Password attack during the session we will be talking about password attack password the attack is usually
the first attack we are trying.
And if you follow if you follow a specific mythology this could be very effective.
So we're going to see what is the proper way for doing a possible attack that depend on the previous
sections on gathering passive and active information.
So for instance I was able to get my victim IP and my victim IP for instance 1 9 to
1 9 2 1 6 8 1 6 3 8 1 4 0.
OK.
So this my this is my victim IP.
What is the first thing to do.
I need to know the services that is running on his computer so and map minus monies that pennies and
enter.
And we already spoke about and map and what we are getting as an output from it.
If I add captain also I'll be able to get the operating system.
So I saw some like different kinds of services here but I can see that he got port 20 to open.
This is an SS each port.
It's a remote connection tools that allow user to connect remotely but it's encrypted one is a hard
one and I can see that port 23 has a telnet open.
So this is only a remote service but it's not encrypted.
So 23 is years and 22 in many cases you will find 20 to open especially if your victims are out there
and this is most probably the case if you are trying to get to a network from outside the first ip that
you'll be getting would be the outer IP and if you are able to compromise out which is quite easy as
you're going to see in this section then it will be easy for you to map whatever behind this road anyway.
So those services you know allow people to connect remotely but definitely they have a password concept
so I can check I can open another terminal and try to telnet for instance so if I telnet here then get
on the same IP online to that 1 6 8 0 1 6 3 2 1 4 0 I'll be requested to get the user name user name.
It's not easy it is not hard to get.
I mean I explain on the previous section.
Different way to get some valid user name from the victim device from the victim computer or the victim
router.
We saw that on the previous section.
So for instance I know that there is a user under the name of user but what about the password.
So what are we going to do during this section and actually the same case if I try to ask a search for
22 I'll get the same issue.
So let me even show you this terminal.
Let me show you.
So I try to assess each open that I mean then and we're going to type it
assess each then the user name.
This is how tos is Rich and Kelly Linux s IP.
So I need to assess I choosing this user name to this IP.
1 6 3 1 4 0.
And he's requesting a password so definitely both of them are password protected.
Now here is the case before starting using some tools which you're gonna try to use them and see how
effective they are and Kelly the next to crack the password.
Keep trying different password.
We have to use some different technique first.
For instance I can start before using any tools anything to use the some of the common password.
Like for instance password pass from 1 to 7.
From 1 to 9 you know like the things that some people sometimes use.
Yes the probability of having the successful password using this way.
It's not that big but sometimes you talk.
Okay let's say 5 percent.
It may work but you should first try and if you got some information about your victim like you know
some of their family members he is date of birth.
You can try.
Okay but you should not spend that much time doing it.
So this is the first technique to try some of the default.
Some of the puzzles that common puzzle people are using.
So the second way before starting using the tool it's to check for the full puzzle.
If this was a router for instance and from my active information gathering I know the type of the router
I can go to a website like this one router password dot com and I can check the password.
I'm sorry the type.
So for instance if it was a Cisco router or it was dealing with easy school
I saw it somewhere.
Yeah Cisco was here and you can click find the full password.
You'll find a list of password according to the model and according to service so this model on for
instant on telnet got this username and this puzzle.
Now you can check that on your home router because many people think that the default account which
is admin admin if you are using dialing for instead.
I already change it but sometimes you'll find on some router and this is very common by the way more
than wonderful tech.
And this world Web site will help you so you may get tried to get you may try to get a valid username
and password from such web site but assumes that I try a different way and it didn't work.
So can I try to crags was possible and this what we gonna do in the next lecture we're going to try
to crack the easy one first using telnet and then I'm gonna try to crack the encrypted one which is
the SSL.
So let's see how to do that.