telnet Analysis
Telnet
Telnet is an old fashioned protocol that usually provides nice and easy shell access to anyone running a telnet server, which is often unauthenticated. It's a hacker's dream!
Too bad you don't see many of them these days, but they are common in CTFs, and on critical infrastructure (jokes?).
Here's a fun telnet demo to show what it is capable of:
$ telnet towel.blinkenlights.nl
Hackers gonna hack. And bored people... well they're gonna bored people.
Steps :
- Begin capturing packets in Wireshark on the correct interface
Run the command: telnet towel.blinkenlights.nl
Once connected, watch for a bit and then end the connection.
Assignment:
What is the standard telnet port?
What happened when the connection started? This might not work if your ISP is blocking telnet. If this didn't work,
bask in this glory.
- What filter is needed to see all traffic between the site and you?
- What did you see if you follow TCP stream?
- Were you able to see anything?
- What are the different protocols that Wireshark dissects for you?
- What happened when the connection ended?
- Was there anything else you found interesting?