Performance Daddy

How to Forge Email with Windows XP Telnet

<div dir="ltr" style="text-align: left;" trbidi="on"><br /><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">Want a computer you can telnet into and mess around with, and not get into trouble no matter what you do to it? I've set up my<br />techbroker.com (206.61.52.33) with user xyz, password guest for you to play with. Here's how to forge email to xyz@techbroker.com using<br />telnet. Start with the command:</span></div><a name="more"></a><o:p></o:p><br />  <div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">C:\>telnet techbroker.com 25<br />Connecting To Techbroker.com<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">220 <techbroker.com> Service ready<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">Now you type in who you want the message to appear to come from:<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">helo santa@techbroker.com<br />Techbroker.com will answer:<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">250 <techbroker.com> host ready<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">Next type in your mail from address:<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">mail from:santa@techbroker.com<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">250 Requested mail action okay, completed<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">Your next command:<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">rcpt to:xyz@techbroker.com<br />250 Requested mail action okay, completed<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">Your next command:<br />data<br />354 Start main input; end with <CRLF>.<CRLF><o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="color: blue; font-family: "Times New Roman","serif"; font-size: 12.0pt;">Newbie note: <CRLF> just means hit return. In case you can't see that little period between the <CRLF>s, what you do to end composing your email is to hit enter, type a period, then hit enter again.</span><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;"><o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">Anyhow, try typing:<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">This is a test.<br />.<br />250 Requested mail action okay, completed<br />quit<br />221 <techbroker.com> Service closing transmission channel<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">Connection to host lost.<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">Using techbroker's mail server, even if you enable full headers, the<br />message we just composed looks like:<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">Status: R<br />X-status: N<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">This is a test.<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">That's a pretty pathetic forged email, huh? No "from", no date.<br />However, you can make your headers better by using a trick with the data command. After you give it, you can insert as many headers as you choose. The trick is easier to show than explain:<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">220 <techbroker.com> Service ready<br />helo santa@northpole.org<br />250 <techbroker.com> host ready<br />mail from:santa@northpole.com<br />250 Requested mail action okay, completed<br />rcpt to:<script language="JavaScript"></script><br />250 Requested mail action okay, completed<br />data<br />354 Start main input; end with <CRLF>.<CRLF><br />from:santa@deer.northpole.org<br />Date: Mon, 21 Oct 2002 10:09:16 -0500<br />Subject: Rudolf<br />This is a Santa test.<br />.<br />250 Requested mail action okay, completed<br />quit<br />221 <techbroker.com> Service closing transmission channel<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">Connection to host lost.<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">The message then looks like:<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">from:santa@deer.northpole.org<br />Date: Mon, 21 Oct 2002 10:09:16 -0500<br />Subject: Rudolf<br />This is a Santa test.<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">The trick is to start each line you want in the headers with one word<br />followed by a colon, and the a line followed by "return". As soon as<br />you write a line that doesn't begin this way, the rest of what you<br />type goes into the body of the email.<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">Notice that the santa@northpole.com from the "mail from:" command didn't show up in the header. Some mail servers would show both "from" addresses.<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">You can forge email on techbroker.com within one strict limitation.<br />Your email has to go to someone at techbroker.com. If you can find any way to send email to someone outside techbroker, let us know, because you will have broken our security, muhahaha! Don't worry, you have my permission.<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">Next, you can read the email you forge on techbroker.com via telnet:<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">C:\>telnet techbroker.com 110<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">+OK <30961.5910984301@techbroker.com> service ready<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">Give this command:<br />user xyz<br />+OK user is known<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">Then type in this:<br />pass test<br />+OK mail drop has 2 message(s)<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">retr 1<br />+OK message follows<br />This is a test.<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">If you want to know all possible commands, give this command:<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">help<br />+OK help list follows<br />USER user<br />PASS password<br />STAT<br />LIST [message]<br />RETR message<br />DELE message<br />NOOP<br />RSET<br />QUIT<br />APOP user md5<br />TOP message lines<br />UIDL [message]<br />HELP<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">Unless you use a weird online provider like AOL, you can use these<br />same tricks to send and receive your own email. Or you can forge email to a friend by telnetting to his or her online provider's email<br />sending computer(s).<o:p></o:p></span></div><div class="MsoNormal" style="margin-bottom: 0.0001pt;"><br /></div></div>

How to Forge Email with Windows XP Telnet

Want a computer you can telnet into and mess around with, and not get into trouble no matter what you do to it? I've set up my techbroke...

