Hello everyone. Welcome back. Let's take a
look at the next set of protocols to
postpone that we'll be taking a look at is the element. So
this protocol is used to connect games in your Contours
on the remote server. So this provides bi-directional
interactive session. So typically
tell it can also be useful to login, code alert server using
the user credentials.
So one of the reasons is protocol wide
like this because it is easily deployed and
available on all major operating systems. So,
in such a way, a ready-made tool kit is available in
order to connect to any open ports for
the major drawback of this protocol is that data is sent in
plain text. So this creates an attack Vector for
any attacker to sniff the data that is being transmitted. This
take a simple example of how government works.
I have a Windows command prompt open as a victim and
we'll be trying to connect on to Linux
system running telnet server for
that. I'll just go ahead and start the sniffing.
Now, in order to start the talent connection go
to type in the command tent.
Followed by port number and
type address of the server.
As you see, I am prompted to login session.
Once I log in, I can perform the basic.
Comments at the root cancer type in. So
let's go ahead and snip the traffic.
so, when I sort of typed in PC
that
We have a connection established between the client and the
server that was intercepted and just going to
go ahead and follow this extreme.
So as we can see, we have all
the data in plain text. That is being transmitted. So
in this particular example, I have intentionally put in a weak
password. So the username being rude and password
being a Schwinn which was any plain text. So this sort
of with limitations on the protocol Itself by
the ties, being Penn Central, Plain text
for a Coke cans. New releases information.
Now, let's take a look at the next protocol known as DNS. So
DNS o stands for domain name, so,
So, typically, this protocol is used to map diaper dressed
and the domain host leaves. So
typically as an end user, we cannot remember all
the IP addresses on which different applications run
on. So, rather than that, we
use human readable form such as domain names such as w
dot facebook.com, which can be easily remembered by us
and we can use that in order to access the server. But
ideally, this server is going to resolve the
domain name with IP address. Such that the
To can be established.
So, technically this particular informations are
stored in the hosts file that is available on
different organ systems, which will have the basic mapping
in case. The DNS information
is not available in the
host file. Then we have for DNS servers that are configured on
a router. So with again lead to the mapping.
So technically one of the drawback is that these DNS queries do
not actually track from where information is being requested.
One last protocol that I like
to talk about is as IP address, but this is the
actual IP address that we sort of
use in order to access remote machines, all the
local machine. So that means a
three device. Over the network, has to have an IP address,
either in the local network, or over the internet in
order to establish connection without this. None
of the networking would be possible as of correct.
So one of the drawback of this protocol would be that it can be spoofed. So
technically an attacker can actually, masquerade is
own IP address behaving as another known victim
within the same infrastructure and carry any
specific payload.
That's it for this video. Thank you.