So I tried the like common password and I tried it the full password.
It didn't work.
And you know most probably it may not work if this was like a technical company or does they have a
technical team and they changed it to 4 percent but you still can try it because sometimes it will save
you a lot of effort.
So what you gonna do right now we're gonna try to use a specific tool in calling in which is a very
effective tool.
There is one common tool called the hydra that is most of security Linux distribution but the Hydra
though the problem was Hydra.
It's a common line.
I mean you have to memorize a long comment line but there is a graphical interface of Hydra.
It's very very effective tool.
That is quite easy to use but the first thing I need to do is I need to create a wanted list.
Now the broad list is the tricky part in the password.
If you are if you have the right word or list you will be able to crack a lot of password.
So I'm going to show you first how to use it.
So I'm gonna show how to get a proper word list or even how to create your own customized Ward lists.
That would be very effective.
I created a file under the name of test that 60 and I can open the file using Zune emulator for some
typing Nano the text and nano space text or text me and I put some more there as a simple Ford list.
It's not that big but just showing user that I have a small word list so the word list is the important
part in the password attack and I'm going to do a couple of lecture on how to do the right worthless.
So bear with me.
So I have the order list and now I need to use the tool.
So let me clear the screen.
And let's use the x Hydra which is the graphical interface of Hydra.
Now another point that I need to refer to.
Which is having a valid user name.
I mean if you are not able to get a valid user name you can try is the common one administrator guessed
through backup.
The common one but if you used some technique from the previous section and you able to get a valid
user name you know.
So this will save 50 percent of your effort.
So here I should types.
IP of my victim which is 1 9 2 1 6 8 1 6 3 1 4 0.
And here you need to specify the port that we need to crack I'm gonna start with these 1 telnet telnet
is a remote services allow people to connect remotely except is not encrypted if it's success I'm going
to try the other one because most probably if you are trying to access a router you're going to find
SSL not a net because I should be open because many administrator are using SSL each to connect remotely
to the router and devices and configure them and they think this is a secure way for connection but
you're going to see how to break that.
So I'm gonna start with the easy one which is the net so I'm gonna tell him I need to crack the password
on Port 23 and I need to specify the service from this list and you if you see in the list that has
all the services as from this list we got many services who have each TTP it should be as FTB so whatever
open port you found you can use this tool to collect the services and I will use net.
Here you go.
And then going through the password.
Now as I told you you should have a valid user name.
If not and you are using a random user or a common user like administrator or it will take time and
not necessarily that tool success.
So getting a user name it is very important and I believe we saw that from the previous lecturer.
So anyway so we're gonna try user and for the password.
If you don't have a valid user you can create a user list has the common one admin administrator and
you can click it is user list and point to the user list.
But since I have a valid one I'm going to put it here.
Then in the password I'm going to use a password list click here and choose the location of my password.
It was in the root folder in the hundreds of file name test the text.
That's the text.
And.
Yeah.
Getting back here.
We can choose a couple of option show attempt and be verbose.
This will make the process visible to us what exactly is trying to do which password is trying.
So just an option you can use it or skip it and then going to start and click on Start and he's showing
use a different password that is trying.
It may take time depend on the size of your reward list so if it's a big world list and some of your
list that we gonna share during this section is actually quite big.
So it depends on how big is a file.
So for my kids it shouldn't take that much of time because it's a very small file.
So just let's wait and see
so I take like around 10 minutes and then he told me that user name is user and the password is from
1 to 8.
Let me test that and see if this is for telnet.
So let's see.
So uh I'm gonna break this one and we can use the Net and I'm going to use user name user and the password.
One two three four five six seven eight.
And as you can see I was able to log in Rigo so I can even type diet.
I can type IP config and I am connected to the victim computer
sorry.
So it's not that hard.
To use
the config
as you can see is getting me that DCP IP of the machine I can create folder delete whatever I want and
so on.
So this is how to crack the Telnet on the next lecture.
We're going to see how to correct the.
Because most probably in different system they will not allow telnet anymore.
They will lose as such and people feel very comfortable using as such because it's encrypted connection.
But actually as such can be correct.
So let's see.
Our victim has SSL each port open and let's see if we can correct that or not.