Let's try a higher operating system.
So we have a windows 7 machine.
We're going to scan the machine just to make sure that it has a remote desktop protocol on it.
And Matt minus Miller's Atlas and minus and all was IP which is 1 9 2 1 6 8 1 6 3 2 4 0 3 is 1 4 0.
So it will start the end map and hopefully get the remote desktop protocol is open.
So let's see what we can do.
And we can see that the operating system is 1 to 7.
As you can see down.
So let's see.
I'm going to clear the screen and we can use the same comment except this time I'm going to use a user
name.
So I was a user names that I am sure or I check before.
That's why when we spoke about the passive active information gathering we mentioned that getting a
valid user name will be a very effectively.
And we saw how we can do that using some Alsatian and enumeration and so on.
But if you don't have user name you can trace a default one like password.
I'm sort of like a administrator or a guest or backup or so.
So I'm gonna use the same comment.
I'm just gonna choose IP and change user name.
If you want to
and let's give it a few seconds
and I think he was able to get the password so password is from one to it.
This is one of the possible inside the test that takes t. And let's try it.
So we're going to type the remote desktop type it on
desktop minus you use of ends IP on 9 to 1 6 8 1 6 3 8 1 4 0 3.
And as you can see we have a user here.
Let me try this one
chooses the account or not.
Let me try another one with a user name user and the password from 1 2 8 1 2 3 4 5 6 7 8.
And as you can see we were able to look into the remote desktop.
Now two points here.
We're going to try different services and same concept apply.
And we're going to try different tool as well.
Now the main point here is getting a proper work list and I'm going to show you how to do that and how
to tune your ordered lists.
So it would be more effective and getting a valid user name.
So if you are able to work to resource the tools for cracking will be quite easy.