Hacking through telnet.

[carlo]

Telnet - A Tutorial to Telnet and Hacking
Now you may be looking at this going, "What the hell is Telnet?". If you are, don't worry, I'll explain everything. First of all, Telnet is software that allows you to connect to another Telnet Host.

In windows systems Telnet is usually called Telnet32.exe or Telnet.exe. In newer versions of windows it is Telnet32.exe.
*** Note to Windows XP users: Don't go and get the old version of Telnet, because you have a DOS-Based one. I'll give commands along this guide so you can enjoy it too. You have to either run "Telnet" or "cmd" and then "Telnet".

Telnet is not illegal and is used by thousands of remote computers to interchange data, share connections, and do many other things that would be impossible without it.

The default port for Telnet is port 23. When I say for instance, 'Connect to the sys' I am referring to connecting on the system's default port for Telnet. Sometimes you can't determine a port so you will have to port scan a sys to find the Telnet Ports.

Port 25 is the 'Sendmail Protocol' port. We will be dealing with this port as well.


Telnet Security

Because there are so many problems with Telnet today involving cyber crime and hacking, SysAdmins often restrict anonymous use of their sys's Telnet Proxies. This is cheap and can be bypassed easily.

Most SysAdmins are amatures at what they do and make me laugh. They restrict the Telnet proxies on port 23 and think that we can't telnet to other ports such as 81 and 25 because we can't use the Telnet Proxy. Well they are wrong. We can easily do it and we will. Let me point out a system that has this and was not effective. I will star out the IP for privacy.


--------------------------------------------------------------------------------
Welcome to Microsoft Telnet. Telnet32.exe.
o
<to> 202.232.**.**
connecting to 202.232.**.** 23 (The port number)
Connected.
Connection to host lost (unauthorized use of Telnet Proxy(ies).
o
<to> 202.232.**.** 25
Connecting to 202.232.**.** 25 (Watch this..)
Welcome to ********.net Sendmail Program. Welcome to all staff.
vrfy bin
..550 <bin@********.net>
vrfy sys
..550 <sys@********.net>
vrfy root
..550 <root********.net>
vrfy admin
..550 <admin@********.net>
vrfy games
..550 <games@********.net>
vrfy uucp
..550 <uucp@********.net>
q
..550 <command not recognized>
c
Connection to host lost on command.

Ok people is there a problem there? How many addys did I get? Am I supposed to have those? Do I care? No. I am just demonstrating how sh1tty Unix-System security is and how easy it is to use the Telnet Proxy to your advantage. Here, I wil list some commands for all of you running under DOS.

C - Close the Current Connection
D - Display the sys's operating paremeters
O - Connect to a host name (on default port 23) [port]
q - Quit (Exit Telnet).
Set- Set Options
Send - Send data/strings to server


Telnet, as you know so far, is a very useful tool for hackers. Hell, if you can't connect to a computer, you can't hack it. Its that simple.

Now the best thing about Telnet is that virtually every Windows computer has it, comes with it, and is able to run it

[carlo]

If you wish to learn more post here and i will write another tutorial.

carlo

[Sheol]

Howdy im very interested in learning more about this, however i cant seem to get a connection to anything :s can utell me why, it just says it cant connect to the address with port 23.

[carlo]

are you connecting to a computer or a sever?

[scott_fire]

hi my name is scott , im trying to do what u said.. but it is saying i cannot get a connection.. could u plz help me ?

[coz]

Scott, there are a lot of things the author didn't say, not that it wasn't a good tutorial. Such as all Window versions come with this tool however none of them have telnet enable. Therefor you cannot really connect to many computers with this tool at least to port 23. Only servers will really use this port and now a days not even servers will use it because much much better technologies are out like remote desktop (RDP) apps. This tool was manly used back in the day of command line operating systems like dos, unix, etc... You can connect to other remote services with telnet such as wingate proxies, ftp, mail servers, and even http servers. But there is really no point unless you connect to a proxy.

[scott_fire]

i dont know what a proxy is.. but i am willing to do it.. do u have msn.. mabt wasier to talk? up to u. but if somone shows me step by step how to do things i catch on n remember how to do them and understand what i am doing. i was wondering if maby u can help me?