How to Telnet with Windows XP

<div dir="ltr" style="text-align: left;" trbidi="on"><br /><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">The queen of hacker commands is telnet. To get Windows help for<br />telnet, in the cmd.exe window give the command:<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">C:\>telnet /?<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">Here's what you will get:<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">telnet [-a][-e escape char][-f log file][-l user][-t term][host<br />[port]]<br />-a Attempt automatic logon. Same as -l option except uses<br />the currently logged on user's name.<br />-e Escape character to enter telnet client prompt.<br />-f File name for client side logging<br />-l Specifies the user name to log in with on the remote system.<br />Requires that the remote system support the TELNET ENVIRON<br />option.<br />-t Specifies terminal type.<br />Supported term types are vt100, vt52, ansi and vtnt only.<br />host Specifies the hostname or IP address of the remote computer<br />to connect to.<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">port Specifies a port number or service name.</span></div><a name="more"></a><o:p></o:p><br />  <div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">****************<br /><span style="color: blue;">Newbie note: what is a port on a computer? A computer port is sort of like a seaport. It's where things can go in and/or out of a computer. Some ports are easy to understand, like keyboard, monitor, printer and modem. Other ports are virtual, meaning that they are created by software. When that modem port of yours (or LAN or ISDN or DSL) is connected to the Internet, your computer has the ability to open or close any of over 65,000 different virtual ports, and has the ability to connect to any of these on another computer - if it is running that port, and if a firewall doesn?t block it.</span><br />****************<br />****************<br /><span style="color: blue;">Newbie note: How do you address a computer over the Internet? There are two ways: by number or by name. </span><br />****************<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">The simplest use of telnet is to log into a remote computer. Give the<br />command:<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">C:/>telnet targetcomputer.com (substituting the name of the computer you want to telnet into for targetcomputer.com)<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">If this computer is set up to let people log into accounts, you may<br />get the message:<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">login:<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">Type your user name here, making sure to be exact. You can't swap between lower case and capital letters. For example, user name Guest is not the same as guest.<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">****************<br /><span style="color: blue;">Newbie note: Lots of people email me asking how to learn what their user name and password are. Stop laughing, darn it, they really do. If you don't know your user name and password, that means whoever runs that computer didn't give you an account and doesn't want you to log on.</span><br />****************<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">Then comes the message:<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">Password:<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">Again, be exact in typing in your password.<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">What if this doesn't work?<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">Every day people write to me complaining they can't telnet. That is<br />usually because they try to telnet into a computer, or a port on a<br />computer that is set up to refuse telnet connections. Here's what it<br />might look like when a computer refuses a telnet connection:<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">C:\ >telnet 10.0.0.3<br />Connecting To 10.0.0.3...Could not open connection to the host, on port 23. A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">Or you might see:<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">C:\ >telnet techbroker.com<br />Connecting To techbroker.com...Could not open connection to the host, on port 23.<br />No connection could be made because the target machine actively<br />refused it.<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">If you just give the telnet command without giving a port number, it<br />will automatically try to connect on port 23, which sometimes runs a<br />telnet server.<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">**************<br /><span style="color: blue;">Newbie note: your Windows computer has a telnet client program,<br />meaning it will let you telnet out of it. However you have to install<br />a telnet server before anyone can telnet into port 23 on your<br />computer.</span><br />*************<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">If telnet failed to connect, possibly the computer you were trying to<br />telnet into was down or just plain no longer in existence. Maybe the<br />people who run that computer don't want you to telnet into it.