The intranet violently cracked the telnet password to log in.

Here's just one idea, and the foolhardy approach is occasionally cheaper.

Sometimes, when you are in an Internet cafe or computer room, you are on the intranet. In general, the security of the intranet is poor, in those places where port 3389 is wide open and there is no group policy restriction, we can use the following methods to fool other machines in the intranet.

Scan the intranet network segment to open 3389 machines which, here I used nmap, found a host 192.168.72.141 and 143 online open 3389;

Then open tscrack and perform brute force cracking; of course, here you need to choose the content of the password text yourself;

Generally speaking, software generation is relatively convenient;

3. The default mode is to crack the Administrator, specifying that the user needs to add the-l username parameter;

4. After success, you can log in, and you can also capture the session content with your own tscapture, which is very convenient;

This is a typical idiot ***, the idea is worth learning, the fastest way *** is the best.