[coz]

I don't really talk on IMs but there it isn't hard to do. You will just have to read up on things a little.

http://en.wikipedia.org/wiki/WinGate - This will explain proxies and the common WinGate (The Notoriety section will explain it's popularity)

You can think of telnet as a command prompt with the commands...

c - close close current connection
d - display display operating parameters
o - open hostname [port] connect to hostname (default port 23).
q - quit exit telnet
set - set set options (type 'set ?' for a list)
sen - send send strings to server
st - status print status information
u - unset unset options (type 'unset ?' for a list)
?/h - help print help information

Well that's the commands enabled on my machine. And the server or whatever your telnet is trying to connect to is what is important and will accept all kinds of commands. So it completely depends on what you connect to. It's just a means of sending strings of text (commands) over a networked connection.

As long as you know this it should enable you to fully use the program for anything. Just press Windows+R key, type "telnet", hit enter and when the command prompt opens type "o example.com 80" to open a connection to example.com on port 80. Or type "?" to get a list of commands or type the command then a "?" to get options for the command.

Sorry if this is confusing but if you mess around with telnet you'll understand eventually. Hope this helps some though.

[scott_fire]

yea.. im might still be a little confused on exactly what to type.. like for hostname do i type my name or do i put that peridoe there what u said..

[scott_fire]

this is what he is telling me what to do
click the "Start" button, click "Run" then type in "command" Or "cmd" to bring MS Dos up.

--------------------------------------------------------------------------------

In MS Dos type in "netstat -an" or 'netstat', look for port 5101 that is the common port rt some guy is telling me to ...

[coz]

The hostname is just what their ip address will resolve to. To connect to someone you need an ip address. Because of ip addresses being long weird looking numbers they created names for them. So 24.94.222.22 could also be seen as google.com.

So for hostname you can use the name of the computer (ex. msn.com) or the ip address.

this is what he is telling me what to do
click the "Start" button, click "Run" then type in "command" Or "cmd" to bring MS Dos up.

Yes that will bring the command prompt up then you have to type "telnet". You can also use the method I said. It's much shorter. Windows+R, type "telnet". That will bring up the command prompt and enter telnet for you.

In MS Dos type in "netstat -an" or 'netstat', look for port 5101 that is the common port rt some guy is telling me to ...

I believe port commonly used for remote desktop sharing. Netstat is used to see what ports are open on your computer.

[scott_fire]

ok could u tell me ste by step.. like im in telnet. or telnet -an and what exacly do i put.. i have some pls ip.. i get get some 1 ip easly.like do i put o 74.12.45.119:1517 then what? do i put port 5101 or something i need to know exlactly what to put

[Moonbat]

Try using Google before asking. It'll help you find our what you want to know.

[scott_fire]

lol thats what i been trying to do...i found lots of stuff but there not working n thats when i found this site...

[scott_fire]

like all im tring to do is get acces to some ones computer from my computer... or get on their web cam n scare them lol. .and dont worie im not a pervert lol

[coz]

You will not be able to use telnet like you want. There is nothing that will allow you to just pop up on someones web cam or really even connect to them with out entering a password.

[XxjaymanxX]

how do you change your port?

[Moonbat]

Change your port? What are you talking about? You don't need to change ports, just find the right one to connect through. I suggest you study more on telnet and TCP/IP in general.

[XxjaymanxX]

Oo... well how do you connet to anthor port? and i will study up more on telnet and TCP/IP

[coz]

You can do that by entering a command like "o example.com 80" when in telnet. 'o' for open connection, "example.com" as the example domain/ip, and 80 for the port.

[Thug]

carlo ... this is an outstanding thread... thank you for the time and the effort :)

carlo ... I would like to take this tutorial a little further as to ask for the commands possible after connecting to the server?

if you possibly could shed some light on those commands, just commenting on them :D

more precisely : the commands supported:
auth:
starttls:
Helo:
Ehlo:
Mail:
RCPT:
DATA:
NOOP:
Rset:

or at the least, how to find more info about those commands (214-)

and the last question, is it possible to connect through any open port ex: 80, 5357, ... etc , or is it only for a set of ports that we can connect through?

This has been really useful and helpful , thanks a bunch man :D

[Moonbat]

more precisely : the commands supported:
auth:
starttls:
Helo:
Ehlo:
Mail:
RCPT:
DATA:
NOOP:
Rset:
I may be wrong, but judging by those commands, I think you are trying some e-mail spoofing. Here's a good tut on it.

https://www.totse.com/en/hack/understanding_the_internet/emailspoofing173500.html

[Thug]

thankx moonbat...

but I thought I could do a little bit more than just email spoofing when I am connected to the server through the telnet.

anyhow ... I appreciate your help.