<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><b><span style="font-family: "Times New Roman","serif"; font-size: 14.0pt;">How to Telnet into a Shell Account</span></b><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;"><o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">Even though you can't telnet into an account inside some computer, often you can get some information back or get that computer to do something interesting for you. Yes, you can get a telnet connection to succeed -without doing anything illegal --against almost any computer, even if you don't have permission to log in. There are many legal things you can do to many randomly chosen computers with telnet. For example:<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">C:/telnet freeshell.org 22<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">SSH-1.99-OpenSSH_3.4p1<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">That tells us the target computer is running an SSH server, which enables encrypted connections between computers. If you want to SSH into an account there, you can get a shell account for free at<br /><u><span style="color: blue;"><http://freeshell.org/></span></u> . You can get a free SSH client program from<br /><u><span style="color: blue;"><http://winfiles.com/></span></u> .<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">One reason most hackers have shell accounts on Internet servers is because you can meet the real hackers there. When you've logged in, give the command w or who. That gives a list of user names. You can talk to other users with tht talk command. Another fun thing, if your shell account allows it, is to give the command<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">ps -auxww<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">It might tell you what commands and processes other users are running. Ask other users what they are doing and they might teach you something. Just be careful not to be a pest!<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">***************<br /><span style="color: red;">You can get punched in the nose warning: Your online provider might kick you off for making telnet probes of other computers. The solution is to get a local online provider and make friends with the people who run it, and convince them you are just doing harmless, legal explorations.</span><br />*************<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">Sometimes a port is running an interesting program, but a firewall won't let you in. For example, 10.0.0.3, a computer on my local area network, runs an email sending program, (sendmail working together with Postfix, and using Kmail to compose emails). I can use it from an account inside 10.0.0.3 to send emails with headers that hide from where I send things.<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">If I try to telnet to this email program from outside this computer,<br />here's what happens:<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">C:\>telnet 10.0.0.3 25<br />Connecting To 10.0.0.3...Could not open connection to the host, on<br />port 25.<br />No connection could be made because the target machine actively<br />refused it.<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">However, if I log into an account on 10.0.0.3 and then telnet from<br />inside to port 25, here's what I get:<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">Last login: Fri Oct 18 13:56:58 2002 from 10.0.0.1<br />Have a lot of fun...<br />cmeinel@test-box:~> telnet localhost 25<br />Trying ::1...<br />telnet: connect to address ::1: Connection refused<br />Trying 127.0.0.1... [Carolyn's note: 127.0.0.1 is the numerical<br />address meaning localhost, the same computer you are logged into]<br />Connected to localhost.<br />Escape character is '^]'.<br />220 test-box.local ESMTP Postfix<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">The reason I keep this port 25 hidden behind a firewall is to keep<br />people from using it to try to break in or to forge email. Now the<br />ubergeniuses reading this will start to make fun of me because no<br />Internet address that begins with 10. is reachable from the Internet.<br />However, sometimes I place this "test-box" computer online with a<br />static Internet address, meaning whenever it is on the Internet, it<br />always has the same numerical address. I'm not going to tell you what its Internet address is because I don't want anyone messing with it. I just want to mess with other people's computers with it, muhahaha. That's also why I always keep my Internet address from showing up in the headers of my emails.<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">***************<br /><span style="color: blue;">Newbie note: What is all this about headers? It's stuff at the<br />beginning of an email that may - or may not - tell you a lot about<br />where it came from and when. To see full headers, in Outlook click<br />view -> full headers. In Eudora, click the "Blah blah blah" icon.</span><br />****************<o:p></o:p></span></div><div class="MsoNormal" style="margin-bottom: 0.0001pt;"><br /></div></div>

