how to use telnet to enumerate a web service

#HOW TO USE TELNET TO ENUMERATE A WEB SERVICE UPGRADE#
#HOW TO USE TELNET TO ENUMERATE A WEB SERVICE SOFTWARE#
#HOW TO USE TELNET TO ENUMERATE A WEB SERVICE PASSWORD#
#HOW TO USE TELNET TO ENUMERATE A WEB SERVICE DOWNLOAD#

We can interact with the session we want by using command “sessions -i id” where id is the session id number. We can see all the sessions we have using command “sessions”. Run the module.Īs you can see in the above image, we successfully got a meterpreter session on the metasploitable system.

Load the following post module and the set the session id as that of telnet shell.

#HOW TO USE TELNET TO ENUMERATE A WEB SERVICE UPGRADE#

Metasploit provides a wonderful option to upgrade a command shell to meterpreter shell. Type command “sessions” to display the sessions we have. You can see that we successfully got a shell just like before. Set all the options we need and execute the module by typing command “run”. Start Metasploit and load the telnet module as shown below. But don’t worry, we can get a meterpreter session on the remote system with the help of Metasploit, of course by exploiting telnet. When I logged in with the credentials msfadmin/msfadmin, as you can see in the below image, I got a normal shell.Īlthough getting a shell on a remote system is good, we can perform limited operations with this type of shells.

#HOW TO USE TELNET TO ENUMERATE A WEB SERVICE PASSWORD#

When I connected to the telnet server of our target system, I didn’t even need any enumeration as the username and password were displayed in the banner. Anyone who successfully logs into telnet will get a shell on the remote system. We can connect to a telnet server from terminal just as we connected to a FTP server using command “telnet IP address”. Using telnet we can remotely communicate with a system far away. It is bi-directional and interactive communication protocol. Telnet is a network protocol used to remotely administer a system. Now I can upload any malicious file to the server and can use it for any nefarious purpose. I once again try to upload the “shell.php” into the FTP directory. It seems this account has admin rights on the FTP server. I first checked the contents of the ftp directory. The password is also “msfadmin” for user msfadmin. Next I decided to try the credentials I got during enumeration.

So anonymous account is secure in this case.

#HOW TO USE TELNET TO ENUMERATE A WEB SERVICE SOFTWARE#

Enabling write permissions to the anonymous account may result in propagation of malware, pirated software etc. So anonymous account has only “read” permissions. As you can see in the above image, file could not be created. Next I use “put” command to upload a random file to the FTP server. I type command “pwd” to see the current ftp directory. Good, anonymous account is enabled on the target. It’s time to check the permissions given to anonymous user. I try to login with the anonymous account with anonymous as the password and the login is successful. We can connect to FTP server through terminal by using command “ftp target address” as shown below. Ok, Since our target is running FTP service, let us first check if anonymous account is enabled on the server. So if any hacker is sniffing on your LAN, he can see the username and password in plain text. Another disadvantage with FTP is that it uses clear text authentication. Enabling anonymous account on FTP server is considered a high security risk especially if the account given not only read but also write permissions. But it a was courtesy to give your email address as password in those days.

#HOW TO USE TELNET TO ENUMERATE A WEB SERVICE DOWNLOAD#

Anonymous download is a type of download where anyone can download the file by logging in with the username of “anonymous” and password as anything. Since FTP is used for sharing files, it has a option to enable anonymous downloads.

It was quite popular as torrents now, only that FTP is a client-server architecture. Although not quite popular now, it was the most popular way of sharing files in yesteryears. As the name implies, it is used to share or transfer files. When we performed a scan with Nmap during scanning and enumeration stage, we have seen that ports 21,22,23 are open and running FTP, Telnet and SSH services respectively.įTP stands for File Transfer Protocol. We will do this by hacking FTP, telnet and SSH services. Before we perform further enumeration, let us see whether these credentials we acquired can help us in gaining access to the remote system. We have performed two types of enumeration till now. 2601 :: Sheltering Sky: Colorado by Night.legendofthereddragon.ca 23 :: Legend of the Red Dragon (Canada).:1701 :: xmltrek (star trek themed game).:1701 :: mtrek (star trek themed game).If you have an interesting item to add, just send an email to. Below you'll find lists of a few places to get you started. Using telnet, you can access a variety of these resources on the internet. The text based internet can be exciting, informative, and fun.

How to use telnet to enumerate a web service