Rlogin prompting for remote password (Kali / Metasploitable)












1














I am following a tutorial that can be found here.



http://www.kalitutorials.net/2014/05/metasploitable-2-vulnerability.html



Specifically the "Remote access vulnerability - Rlogin" section.



When I run the command "rlogin -l root 192.168.154.132"



I get a password prompt, as per the below



The authenticity of host '192.168.154.132 (192.168.154.132)' can't be established.

RSA key fingerprint is *****.

Are you sure you want to continue connecting (yes/no)? yes

Warning: Permanently added '192.168.154.132' (RSA) to the list of known hosts.

root@192.168.154.132's password:


The tutorial states "It's because we don't have ssh-client installed on Kali Linux"



However when I try to install the client, using the following command "apt-get install rsh-client", I get the following message:



Reading package lists... Done

Building dependency tree

Reading state information... Done

Note, selecting 'openssh-client' instead of 'rsh-client'

openssh-client is already the newest version.

0 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.


I have tried running "apt-get update && apt-get upgrade" to make sure everything is up to date.



I have also tried uninstalling and re-installing the openssh client.



However I continue to get prompted by the password box (which according to the tutorial I should not)



Any help greatly appreciated.






ssh kali-linux metasploit







share|improve this question



























    1














    I am following a tutorial that can be found here.



    http://www.kalitutorials.net/2014/05/metasploitable-2-vulnerability.html



    Specifically the "Remote access vulnerability - Rlogin" section.



    When I run the command "rlogin -l root 192.168.154.132"



    I get a password prompt, as per the below



    The authenticity of host '192.168.154.132 (192.168.154.132)' can't be established.
    
RSA key fingerprint is *****.
    
Are you sure you want to continue connecting (yes/no)? yes
    
Warning: Permanently added '192.168.154.132' (RSA) to the list of known hosts.
    
root@192.168.154.132's password:


    The tutorial states "It's because we don't have ssh-client installed on Kali Linux"



    However when I try to install the client, using the following command "apt-get install rsh-client", I get the following message:



    Reading package lists... Done
    
Building dependency tree
    
Reading state information... Done
    
Note, selecting 'openssh-client' instead of 'rsh-client'
    
openssh-client is already the newest version.
    
0 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.


    I have tried running "apt-get update && apt-get upgrade" to make sure everything is up to date.



    I have also tried uninstalling and re-installing the openssh client.



    However I continue to get prompted by the password box (which according to the tutorial I should not)



    Any help greatly appreciated.






    ssh kali-linux metasploit







    share|improve this question

























      1












      1








      1


      1





      I am following a tutorial that can be found here.



      http://www.kalitutorials.net/2014/05/metasploitable-2-vulnerability.html



      Specifically the "Remote access vulnerability - Rlogin" section.



      When I run the command "rlogin -l root 192.168.154.132"



      I get a password prompt, as per the below



      The authenticity of host '192.168.154.132 (192.168.154.132)' can't be established.
      
RSA key fingerprint is *****.
      
Are you sure you want to continue connecting (yes/no)? yes
      
Warning: Permanently added '192.168.154.132' (RSA) to the list of known hosts.
      
root@192.168.154.132's password:


      The tutorial states "It's because we don't have ssh-client installed on Kali Linux"



      However when I try to install the client, using the following command "apt-get install rsh-client", I get the following message:



      Reading package lists... Done
      
Building dependency tree
      
Reading state information... Done
      
Note, selecting 'openssh-client' instead of 'rsh-client'
      
openssh-client is already the newest version.
      
0 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.


      I have tried running "apt-get update && apt-get upgrade" to make sure everything is up to date.



      I have also tried uninstalling and re-installing the openssh client.



      However I continue to get prompted by the password box (which according to the tutorial I should not)



      Any help greatly appreciated.






      ssh kali-linux metasploit







      share|improve this question













      I am following a tutorial that can be found here.



      http://www.kalitutorials.net/2014/05/metasploitable-2-vulnerability.html



      Specifically the "Remote access vulnerability - Rlogin" section.



      When I run the command "rlogin -l root 192.168.154.132"



      I get a password prompt, as per the below



      The authenticity of host '192.168.154.132 (192.168.154.132)' can't be established.
      
RSA key fingerprint is *****.
      