How to Telnet with Windows XP

The queen of hacker commands is telnet. To get Windows help for telnet, in the cmd.exe window give the command: C:\>telnet /? Here's ...

Telnet: the Number One Hacker Tool

<div dir="ltr" style="text-align: left;" trbidi="on"><br /><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">In this Guide you will learn:<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in 5pt 0.5in; text-indent: -0.25in;"><span style="font-family: Symbol; font-size: 12.0pt; mso-bidi-font-family: Symbol; mso-fareast-font-family: Symbol;">·<span style="font-family: 'Times New Roman'; font-size: 7pt;">         </span></span><u><span style="color: blue; font-family: "Times New Roman","serif"; font-size: 12.0pt;">What is telnet?</span></u><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;"> <o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in 5pt 0.5in; text-indent: -0.25in;"><span style="font-family: Symbol; font-size: 12.0pt; mso-bidi-font-family: Symbol; mso-fareast-font-family: Symbol;">·<span style="font-family: 'Times New Roman'; font-size: 7pt;">         </span></span><u><span style="color: blue; font-family: "Times New Roman","serif"; font-size: 12.0pt;">How to telnet</span></u><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;"> <o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in 5pt 0.5in; text-indent: -0.25in;"><span style="font-family: Symbol; font-size: 12.0pt; mso-bidi-font-family: Symbol; mso-fareast-font-family: Symbol;">·<span style="font-family: 'Times New Roman'; font-size: 7pt;">         </span></span><u><span style="color: blue; font-family: "Times New Roman","serif"; font-size: 12.0pt;">How to get telnet accounts <begin11c.shtml></span></u><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;"> <o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in 5pt 0.5in; text-indent: -0.25in;"><span style="font-family: Symbol; font-size: 12.0pt; mso-bidi-font-family: Symbol; mso-fareast-font-family: Symbol;">·<span style="font-family: 'Times New Roman'; font-size: 7pt;">         </span></span><u><span style="color: blue; font-family: "Times New Roman","serif"; font-size: 12.0pt;">Why you might not want to telnet <begin11c.shtml></span></u><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;"> <o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in 5pt 0.5in; text-indent: -0.25in;"><span style="font-family: Symbol; font-size: 12.0pt; mso-bidi-font-family: Symbol; mso-fareast-font-family: Symbol;">·<span style="font-family: 'Times New Roman'; font-size: 7pt;">         </span></span><u><span style="color: blue; font-family: "Times New Roman","serif"; font-size: 12.0pt;">How to install a telnet server on your home Windows computer <begin11c.shtml></span></u><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;"> <o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in 5pt 0.5in; text-indent: -0.25in;"><span style="font-family: Symbol; font-size: 12.0pt; mso-bidi-font-family: Symbol; mso-fareast-font-family: Symbol;">·<span style="font-family: 'Times New Roman'; font-size: 7pt;">         </span></span><u><span style="color: blue; font-family: "Times New Roman","serif"; font-size: 12.0pt;">How to turn off a telnet server on your home Linux computer <begin11d.shtml></span></u><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;"> <o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in 5pt 0.5in; text-indent: -0.25in;"><span style="font-family: Symbol; font-size: 12.0pt; mso-bidi-font-family: Symbol; mso-fareast-font-family: Symbol;">·<span style="font-family: 'Times New Roman'; font-size: 7pt;">         </span></span><u><span style="color: blue; font-family: "Times New Roman","serif"; font-size: 12.0pt;">How to explore computers using telnet <begin11d.shtml></span></u><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;"> <o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in 5pt 0.5in; text-indent: -0.25in;"><span style="font-family: Symbol; font-size: 12.0pt; mso-bidi-font-family: Symbol; mso-fareast-font-family: Symbol;">·<span style="font-family: 'Times New Roman'; font-size: 7pt;">         </span></span><u><span style="color: blue; font-family: "Times New Roman","serif"; font-size: 12.0pt;">Why not use a portscanner instead? <begin11f.shtml></span></u><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;"> <o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in 5pt 0.5in; text-indent: -0.25in;"><span style="font-family: Symbol; font-size: 12.0pt; mso-bidi-font-family: Symbol; mso-fareast-font-family: Symbol;">·<span style="font-family: 'Times New Roman'; font-size: 7pt;">         </span></span><u><span style="color: blue; font-family: "Times New Roman","serif"; font-size: 12.0pt;">How to break into web sites using telnet <begin11f.shtml></span></u><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;"> <o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">"Where do I type that command?" People ask that all the time when they read my early Guides to (mostly) Harmless Hacking. I wrote those guides back when the Internet was in its infancy and almost everyone in cyberspace used telnet. However, nowadays you might never even hear about telnet, much less use it, unless you are a hacker. So if you are still wondering about telnet, today is your lucky day.</span></div><a name="more"></a><o:p></o:p><br />  <div class="MsoNormal" style="margin: 5pt 0in;"><b><span style="font-family: "Times New Roman","serif"; font-size: 14.0pt;">What Is Telnet?