POPPASS
Nmap discovered a POPPASS server on the target port 106
The running service is Mercury/32 poppass service
┌──(kali㉿kali)-[~/PEN-200/PG_PRACTICE/hepet]
└─$ telnet $IP 106
Trying 192.168.159.140...
Connected to 192.168.159.140.
Escape character is '^]'.
200 localhost MercuryW PopPass server ready.Connected via telnet POPPASS server is for remote password changing
HELP
100-Mercury PopPass Server v4.62
100-This server recognizes the following commands:
100- USER Enter your user (login) name
100- PASS Enter the password matching your username
100- NEWPASS Change your password on this system.
100- QUIT Logout and close the connection.
100 You must login using USER/PASS before attempting NEWPASS.HELP command reveals the supports commands
However, no credential is known at this time