Comments on: Multithreading in Batch Script, Part 2: Running Code http://caseelse.net/2008/05/22/multithreading-in-batch-script-part-2-running-code/ /*** Code's last stand ***/ Thu, 11 Feb 2010 00:59:44 +0000 http://wordpress.org/?v=2.9.2 hourly 1 By: Awesome Find #7: Multithreading in Batch Scripts | Daily Cup of Tech http://caseelse.net/2008/05/22/multithreading-in-batch-script-part-2-running-code/comment-page-1/#comment-299 Awesome Find #7: Multithreading in Batch Scripts | Daily Cup of Tech Thu, 26 Mar 2009 13:01:46 +0000 http://caseelse.net/?p=21#comment-299 [...] Part 2 [...] [...] Part 2 [...]

]]> By: Neil http://caseelse.net/2008/05/22/multithreading-in-batch-script-part-2-running-code/comment-page-1/#comment-296 Neil Thu, 12 Mar 2009 18:49:30 +0000 http://caseelse.net/?p=21#comment-296 DarC, I assume you mean brute-forcing the password. You probably could (you can do pretty much anything in any language, with enough effort, and possibly some extensions). Thing is, it wouldn't be worthwhile. You can do loops, and pass parameters in bat, so you could drive a command-line version of rar or 7z; but it wouldn't be any easier than in other languages. You can read dictionaries from bat, or make up sequences, but it tends to be harder than in other languages. You could get it all together, but it will tend to be slower than in other languages. Those sort of things will get written in better, faster, more powerful languages, because they really need that. DarC, I assume you mean brute-forcing the password.

You probably could (you can do pretty much anything in any language, with enough effort, and possibly some extensions). Thing is, it wouldn’t be worthwhile.
You can do loops, and pass parameters in bat, so you could drive a command-line version of rar or 7z; but it wouldn’t be any easier than in other languages.
You can read dictionaries from bat, or make up sequences, but it tends to be harder than in other languages.
You could get it all together, but it will tend to be slower than in other languages.
Those sort of things will get written in better, faster, more powerful languages, because they really need that.

]]> By: DarC http://caseelse.net/2008/05/22/multithreading-in-batch-script-part-2-running-code/comment-page-1/#comment-295 DarC Wed, 11 Mar 2009 21:39:22 +0000 http://caseelse.net/?p=21#comment-295 Wondering if there is a way to brute force a 7z or RaR archive with a Bat script... Wondering if there is a way to brute force a 7z or RaR archive with a Bat script…

]]> By: Neil http://caseelse.net/2008/05/22/multithreading-in-batch-script-part-2-running-code/comment-page-1/#comment-93 Neil Fri, 12 Sep 2008 19:12:18 +0000 http://caseelse.net/?p=21#comment-93 Brian,<br> I hope it's helpful. It's more of an oddity than anything else: I use it for quick 'batch scanners' to quickly gather data on a lot of machines (such as if software installed correctly) but I wouldn't do a long-standing project with it.<br> As far as checking a password (the gotcha is below), the standard (not batch) thing to do would be to verify it with one of the <a href="http://msdn.microsoft.com/en-us/library/aa378184(VS.85).aspx" rel="nofollow">LogonUser APIs</a>. With scripts, you don't have so many options (and normally wouldn't want to use them. Putting passwords in text files is working against yourself). You can use the NET USE command, and try to attach a share, or similar things.<br> All of the methods that I know of <strong>will</strong> lockout an account, if they use the wrong password <em>N</em> times. I don't think you're going to bypass that (and I have looked for exactly the same thing)--if you could, it would render useless locking out the passwords at all. If your password locks out after three wrong guesses, (to keep brute force attacks from working) then a function that allows you to just test a password completely bypasses the usefullness of that.<br> If you are using scripts to access file on shares, etc, your best option is to create a user/password for that function, give it the minimal rights it needs to fulfill it's tasks, and don't give it rights to anywhere else. Brian,
I hope it’s helpful. It’s more of an oddity than anything else: I use it for quick ‘batch scanners’ to quickly gather data on a lot of machines (such as if software installed correctly) but I wouldn’t do a long-standing project with it.
As far as checking a password (the gotcha is below), the standard (not batch) thing to do would be to verify it with one of the LogonUser APIs. With scripts, you don’t have so many options (and normally wouldn’t want to use them. Putting passwords in text files is working against yourself). You can use the NET USE command, and try to attach a share, or similar things.
All of the methods that I know of will lockout an account, if they use the wrong password N times. I don’t think you’re going to bypass that (and I have looked for exactly the same thing)–if you could, it would render useless locking out the passwords at all. If your password locks out after three wrong guesses, (to keep brute force attacks from working) then a function that allows you to just test a password completely bypasses the usefullness of that.
If you are using scripts to access file on shares, etc, your best option is to create a user/password for that function, give it the minimal rights it needs to fulfill it’s tasks, and don’t give it rights to anywhere else.

]]> By: Brian http://caseelse.net/2008/05/22/multithreading-in-batch-script-part-2-running-code/comment-page-1/#comment-91 Brian Wed, 10 Sep 2008 19:29:11 +0000 http://caseelse.net/?p=21#comment-91 I have been needed to work on adding some multi threading to a script of mine so this will be very helpfull. But I have a issue that I wonder if you can help with. I need to have a script check to see if a username/password work.  Just so it does not lock out a account.  Have you came accross anything like that before?  Any help would be wonderfull. I have been needed to work on adding some multi threading to a script of mine so this will be very helpfull.
But I have a issue that I wonder if you can help with.
I need to have a script check to see if a username/password work.  Just so it does not lock out a account.  Have you came accross anything like that before?  Any help would be wonderfull.

]]>