</span></b><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;"><o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">Telnet is a protocol that is most commonly used to log into a remote computer. It also is the single most powerful hacking tool on the planet. With just a telnet client program, you can:<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in 5pt 0.5in; text-indent: -0.25in;"><span style="font-family: Symbol; font-size: 12.0pt; mso-bidi-font-family: Symbol; mso-fareast-font-family: Symbol;">·<span style="font-family: 'Times New Roman'; font-size: 7pt;">         </span></span><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">send email <o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in 5pt 0.5in; text-indent: -0.25in;"><span style="font-family: Symbol; font-size: 12.0pt; mso-bidi-font-family: Symbol; mso-fareast-font-family: Symbol;">·<span style="font-family: 'Times New Roman'; font-size: 7pt;">         </span></span><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">download source code from web sites <o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in 5pt 0.5in; text-indent: -0.25in;"><span style="font-family: Symbol; font-size: 12.0pt; mso-bidi-font-family: Symbol; mso-fareast-font-family: Symbol;">·<span style="font-family: 'Times New Roman'; font-size: 7pt;">         </span></span><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">send unexpected input to webservers that can give you amazing and sometimes illegal results <o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in 5pt 0.5in; text-indent: -0.25in;"><span style="font-family: Symbol; font-size: 12.0pt; mso-bidi-font-family: Symbol; mso-fareast-font-family: Symbol;">·<span style="font-family: 'Times New Roman'; font-size: 7pt;">         </span></span><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">give arbitrary input to many other services on Internet host computers <o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in 5pt 0.5in; text-indent: -0.25in;"><span style="font-family: Symbol; font-size: 12.0pt; mso-bidi-font-family: Symbol; mso-fareast-font-family: Symbol;">·<span style="font-family: 'Times New Roman'; font-size: 7pt;">         </span></span><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">probe the services offered by servers, routers and even people's home computers. <o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><b><span style="font-family: "Times New Roman","serif"; font-size: 14.0pt;">How to Telnet</span></b><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;"><o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">Don't know how to telnet? Click the easy telnet links at happyhacker.com and land in the middle of a real hacker wargame! This should work regardless of your computer operating system -- if you have an up to date browser, if your online service provider gives you a true Internet connection, and if your computer is able to telnet at all.<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">Did those links get you into a telnet session? Were you able to login to a remote computer? If yes, congratulations.<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">If not, how can you fix the problem? If no telnet program appeared on your monitor when you clicked these links, perhaps your browser is too ancient to allow telnet. Try installing the latest Netscape browser (<u><span style="color: blue;"><http://www.netscape.com/></span></u>). Or, perhaps your operating system does not include a telnet program. In that case, install or reinstall Windows 95 or 98. If you own a Mac, get the superb Mac OS X or Linux PPC (<u><span style="color: blue;"><http://www.linuxppc.com/></span></u>).<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">If a telnet program came up and failed to connect, possibly the computer you were trying to telnet into was down or just plain no longer in existence. Or, you may be using America Online (or a similar extremely poor online service). If so, your simplest solution may be to get a better online service provider. Determined to hack using AOL? <u><span style="color: blue;">See http://happyhacker.org/aol.shtml <../aol.shtml></span></u> for some ways to make AOL give you a true Internet connection.<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">OK, so you've managed to telnet for the first time. Presumably you don't want to limit yourself to telnet links on web sites. How do you telnet anywhere you want to go?<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">If you have Linux or any other type of Unix (BSD, SCO, Solaris, Sun OS, Irix, Ultrix, etc.) telneting is easy. Just bring up "console" or "shell" (or whatever your GUI calls the command line interface). At the prompt type:<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">telnet <hostname or IP address><o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><b><span style="font-family: "Comic Sans MS"; font-size: 14.0pt; mso-bidi-font-family: "Comic Sans MS";">More on Telnet: the Number One Hacker Tool</span></b><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;"><o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">Windows 2000 works pretty much like Unix. See Figure 1 for an example of a Win 2000 telnet login. Not shown on the screen was the command "telnet 10.0.0.10", which I gave at the Command (MS-DOS) prompt.<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">Figure 1: Telnet using Windows 2000<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">If you have Windows 95, 98 or NT, to telnet, bring up the MS-DOS prompt (Start --> Programs --> MS-DOS). <br /><br />Click "connect" then "remote system…". In the host name box place the host name or IP address of the computer to which you wish to telnet. Leave the Port and Term Type boxes alone for now.