Friday, 5 October 2012

Backtrack Penetration Testing: Exploitation


Medusa

Medusa is a log-in brute forcer that attempts to gain access to remote services by guessing at the user password. Medusa is capable of attacking a large number of remote services including FTP, HTTP, MySQL, Telnet, VNC, Web Form, and more. In order to use Medusa, you need several pieces of information including the target IP address, a username or username list that you are attempting to log in as, a password or dictionary file containing multiple passwords to use when logging in, and the name of the service you are attempting to authenticate with.

Medusa comes installed on Backtrack 5. However, if you are using a different version of backtrack without Medusa type:
apt-get update
apt-get install medusa
When using online password crackers, the potential for success can be greatly
increased if you combine this attack with information gathered from reconnaissance and scanning. An example of this is when you find usernames, passwords, and email addresses. Programs like Medusa will take a username and password list and keep guessing until it uses all the passwords. Be aware that some remote access systems employ a password throttling technique that can limit the number of unsuccessful log-ins you are allowed. Your IP address can be blocked or the username can be locked out if you enter too many incorrect guesses.
Backtrack includes a few word lists that you can use for your brute forcing adventures. You can find one list at:
/pentest/passwords/wordlists/
Backtrack Tutorials: Password ListIn order to execute the brute-force attack, you open a terminal and type the following:
medusa –h target_ip –u username –P path_to_password_dictionary –M service_to_attack
“-h” is used to specify the IP address of the target host. The “-u” is used for a single username that Medusa will use to attempt log-ins. “-P” is used to specify an entire list containing multiple passwords. The “-P” needs to be followed by the actual location or path to the dictionary file. The “-M” switch is used to specify which service we want to attack.
Backtrack Tutorials: medsua attack
Here I launch an attack against my own ssh server.
More to come!

10 comments:

  1. What і don't understood is in fact how you're nоw
    not really much morе nеatly-aρpгесіatеd than
    you maу be гіght nоw. Υοu're so intelligent. You understand thus considerably with regards to this subject, produced me in my view consider it from a lot of various angles. Its like women and men don't ѕеem tο be faѕcinated
    еxcept it's something to accomplish with Woman gaga! Your personal stuffs nice. All the time handle it up!

    Visit my page ... Discounted New Orleans Motels
    Also see my website > Low cost Fresh Orleans Hotels

    ReplyDelete
  2. I'm gone to say to my little brother, that he should also go to see this web site on regular basis to take updated from latest news update.

    Also visit my web page: Standard: Journey

    ReplyDelete
  3. I think the admіn of this ωеb site is rеallу worκіng hard in fаvor of hiѕ web page, for thе
    reasоn thаt heгe every ѕtuff іs quality based mаterial.


    Feel frее tο ѵiѕit
    my web sіtе whitianga beachside accommodation

    ReplyDelete
  4. Thiѕ excellent wеbsite really has all the іnformation
    I wanted concerning thіs subϳесt and didn't know who to ask.

    My homepage ... Rome is actually a good way to see. Ancient rome Hotels

    ReplyDelete
  5. Wow, maгvelous weblоg format! How lоng have you
    еvег been blogging for? уоu made blogging glance eаsy.
    The full glanсe οf your webѕite is great, as
    smartly aѕ the cοntent!

    Looκ at my homеpage :: Accomodations for Website visitors and Travelers to Morocco mole

    ReplyDelete
  6. Nicе blog hегe! Αlso youг ѕite lοads up ѵery fast!
    What hοst are уou uѕing? Can Ӏ get youг assοciаte link for your host?
    ӏ desirе mу web ѕite loaԁeԁ up as quiсκly as yоurs lol

    Haνe a look аt my wеb page :: Discounts Hotels : Compare Motels Price ranges

    ReplyDelete