Question

Do the following steps on Kali and show the evidence of screenshots.

1) Create an account of your name (screenshot 1)

2) Set the password to your account (screenshot 2)

3) Create a pass.txt file that contains multiple words including your password (screenshot 3)

4) Pick the IP address of your Kali to issue the ncrack command (command 1)

5) The output of the ncrack execution should show your password (screenshot 4)

Answer 1

1)

root@kali:-# useradd john root@kali:-#

If you are not logged in as root the you have to use the sudo useradd john and then you need to provide the login password for the user you are current logged in.

2)

root@kali: # passwd john New password: Retype new password: passwd: password updated successfully root@kali:-#1

If you are not logged in as root the you have to use the sudo passwd john and then you need to provide the login password for the user you are current logged in.

3) I set password for the john as password@1234

o root@kali:- *** 0 x password password123 password password password@1234 john@123 jonny1234 qwerty@1234 temp@13 admin@1234 Pass@admin INSERT -- 11,11 All

4) ncrack -user john -P pass.txt 192.168.0.107:22

- ncrack is autnetication cracking tool. It can be used to crack the password for ssh, ftp, etc. You can also provide the list of IP address to check for logins credentials from dictionary bruteforce attack. Here -user flag is used to provide the username and -P flag is used to password file containing the passwords, and after IP address there is :22 states that I am using the ssh port to login bruteforce.

5)

root@kali:-# ncrack -user john -P pass.txt 192.168.0.107:22 Starting Ncrack 0.7 ( http://ncrack.org ) at 2020-07-30 10:28 IST Discovered credentials for ssh on 192.168.0.107 22/tcp: 192.168.0.107 22/tcp ssh: 'john' 'password@1234' Ncrack done: 1 service scanned in 18.00 seconds. Ncrack finished. root@kali:-#

NoteL please let me know if you have any doubt.