<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">Here is a really important point. Every day people email me complaining that some computer won't let them telnet into it. They ask what they are doing wrong. They aren't doing anything wrong:<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in 5pt 0.5in; text-indent: -0.25in;"><span style="font-family: Symbol; font-size: 12.0pt; mso-bidi-font-family: Symbol; mso-fareast-font-family: Symbol;">·<span style="font-family: 'Times New Roman'; font-size: 7pt;">         </span></span><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">Maybe the computer they are trying to reach no longer exists. <o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in 5pt 0.5in; text-indent: -0.25in;"><span style="font-family: Symbol; font-size: 12.0pt; mso-bidi-font-family: Symbol; mso-fareast-font-family: Symbol;">·<span style="font-family: 'Times New Roman'; font-size: 7pt;">         </span></span><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">Maybe the computer they are trying to reach doesn't allow telnet logins. For example, whois.internic.net no longer allows telnet logins on port 23 (the default port). <u><span style="color: blue;">Click here to learn how to telnet into whois.internic.net on the right port for that particular server. <../whois.shtml></span></u> <o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in 5pt 0.5in; text-indent: -0.25in;"><span style="font-family: Symbol; font-size: 12.0pt; mso-bidi-font-family: Symbol; mso-fareast-font-family: Symbol;">·<span style="font-family: 'Times New Roman'; font-size: 7pt;">         </span></span><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">Maybe a firewall is blocking them. <o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in 5pt 0.5in; text-indent: -0.25in;"><span style="font-family: Symbol; font-size: 12.0pt; mso-bidi-font-family: Symbol; mso-fareast-font-family: Symbol;">·<span style="font-family: 'Times New Roman'; font-size: 7pt;">         </span></span><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">Or maybe they make a telnet connection and the remote computer asks for a user name and password they don't have. Then they email me asking for how to get a login name and password that will work. <o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="color: magenta; font-family: "Times New Roman","serif"; font-size: 12.0pt;">Newbie note: The owners or administrators of any Internet host computer decide who gets user names and passwords. Believe it or not, about once a week someone emails me asking what user name and password their own online service provider has assigned them for a telnet login. That's why I'm telling people the obvious -- if you want to telnet into any computer, and you don't have a user name and password, you must ask the owner, administrator of tech support for that system for a user name and password. If they won't give that to you, they don't want you to have it!</span><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;"><o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><b><i><span style="color: red; font-family: "Times New Roman","serif"; font-size: 12.0pt;">You can go to jail warning: If you guess the user name and password, or use a computer breakin technique to get or create them, or if someone other than an owner or administrator or a legitimate user on that system gives you a user name and password, it is against the law to use them. Many computer criminals give out user names and passwords that they obtained illegally.</span></i></b><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;"><o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><b><span style="font-family: "Comic Sans MS"; font-size: 14.0pt; mso-bidi-font-family: "Comic Sans MS";">More on Telnet: the Number One Hacker Tool</span></b><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;"><o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><b><span style="font-family: "Times New Roman","serif"; font-size: 14.0pt;">How to Get Telnet Accounts</span></b><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;"><o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">OK, so you want to get legal user names and passwords so you can telnet into other computers. Here are some of the best ways:<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in 5pt 0.5in; text-indent: -0.25in;"><span style="font-family: Symbol; font-size: 12.0pt; mso-bidi-font-family: Symbol; mso-fareast-font-family: Symbol;">·<span style="font-family: 'Times New Roman'; font-size: 7pt;">         </span></span><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">See <u><span style="color: blue;">http://happyhacker.org/links2.shtml#shells <../links2.shtml></span></u> for organizations that will give you free shell accounts. You can telnet into these. <o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in 5pt 0.5in; text-indent: -0.25in;"><span style="font-family: Symbol; font-size: 12.0pt; mso-bidi-font-family: Symbol; mso-fareast-font-family: Symbol;">·<span style="font-family: 'Times New Roman'; font-size: 7pt;">         </span></span><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">Ask Internet Service Providers for shell accounts. Some offer them, although most don't. <o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in 5pt 0.5in; text-indent: -0.25in;"><span style="font-family: Symbol; font-size: 12.0pt; mso-bidi-font-family: Symbol; mso-fareast-font-family: Symbol;">·<span style="font-family: 'Times New Roman'; font-size: 7pt;">         </span></span><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">Set up a telnet server on your own computer (see instructions below). Yes, once you are running a telnet server, you can telnet from your computer back into your computer. Simply give the command "telnet 127.0.0.1". <o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in 5pt 0.5in; text-indent: -0.25in;"><span style="font-family: Symbol; font-size: 12.0pt; mso-bidi-font-family: Symbol; mso-fareast-font-family: Symbol;">·<span style="font-family: 'Times New Roman'; font-size: 7pt;">         </span></span><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">Make friends with people who run Internet computers with telnet servers. <o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><b><span style="font-family: "Times New Roman","serif"; font-size: 14.0pt;">Why you May Not Want to Telnet</span></b><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;"><o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">If you love your shell account server, don't ever, ever telnet or ftp into it. I recommend Ssh or Openssh for logging into remote computers? The telnet (and ftp) protocol is a "clear text" transmission. That means that computer on the same LAN as either You or your destination computer, or any computer on any LAN or network path through which your connection passes can steal your login name, password or anything else that goes across your connection. Ssh and OpenSsh encrypt all communications so no one can snoop on you.