(EID 1) nsock READ error #104 (Connection reset by peer)

[nmap]

(EID 1) nsock READ error #104 (Connection reset by peer)

[taylorwin]

taylor@taylor:~$ ncrack -d10 -U username -P password -p rdp 192.168.2.123
Fetchfile found username
Fetchfile found password

Starting Ncrack 0.6 ( http://ncrack.org ) at 2018-08-15 16:34 CST

rdp://192.168.2.123:3389 (EID 1) Initiating new Connection
rdp://192.168.2.123:3389 pushed to list FULL
rdp://192.168.2.123:3389 (EID 1) nsock READ error #104 (Connection reset by peer)
rdp://192.168.2.123:3389 Pool: Append 'administrator' '123abc'
rdp://192.168.2.123:3389 popped from list FULL
rdp://192.168.2.123:3389 (EID 1) Attempts: total 0 completed 0 supported 0 --- rate 0.00
rdp://192.168.2.123:3389 Pool: extract 'administrator' '123abc'
rdp://192.168.2.123:3389 (EID 2) Initiating new Connection
rdp://192.168.2.123:3389 Password list finished!
rdp://192.168.2.123:3389 pushed to list PAIRFINI
rdp://192.168.2.123:3389 (EID 2) nsock READ error #104 (Connection reset by peer)
rdp://192.168.2.123:3389 Pool: Append 'administrator' '123abc'
rdp://192.168.2.123:3389 popped from list PAIRFINI
rdp://192.168.2.123:3389 (EID 2) Attempts: total 0 completed 0 supported 0 --- rate 0.00
rdp://192.168.2.123:3389 Pool: extract 'administrator' '123abc'
rdp://192.168.2.123:3389 (EID 3) Initiating new Connection
rdp://192.168.2.123:3389 pushed to list PAIRFINI
rdp://192.168.2.123:3389 (EID 3) nsock READ error #104 (Connection reset by peer)
rdp://192.168.2.123:3389 Pool: Append 'administrator' '123abc'
rdp://192.168.2.123:3389 popped from list PAIRFINI
rdp://192.168.2.123:3389 (EID 3) Attempts: total 0 completed 0 supported 0 --- rate 0.00
rdp://192.168.2.123:3389 Pool: extract 'administrator' '123abc'
rdp://192.168.2.123:3389 (EID 4) Initiating new Connection
rdp://192.168.2.123:3389 pushed to list PAIRFINI
rdp://192.168.2.123:3389 (EID 4) nsock READ error #104 (Connection reset by peer)
rdp://192.168.2.123:3389 Pool: Append 'administrator' '123abc'
rdp://192.168.2.123:3389 popped from list PAIRFINI
rdp://192.168.2.123:3389 (EID 4) Attempts: total 0 completed 0 supported 0 --- rate 0.00
rdp://192.168.2.123:3389 Pool: extract 'administrator' '123abc'
rdp://192.168.2.123:3389 (EID 5) Initiating new Connection
rdp://192.168.2.123:3389 pushed to list PAIRFINI
rdp://192.168.2.123:3389 (EID 5) nsock READ error #104 (Connection reset by peer)
rdp://192.168.2.123:3389 Pool: Append 'administrator' '123abc'
rdp://192.168.2.123:3389 popped from list PAIRFINI
rdp://192.168.2.123:3389 (EID 5) Attempts: total 0 completed 0 supported 0 --- rate 0.00
rdp://192.168.2.123:3389 Pool: extract 'administrator' '123abc'
rdp://192.168.2.123:3389 (EID 6) Initiating new Connection
rdp://192.168.2.123:3389 pushed to list PAIRFINI
rdp://192.168.2.123:3389 (EID 6) nsock READ error #104 (Connection reset by peer)
rdp://192.168.2.123:3389 Pool: Append 'administrator' '123abc'
rdp://192.168.2.123:3389 popped from list PAIRFINI
rdp://192.168.2.123:3389 (EID 6) Attempts: total 0 completed 0 supported 0 --- rate 0.00
rdp://192.168.2.123:3389 Pool: extract 'administrator' '123abc'
rdp://192.168.2.123:3389 (EID 7) Initiating new Connection

