Chapter 1
Engagement Management
Course: Comptia Pentest Pt0 003
Subject: Comptia Pentest Plus
Chapter: Attacks And Exploits
Network attacks exploit misconfigurations, weak credentials, and security flaws in network infrastructure. Attackers use specialized tools to capture, manipulate, and relay traffic, compromise credentials, and gain unauthorized access. Below is a breakdown of various network attack types, how they work, and the tools used to execute them.
1. Attack Types
a. Default Credentials Attack
Many systems are installed with factory-set usernames and passwords that administrators forget to change, making them an easy entry point for attackers. Attackers often search for these systems to gain unauthorized access.
Common default credentials:
| Service/Device | Default Credentials | | MySQL | root:root | | Tomcat | admin:admin | | Cisco Router | cisco:cisco | | WordPress | admin:admin123 |
Tools used:
- Hydra – Brute-force attacks against various protocols.
- Medusa – Multi-threaded brute-forcing tool for credential attacks.
- Metasploit Auxiliary Modules – Searches for default credentials across services.