Welcome to another attack that we will perform on our anticipatable machine.
And this one is aimed on telnet.
Keep in mind that this vulnerability is only possible due to information disclosure, and you will see
by the end of this video why.
So I got my scan right here and we can see that the telnet is running on Port twenty three, if we check
out the version, it says Linux down at the.
That doesn't seem to give us that much of information about the actual version.
If we just copy this version right here.
Open another terminal.
We could just do the same thing that we did with the FDA version so we could type split and then based
Deverson name.
And it seems that we got two different results.
And from looking at them, they don't seem to be useful for us.
The first one says netiquette down at zero point seventeen and it says in brackets that it's for fedora
thirty one.
And the second one doesn't seem to be something we're looking for either.
We can't get the exact version of Telnet.
So what are we going to do?
Well, we know the telnet requires username and password in order to log in.
So let's maybe try the default credentials to try them and to connect to the telnet port on some machine
we can type in our terminal, let's first clear the screen telnet and then the IP address of the machine
that we want to connect to.
In my case, I want to do that 168.
That one.
That five.
And I press here, enter.
Do you see it not only do we get the banner for the Telnet, but we also get some additional information
that shouldn't be here.
We get the statement that says Log-in with MSF admin, slash MSF admin.
And if you remember this banner and these things are exactly the same as the banner that forget once
we log in to the anticipatable, as you can see right here, these two are exactly the same.
They just hosted the same banner on the telnet open port as well.
So if they already gave us username and password, let's use it, let's see whether it will work on
Telnet if I type MSF admin and MSF admin as the password.
Here we are once again, we are on the anticipatable machine.
Just this time, you will notice that we are not full account, so if we type, who am I?
We are the MSF admin, we are not the food account.
And this is something that we can easily bypass.
If I type the command pseudo assume it will ask me for the password for the MSF admin and we already
know it from the banner.
It is also MSF admin.
I type it in press enter.
And now we are brought to account, as we can see right here, and also for type who am I?
It will tell me we are through the count.
Now, I know what you're thinking.
This is too easy.
Something like this will never happen in real life.
And you are correct.
These types of vulnerabilities will rarely happen.
However, we are slowly processing to higher and higher vulnerabilities.
The last two were just configurations and information disclosure, while the first FCP vulnerability
had a vulnerable software rudnic.
After we finish showing a few more vulnerabilities for the metals political machine, we're going to
go on to the windows machines and you will see that we will manage to exploit them without them having
any additional softwares like Anticipatable does.
So things are soon about to get even more interesting.
See you in the next video.