:49.155 UTC [7156] FATAL:  role "anonymous" does not exist
2022-03-10 23:01:49.158 UTC [7157] FATAL:  role "anonymous" does not exist
2022-03-10 23:01:49.161 UTC [7158] FATAL:  role "anonymous" does not exist
2022-03-10 23:01:49.164 UTC [7159] FATAL:  role "anonymous" does not exist

And ncrack output is continously:

psql://127.0.0.1:5432 (EID 730) nsock READ error #104 (Connection reset by peer)
psql://127.0.0.1:5432 Pool: Append 'anonymous' 'test' 
psql://127.0.0.1:5432 popped from list PAIRFINI
psql://127.0.0.1:5432 (EID 730) Attempts: total 0 completed 0 supported 0 --- rate 0.00 
psql://127.0.0.1:5432 Pool: extract 'anonymous' 'test'
psql://127.0.0.1:5432 (EID 731) Initiating new Connection
psql://127.0.0.1:5432 pushed to list PAIRFINI
psql://127.0.0.1:5432 (EID 731) nsock READ error #104 (Connection reset by peer)
psql://127.0.0.1:5432 Pool: Append 'anonymous' 'test' 
psql://127.0.0.1:5432 popped from list PAIRFINI
psql://127.0.0.1:5432 (EID 731) Attempts: total 0 completed 0 supported 0 --- rate 0.00 
psql://127.0.0.1:5432 Pool: extract 'anonymous' 'test'
psql://127.0.0.1:5432 (EID 732) Initiating new Connection
psql://127.0.0.1:5432 pushed to list PAIRFINI
psql://127.0.0.1:5432 (EID 732) nsock READ error #104 (Connection reset by peer)
psql://127.0.0.1:5432 Pool: Append 'anonymous' 'test' 
psql://127.0.0.1:5432 popped from list PAIRFINI
psql://127.0.0.1:5432 (EID 732) Attempts: total 0 completed 0 supported 0 --- rate 0.00 
psql://127.0.0.1:5432 Pool: extract 'anonymous' 'test'
psql://127.0.0.1:5432 (EID 733) Initiating new Connection
psql://127.0.0.1:5432 pushed to list PAIRFINI

$ncrack --version

Ncrack version 0.7 ( http://ncrack.org )
Modules: SSH, RDP, FTP, Telnet, HTTP(S), Wordpress, POP3(S), IMAP, CVS, SMB, VNC, SIP, Redis, PostgreSQL, MQTT, MySQL, MSSQL, MongoDB, Cassandra, WinRM, OWA, DICOM

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
3 participants
@ciberesponce @albertcui @taylorwin