dnrops
/
metasploit-framework
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Add note about unauthenticated telnetd service

This commit is contained in:
Matthew Kienow 2018-08-23 16:16:47 -04:00
parent ecc6c473d8
commit 7a534707ab
No known key found for this signature in database
GPG Key ID: 40787F8B1EAC6E41
1 changed files with 11 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
documentation/modules/payload/cmd/unix/bind_busybox_telnetd.md
View File

@ -28,3 +28,14 @@ To set the payload:
1. In msfconsole, load the exploit.
2. Do: `set PAYLOAD cmd/unix/bind_busybox_telnetd`
3. Do: `exploit`
## Notes
The shell cleanup command should result in the payload automatically
terminating the telnetd service as the session completes. However, intermittent
behavior was observed and the source has not been identified. When closing a
session please verify, via a port scan or other desired method, that the port
is no longer open. If the port remains open, then the unauthenticated telnetd
service is still running. Establish a connection to the unauthenticated telnetd
service and manually terminate the process (`pkill telnetd`) to avoid leaving
the host more insecure.