<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><b><span style="font-family: "Times New Roman","serif"; font-size: 14.0pt;">How to Install a Telnet Server on your Windows Computer</span></b><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;"><o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">Usually you can't telnet into a Windows home computer. The reason is, they aren't running telnet servers. Here's how to get a telnet server on your home Windows computers so your friends and you can telnet in and play.<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">For Windows NT, the Options Pack includes a primitive telnet server.<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">For Windows 95/98/NT and 2000, you also can install shareware or commercial telnet servers. Check out http://www.winfiles.com, or do a web search.<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">Of course installing a telnet server makes your computer vulnerable to all sorts of trouble from hackers. It's your funeral, don't come crying top me if a telnet visitor destroys your computer<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><b><span style="font-family: "Comic Sans MS"; font-size: 14.0pt; mso-bidi-font-family: "Comic Sans MS";">More on Telnet: the Number One Hacker Tool</span></b><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;"><o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><b><span style="font-family: "Times New Roman","serif"; font-size: 14.0pt;">How to Turn off a Telnet Server on your Unix-type Computer</span></b><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;"><o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">If you go online with Linux or other Unix-type computer, a telnet server is the easiest way to ensure you get destroyed by a malicious hacker. Here's how to prevent this. On most of these, the file /etc/inetd.conf launches most of your servers. Edit the file to put a "#" in front of the line that has telnet in it and either reboot your computer or kill and restart inetd.<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">If your computer doesn't use inetd to launch services, you should be able to find telnetd under /etc/init.d.<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">Install ssh instead and only use that to log into your shell account.<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><b><span style="font-family: "Times New Roman","serif"; font-size: 14.0pt;">How to Explore Computers Using Telnet</span></b><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;"><o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">Even if a computer doesn't have a telnet server, there are lots of fun and even legal things to do to it using telnet. The easiest thing to do is extract "banners" from a victim computer. A banner is a message a computer will often give when you telnet to a port that is running an Internet server of some sort.<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">For example, most mail sending servers use port 25. To telnet to port 25 from Win 2000 or a Unix shell, simply type:<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">telnet <hostname or IP address> 25<o:p></o:p></span></div><div class="MsoNormal" style="margin-bottom: 0.0001pt;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">Windows 95, 98 and NT make it a tiny bit harder. <o:p></o:p></span></div><div class="MsoNormal" style="margin-bottom: 0.0001pt;"><br /></div><div class="MsoNormal" style="margin: 5pt 0in;"><b><span style="font-family: "Comic Sans MS"; font-size: 14.0pt; mso-bidi-font-family: "Comic Sans MS";">More on Telnet: the Number One Hacker Tool</span></b><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;"><o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">If the victim computer is running a mail server, you will see something that looks like this:<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">Whoa, look at that! The victim computer told us what operating system (Windows NT) and mail server (Mercur) it runs!<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">A quick search of the Bugtraq archives at <u><span style="color: blue;"><http://www.securityfocus.com/></span></u>revealed horrid things a criminal could do to that Mercur mail server. Since I think it is more fun to be nice, I told someone at the company using this mail server about the problems. He invited me to vacation at his beautiful Swiss home, where he and his wife keep horses and take long trail rides in the Alps. Golly, that is much more fun than breaking into a computer!<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">Right about now some elite ueberhaxorz are probably reading this and saying "What a lamer Meinel is! We can do the same thing by running nmap."<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">They are right, you can learn the same things by running a port scanning program such as nmap (available at <u><span style="color: blue;"><http://www.insecure.org/></span></u>). However, I am quite careful about under what circumstances I run any port scanner. In order to get information on what programs are running on what ports, you must run a port scanner in a mode that will probably convince the owner of the victim computer that you are a criminal. He or she may persuade your online service provider to cancel your account.<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">The other reason to analyze computers using telnet is that you learn more. It's the difference between eating at McDonalds and learning how to cook.