TELNET - 23

NMAP

ls /usr/share/nmap/scripts/ | grep telnet

Single host

nmap -oN telnet.nmap –script “telnet* and not telnet-brute” –script-args= -d -Pn -v -T2 -p 23 10.31.1.33

Brute force Telnet- Hydra

hydra -l rabakuku -P rockyou.txt 192.168.1.1 telnet or 23

"-L" for list of users or "-l" for one user
"-P" for list of passwords or "-p" for one password

Anonymous Bruteforce with Hydra

proxychains hydra -l james -P ../../passwords.txt 10.33.2.2 telnet

Simply Banner grab

telnet 10.11.1.22

Login

telnet -l james 10.33.2.2