Because in this room, we're going to try to root for this as a search for our way out.
So first we will do with a map script.
Look at Tennessee and for a.
I know we got this, as I said, but the Tennessee let's copy this and let me get this one.
So let me say less so the usage is different here than a script and script arguments are.
We need to pass the user DBI, uh, users, uh, whorish.
And the positive, which contains the passwords were reached for and against us at the time.
But we're not going to do this.
And the target finally.
So let me keep it like this.
So I have created, uh, two audio files.
Which contains some user names, always keep the admin user and also the name of this Roter user.
So it will be a somewhat gives some advantageous in the password that we have this parcel to password.
And so now we are going to check are these values.
So let's do it in my A.V. MINOCIN.
Be unfair.
Stop taking Lohaus and then that's the script, oh, sorry, behind the podium, which is 22 and now
I'm going to defend the script.
That is, as I said, Brooke.
And I'm going to give this group arguments
users babies equals to.
And I'm going to go this past.
Now, this is where the IP address.
OK, it's praying for the default all that it has.
Maybe we did something wrong.
We need to specifically address the extension.
I don't know.
The niblets.
I think we need to put this the alert to action, otherwise it's not going to recognize.
So let me read them this extension to Rusty.
OK, I know how weird wrong it used to be, Nazi used to be.
OK, now let's bring our poll.
Now you can see Wiretapper sort the very, very current shows.
So sorry for the mistake user.
So it's trying all the combinations and we got this wiretapper as workers just now.
We will see the but, uh, models that is system.
So say use zero and let me say show up.
And already said, gee, are you close to the bilateral ties IP address?
So now we need to set the user, OK, username
user.
OK, we need to set the user file for the only user names and the password for all your passwords.
So let's go ahead and check the said that.
So these are actual options, we have said they are using the in the past.
Right now, let's run this.
OK, does that help without being also so Vyatta password has been successful?
I think it has opened the session desprez.
OK, it has already opened this connection, so clear this we do not want to.
No.
So this is how you use that as a login module for this as a switch, and there is another module, which
is I to underscore publicly.
So if you have the key of the machine, you can just try to brute force it and get the organization.
So I hope you understood.
Now, let's go and try our Hydra and Medusa.
That's a Hydra Hydra minus capital for the user, namely, let's say users not.
Minus capital for passports, not the.
And this is Itakura IP address.
So it has successfully cracked the password, wiarton the password, so you can see the target successfully
completed one very password for.
So let's also see with Medusa disharmonious, which.
Issued for Musafir.
So it's going for each and every user it is seeking are the passwords to each one is to an honest to
everything, as you can see, not regardless of username and password.
Is password seeking also grep for the success like this?
So.
Now, after completion of this, uh, praying, you will get only this right nasal, so which is very
neat.
So it will take some time.
So as you can see, we got only those accessories, we did not get the full values, so like this,
we can brute force using this model are in my script hydrocarbon.
That's up to you.
You use the two girls to get accurate results.
So I hope you have understood.