[ciberesponce]

is there a workaround for this? i get same result, and doesn't appear to be NLA related

[albertcui]

I can reproduce this as follows:

docker run --rm --network host -e POSTGRES_HOST_AUTH_METHOD=trust postgres
/usr/bin/ncrack -vv -d10 -T3 --user anonymous --pass test -f psql://127.0.0.1:5432

postgres output is continuously:

2022-03-10 23:01:49.129 UTC [7146] FATAL:  role "anonymous" does not exist
2022-03-10 23:01:49.131 UTC [7147] FATAL:  role "anonymous" does not exist
2022-03-10 23:01:49.134 UTC [7148] FATAL:  role "anonymous" does not exist
2022-03-10 23:01:49.137 UTC [7149] FATAL:  role "anonymous" does not exist
2022-03-10 23:01:49.139 UTC [7150] FATAL:  role "anonymous" does not exist
2022-03-10 23:01:49.142 UTC [7151] FATAL:  role "anonymous" does not exist
2022-03-10 23:01:49.145 UTC [7152] FATAL:  role "anonymous" does not exist
2022-03-10 23:01:49.148 UTC [7153] FATAL:  role "anonymous" does not exist
2022-03-10 23:01:49.150 UTC [7154] FATAL:  role "anonymous" does not exist
2022-03-10 23:01:49.153 UTC [7155] FATAL:  role "anonymous" does not exist
2022-03-10 23:01:49.155 UTC [7156] FATAL:  role "anonymous" does not exist
2022-03-10 23:01:49.158 UTC [7157] FATAL:  role "anonymous" does not exist
2022-03-10 23:01:49.161 UTC [7158] FATAL:  role "anonymous" does not exist
2022-03-10 23:01:49.164 UTC [7159] FATAL:  role "anonymous" does not exist

And ncrack output is continously:

psql://127.0.0.1:5432 (EID 730) nsock READ error #104 (Connection reset by peer)
psql://127.0.0.1:5432 Pool: Append 'anonymous' 'test' 
psql://127.0.0.1:5432 popped from list PAIRFINI
psql://127.0.0.1:5432 (EID 730) Attempts: total 0 completed 0 supported 0 --- rate 0.00 
psql://127.0.0.1:5432 Pool: extract 'anonymous' 'test'
psql://127.0.0.1:5432 (EID 731) Initiating new Connection
psql://127.0.0.1:5432 pushed to list PAIRFINI
psql://127.0.0.1:5432 (EID 731) nsock READ error #104 (Connection reset by peer)
psql://127.0.0.1:5432 Pool: Append 'anonymous' 'test' 
psql://127.0.0.1:5432 popped from list PAIRFINI
psql://127.0.0.1:5432 (EID 731) Attempts: total 0 completed 0 supported 0 --- rate 0.00 
psql://127.0.0.1:5432 Pool: extract 'anonymous' 'test'
psql://127.0.0.1:5432 (EID 732) Initiating new Connection
psql://127.0.0.1:5432 pushed to list PAIRFINI
psql://127.0.0.1:5432 (EID 732) nsock READ error #104 (Connection reset by peer)
psql://127.0.0.1:5432 Pool: Append 'anonymous' 'test' 
psql://127.0.0.1:5432 popped from list PAIRFINI
psql://127.0.0.1:5432 (EID 732) Attempts: total 0 completed 0 supported 0 --- rate 0.00 
psql://127.0.0.1:5432 Pool: extract 'anonymous' 'test'
psql://127.0.0.1:5432 (EID 733) Initiating new Connection
psql://127.0.0.1:5432 pushed to list PAIRFINI

$ncrack --version

Ncrack version 0.7 ( http://ncrack.org )
Modules: SSH, RDP, FTP, Telnet, HTTP(S), Wordpress, POP3(S), IMAP, CVS, SMB, VNC, SIP, Redis, PostgreSQL, MQTT, MySQL, MSSQL, MongoDB, Cassandra, WinRM, OWA, DICOM