Are you sure you want to continue connecting (yes/no)? yes
      
Warning: Permanently added '192.168.154.132' (RSA) to the list of known hosts.
      
root@192.168.154.132's password:


      The tutorial states "It's because we don't have ssh-client installed on Kali Linux"



      However when I try to install the client, using the following command "apt-get install rsh-client", I get the following message:



      Reading package lists... Done
      
Building dependency tree
      
Reading state information... Done
      
Note, selecting 'openssh-client' instead of 'rsh-client'
      
openssh-client is already the newest version.
      
0 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.


      I have tried running "apt-get update && apt-get upgrade" to make sure everything is up to date.



      I have also tried uninstalling and re-installing the openssh client.



      However I continue to get prompted by the password box (which according to the tutorial I should not)



      Any help greatly appreciated.






      ssh kali-linux metasploit




      ssh kali-linux metasploit






      share|improve this question













      share|improve this question











      share|improve this question




      share|improve this question










      asked Jul 24 '15 at 15:02









      user3580480

      1122




      1122






















          2 Answers
          2






          active

          oldest

          votes


















          0














          Try the command:



          system ssh start


          then check if it is active by typing in service --status-all

          If there is a + next to SSH it is activated.






          share|improve this answer































            0














            Even though M2 tutorial offers you a walk though, please leave a room for some challenges: "rlogin -l root 192.168.154.132" is asking you for a "root" user password, right? Check out /etc/issue and think about it... think of username that M2 is using..






            share|improve this answer

















            • 3




              While some of those might be helpful thoughts to consider, this doesn't really provide an answer to the question, and so would be better off as a comment.
              – Eric Renouf
              Nov 22 '16 at 1:40











            Your Answer








            StackExchange.ready(function() {
            var channelOptions = {
            tags: "".split(" "),
            id: "106"
            };
            initTagRenderer("".split(" "), "".split(" "), channelOptions);

            StackExchange.using("externalEditor", function() {
            // Have to fire editor after snippets, if snippets enabled
            if (StackExchange.settings.snippets.snippetsEnabled) {
            StackExchange.using("snippets", function() {
            createEditor();
            });
            }
            else {
            createEditor();
            }
            });

            function createEditor() {
            StackExchange.prepareEditor({
            heartbeatType: 'answer',
            autoActivateHeartbeat: false,
            convertImagesToLinks: false,
            noModals: true,
            showLowRepImageUploadWarning: true,
            reputationToPostImages: null,
            bindNavPrevention: true,
            postfix: "",
            imageUploader: {
            brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
            contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
            allowUrls: true
            },
            onDemand: true,
            discardSelector: ".discard-answer"
            ,immediatelyShowMarkdownHelp:true
            });


            }
            });














            draft saved

            draft discarded


















            StackExchange.ready(
            function () {
            StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f218185%2frlogin-prompting-for-remote-password-kali-metasploitable%23new-answer', 'question_page');
            }
            );

            Post as a guest















            Required, but never shown

























            2 Answers
            2






            active

            oldest

            votes








            2 Answers
            2






            active

            oldest

            votes









            active

            oldest

            votes






            active

            oldest

            votes









            0














            Try the command:



            system ssh start


            then check if it is active by typing in service --status-all

            If there is a + next to SSH it is activated.






            share|improve this answer




























              0














              Try the command:



              system ssh start


              then check if it is active by typing in service --status-all

              If there is a + next to SSH it is activated.






              share|improve this answer


























                0












                0








                0






                Try the command:



                system ssh start


                then check if it is active by typing in service --status-all

                If there is a + next to SSH it is activated.






                share|improve this answer














                Try the command:



                system ssh start


                then check if it is active by typing in service --status-all

                If there is a + next to SSH it is activated.







                share|improve this answer














                share|improve this answer



                share|improve this answer








                edited Oct 8 '15 at 7:00









                serenesat

                9201519




                9201519










                answered Oct 8 '15 at 6:19









                Christian Simpson

                1




                1

























                    0














                    Even though M2 tutorial offers you a walk though, please leave a room for some challenges: "rlogin -l root 192.168.154.132" is asking you for a "root" user password, right? Check out /etc/issue and think about it... think of username that M2 is using..






                    share|improve this answer

















                    • 3




                      While some of those might be helpful thoughts to consider, this doesn't really provide an answer to the question, and so would be better off as a comment.
                      – Eric Renouf
                      Nov 22 '16 at 1:40
















                    0














                    Even though M2 tutorial offers you a walk though, please leave a room for some challenges: "rlogin -l root 192.168.154.132" is asking you for a "root" user password, right? Check out /etc/issue and think about it... think of username that M2 is using..






