Skip to content
HackIndex.io
Telnet
Service

Telnet

Telnet is a plaintext remote access protocol. Attackers grab banners, brute force weak creds, intercept traffic via MITM, then pivot internally using gained shell access

:23 4 guides 2 phases
1 min read Created: Dec 28, 2025 Updated: Jul 14, 2026

Telnet runs on TCP port 23 and provides unencrypted remote terminal access. Nmap identifies it as telnet. It is largely replaced by SSH, but still appears on legacy systems, network equipment, and IoT devices.

All Telnet traffic, including credentials, is transmitted in plaintext. This makes it trivial to intercept on a shared network. Many devices ship with default or blank Telnet credentials, and some expose Telnet as a hidden management interface.

Connect with a Telnet client or netcat to grab the banner and identify the device. Check for default credentials, blank passwords, and command injection in login prompts. Network captures may reveal credentials from other users connecting to the service.

Enumeration

Grab banners, versions, and NTLM info from Telnet services

1

Exploitation

Guides on brute forcing, weak creds, and MITM attacks on Telnet

3