Re: Need a sniffer/password capture to prove telnet is bad

From: linux r (linuxr_at_gmail.com)
Date: 11/23/04

  • Next message: Bill G: "Re: Nvidia, Intel, and clout" 
    Date: Tue, 23 Nov 2004 15:05:10 -0500
To: For users of Fedora Core releases <fedora-list@redhat.com>

    On Tue, 23 Nov 2004 14:47:05 -0500, Alex Evonosky <alex@alexevon.org> wrote:
    > Edward Croft wrote:
    > > I have a user I am trying to convince to quit using telnet. I have told
    > > him that his password can be sniffed and that would expose his system.
    > > He laughs and tells me that no one can get his password. So he threw
    > > down the gauntlet for me to get his password. He telnets into his home
    > > machine from work and I want to capture that, so what I am looking for
    > > is something that can be run from my machine, listen to his here at work
    > > and capture his home password without knowing explicitly the address of
    > > that home machine. Any suggestions. I just tried to build dsniff, but it
    > > failed. It would be beneficial to prove this to him. Since I am not a
    > > hacker I am not fully aware of these sniffers and how they function. Not
    > > even sure what I am looking for. I assume it is possible otherwise we
    > > wouldn't be trying to get people to not use telnet and ftp.
    > > Thanks in advance.
    >
    > Ethereal can capture that just fine in promisc mode...
    > fedora-list mailing list
    > fedora-list@redhat.com
    > To unsubscribe: http://www.redhat.com/mailman/listinfo/fedora-list

    I think you are gonna have to run ethereal but on that same network.
    If you try it or something similar, over the internet I am not sure,
    it would probably work with a known target/static ip. I haven't
    played with ethereal except on a lan, so I am not sure if all the
    routed and routing protocols do something differrent with a tool like
    that whose traffic passes trhough a gazillion routers at the ISP
    level. Also even with his verbal permission to try, you still might
    be in trouble with his ISP since they can probably detect sniffers and
    it is their network that he is on. I am sure such tools exist to
    sniff over multiple LAN/WAN connections, I've just never tried it, and
    I think THAT would qualify as hacking which might get you in trouble
    as well.

    On the other hand, on your own LAN is not as likely to get you in
    trouble. Ethereal or tethereal the text version is good at displaying
    all the traffic that flows through a node on the network. Instead of
    having him telnet into a box at home, have him telnet into a box while
    you are running ethereal. That should do the trick. Also for low
    security purposes make sure it is a windows box. :)

    If that doesn't work post his IP address here, and some of us will
    post his password (lol just kidding of course)

    Marc 

    -- 
fedora-list mailing list
fedora-list@redhat.com
To unsubscribe: http://www.redhat.com/mailman/listinfo/fedora-list
  • Next message: Bill G: "Re: Nvidia, Intel, and clout"

    Relevant Pages

    • Re: Need a sniffer/password capture to prove telnet is bad
      ... > I think you are gonna have to run ethereal but on that same network. ... > I think THAT would qualify as hacking which might get you in trouble ... > having him telnet into a box at home, have him telnet into a box while ... > If that doesn't work post his IP address here, ...
      (Fedora)
    • Telnet Service missing!
      ... I have been having this trouble this past few days and posted this ... done is that they have login window or something where you have to ... There is no telnet item in the whole list of services! ... Prompt Flags 0 ...
      (microsoft.public.windowsxp.network_web)
    • Re: Silly crackers... NT is for kids...
      ... anything less than SSH is asking for trouble. ... There *are* some cases, though, when telnet is acceptable ...
      (FreeBSD-Security)
    • Re: Problems with SCO binaries writing to /dev/tty on Redat 8
      ... Only thing is if I try to telnet in a second time, ... The host name is called trouble. ...
      (comp.unix.sco.misc)
    • Re: Exch2k3 drops remote connection attempts
      ... network telnet is working as it should be. ... If you connect from the internet ... to the smtp port than the server drops the connection. ...
      (microsoft.public.exchange.admin)