                    share|improve this answer

















                    • 3




                      While some of those might be helpful thoughts to consider, this doesn't really provide an answer to the question, and so would be better off as a comment.
                      – Eric Renouf
                      Nov 22 '16 at 1:40














                    0












                    0








                    0






                    Even though M2 tutorial offers you a walk though, please leave a room for some challenges: "rlogin -l root 192.168.154.132" is asking you for a "root" user password, right? Check out /etc/issue and think about it... think of username that M2 is using..






                    share|improve this answer












                    Even though M2 tutorial offers you a walk though, please leave a room for some challenges: "rlogin -l root 192.168.154.132" is asking you for a "root" user password, right? Check out /etc/issue and think about it... think of username that M2 is using..







                    share|improve this answer












                    share|improve this answer



                    share|improve this answer










                    answered Nov 22 '16 at 0:59









                    user201614

                    1




                    1








                    • 3




                      While some of those might be helpful thoughts to consider, this doesn't really provide an answer to the question, and so would be better off as a comment.
                      – Eric Renouf
                      Nov 22 '16 at 1:40














                    • 3




                      While some of those might be helpful thoughts to consider, this doesn't really provide an answer to the question, and so would be better off as a comment.
                      – Eric Renouf
                      Nov 22 '16 at 1:40








                    3




                    3




                    While some of those might be helpful thoughts to consider, this doesn't really provide an answer to the question, and so would be better off as a comment.
                    – Eric Renouf
                    Nov 22 '16 at 1:40




                    While some of those might be helpful thoughts to consider, this doesn't really provide an answer to the question, and so would be better off as a comment.
                    – Eric Renouf
                    Nov 22 '16 at 1:40


















                    draft saved

                    draft discarded




















































                    Thanks for contributing an answer to Unix & Linux Stack Exchange!


                    • Please be sure to answer the question. Provide details and share your research!

                    But avoid …



                    • Asking for help, clarification, or responding to other answers.

                    • Making statements based on opinion; back them up with references or personal experience.


                    To learn more, see our tips on writing great answers.





                    Some of your past answers have not been well-received, and you're in danger of being blocked from answering.


                    Please pay close attention to the following guidance:


                    • Please be sure to answer the question. Provide details and share your research!

                    But avoid …



                    • Asking for help, clarification, or responding to other answers.

                    • Making statements based on opinion; back them up with references or personal experience.


                    To learn more, see our tips on writing great answers.




                    draft saved


                    draft discarded














                    StackExchange.ready(
                    function () {
                    StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f218185%2frlogin-prompting-for-remote-password-kali-metasploitable%23new-answer', 'question_page');
                    }
                    );

                    Post as a guest















                    Required, but never shown





















































                    Required, but never shown














                    Required, but never shown












                    Required, but never shown







                    Required, but never shown

































                    Required, but never shown














                    Required, but never shown












                    Required, but never shown







                    Required, but never shown







                    -

                    Popular posts from this blog

                    List directoties down one level, excluding some named directories and files

                    Image
                    1 I want to send a list of all folders including one level down to a txt file. Excluding some named folders and no files. Imagine a folder structure like this. CAPS are folders. FOLDER 1 .hidden TEMP somefile ========= ========= FOLDER 2 .hidden TEMP DATA1 DATA2 somefile ======== ======== FOLDER 3 .hidden TEMP DATA1 somefile I would like to run "insert magic command here" and end up with an output that looks like below FOLDER 1 FOLDER 2 DATA1 DATA2 FOLDER 3 DATA1 bash shell-script share | improve this question edited Dec 16 at 4:15 Rui F Ribeiro ...
                    Read more

                    list processes belonging to a network namespace

                    Image
                    5 1 I am on Ubuntu 12.04, and the ip utility does not have ip netns identify <pid> option, I tried installing new iproute , but still, the option identify doesn't seem to be working!. If I were to write a script (or code) to list all processes in a network-namespace, or given a PID, show which network-namespace it belongs to, how should I proceed ? (I need info on a handful of processes, to check if they are in the right netns ) linux process network-namespaces share | improve this question edited Jun 30 '15 at 22:00 Gilles 529k 128 1060 1585 ...
                    Read more

                    List all connected SSH sessions?

                    Image
                    162 38 I just SSH'd into root, and then SSH'd again into root on the same machine. So I have two windows open both SSH'd into root on my remote machine. From the shell, how can I see a list of these two sessions? ssh terminal share | improve this question asked Sep 26 '13 at 21:28 themirror 2,368 10 21 30 add a comment  |  162 ...
                    Read more