W2kbf.pl bruteforces the Administrator password by targeting either FTP *or* the IPC$ share. This works best on an Windows 2000 target, hence the name, but will work (more slowly) on NT 4.