mirror of
https://github.com/anotherhadi/blog.git
synced 2026-05-20 05:32:32 +02:00
@@ -55,8 +55,8 @@ Check for writable directories: you may be able to upload a webshell if FTP root
|
||||
## Brute Force
|
||||
|
||||
```bash
|
||||
hydra -l $user -P /usr/share/wordlists/rockyou.txt ftp://$IP
|
||||
medusa -h $IP -u $user -P /usr/share/wordlists/rockyou.txt -M ftp
|
||||
hydra -l $user -P ~/wordlists/rockyou.txt ftp://$IP
|
||||
medusa -h $IP -u $user -P ~/wordlists/rockyou.txt -M ftp
|
||||
```
|
||||
|
||||
Try default credentials first: `admin:admin`, `ftp:ftp`, `user:password`.
|
||||
|
||||
@@ -45,8 +45,8 @@ Login with `user` / `password`. Session is fully interactive once authenticated.
|
||||
## Brute Force
|
||||
|
||||
```bash
|
||||
hydra -l $user -P /usr/share/wordlists/rockyou.txt telnet://$IP
|
||||
medusa -h $IP -u $user -P /usr/share/wordlists/rockyou.txt -M telnet
|
||||
hydra -l $user -P ~/wordlists/rockyou.txt telnet://$IP
|
||||
medusa -h $IP -u $user -P ~/wordlists/rockyou.txt -M telnet
|
||||
```
|
||||
|
||||
Try default credentials first. Routers and embedded devices commonly ship with `admin:admin`, `root:root`, or blank passwords.
|
||||
|
||||
Reference in New Issue
Block a user