<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><br /></div><div class="MsoNormal" style="margin: 5pt 0in;"><b><span style="font-family: "Comic Sans MS"; font-size: 14.0pt; mso-bidi-font-family: "Comic Sans MS";">More on Telnet: the Number One Hacker Tool</span></b><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;"><o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">A quick search of the Bugtraq archives at <u><span style="color: blue;"><http://www.securityfocus.com/></span></u>revealed horrid things a criminal could do to that Mercur mail server. Since I think it is more fun to be nice, I told someone at the company using this mail server about the problems. He invited me to vacation at his beautiful Swiss home, where he and his wife keep horses and take long trail rides in the Alps. Golly, that is much more fun than breaking into a computer!<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">Right about now some elite ueberhaxorz are probably reading this and saying "What a lamer Meinel is! We can do the same thing by running nmap."<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">They are right, you can learn the same things by running a port scanning program such as nmap (available at <u><span style="color: blue;"><http://www.insecure.org/></span></u>). However, I am quite careful about under what circumstances I run any port scanner. In order to get information on what programs are running on what ports, you must run a port scanner in a mode that will probably convince the owner of the victim computer that you are a criminal. He or she may persuade your online service provider to cancel your account.<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">The other reason to analyze computers using telnet is that you learn more. It's the difference between eating at McDonalds and learning how to cook.<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><b><span style="font-family: "Times New Roman","serif"; font-size: 14.0pt;">How to Break into Web Sites Using Telnet</span></b><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;"><o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">You don't have to use a web browser to access files on a web site. All you need to do is:<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">telnet <victimcomputer> 80<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">Or specify port 80 in a Windows telnet.<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">If you are using Windows 95/98/NT, whenever you are NOT logging into a telnet account, you should enable local echo. Otherwise whatever you type in (unless you are in a telnet account) will not show on the screen. To enable local echo, click Terminal --> Preferences --> Local Echo.<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">So how do you send stuff back to the webserver? Try this:<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">GET / HTTP/1.0<br /><your command here><o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">What kinds of commands can you send? The book <u><span style="color: blue;">Hackproofing Your Network <../bookstore/general.shtml></span></u> (by Ryan Russell of Securityfocus.com and Stance Cunningham) suggests a fun and harmless hack. Create and store a bogus cookie in the location on your web browser that stores cookies. (Find it by searching for the file "cookies.txt".) Name your bogus cookie something like "MyBogusCookie." Then telnet to the victim webserver and give something like this command:<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">GET / HTTP/1.0<br />User-Agent: HaveABogusCookieThisIsAJoke 123.4<br />Cookie: /; MyBogusCookie<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">The <u><span style="color: blue;">Überhacker! -- How to Break into Computers <../uberhacker/index.shtml></span></u> book details a number of serious attacks you can perform through sending funny input to a webserver. Basically, you need to learn how to write shell programs, and then find ways to get them to be run by the webserver. I'm not going to explain them here, however. These attacks, when carried out against a vulnerable webserver, are so easy that little kids could do them, and I don't want to be responsible for their behavior. It's much harder for little kids to get a hold of Russell's and my books than it is for them to read this GTMHH on the Happy Hacker website.<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">So are you dying to know what to send a webserver in order to break into it, without having to buy a book? Here are some hints. How to do this will depend on what webserver it is, what operating system it runs on, whether its security weaknesses have been fixed, and whether the web designer has used things such as Common Gateway Interface (CGI) or Server Side Includes (SSIs) that have weaknesses in them.<o:p></o:p></span></div><div class="MsoNormal" style="margin: 5pt 0in;"><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;">You will have to research these issues at Web sites that archive vulnerabilities and exploits such as <u><span style="color: blue;"><http://www.securityfocus.com/></span></u>and <u><span style="color: blue;"><http://packestorm.securify.com/></span></u>. You will need to study web site programming (HTML -- hypertext markup language, CGI and SSIs) and shell programming. You will need to learn webserver commands (documented at <u><span style="color: blue;"><http://www.w3.org/hypertext/WWW/markup/Markup.html></span></u>). You will have to use your brain and be persistent.<o:p></o:p></span></div><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt; line-height: 115%; mso-ansi-language: EN-US; mso-bidi-language: AR-SA; mso-fareast-font-family: "Times New Roman"; mso-fareast-language: EN-US; mso-fareast-theme-font: minor-fareast;">But at least if you come across a telnet exploit, now you know the answer to the question "where do I type that command?"</span></div>

Telnet: the Number One Hacker Tool

In this Guide you will learn: · What is telnet? · How to telnet · How to get telnet accounts <begin11c.shtml...

Performance Daddy

How to Forge Email with Windows XP Telnet

How to Telnet with Windows XP

Telnet: the Number One Hacker Tool

Popular Posts

Tags

Blog Archive