I am following a tutorial that can be found here.


Specifically the "Remote access vulnerability - Rlogin" section.

When I run the command "rlogin -l root"

I get a password prompt, as per the below

The authenticity of host ' (' can't be established.
RSA key fingerprint is *****.
Are you sure you want to continue connecting (yes/no)? yes
Warning: Permanently added '' (RSA) to the list of known hosts.
root@'s password: 

The tutorial states "It's because we don't have ssh-client installed on Kali Linux"

However when I try to install the client, using the following command "apt-get install rsh-client", I get the following message:

Reading package lists... Done
Building dependency tree
Reading state information... Done
Note, selecting 'openssh-client' instead of 'rsh-client'
openssh-client is already the newest version.
0 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.

I have tried running "apt-get update && apt-get upgrade" to make sure everything is up to date.

I have also tried uninstalling and re-installing the openssh client.

However I continue to get prompted by the password box (which according to the tutorial I should not)

Any help greatly appreciated.

3 Answers 3


My issue was solved by doing this :-

  1. Update the package index:
    # sudo apt-get update
  2. Install rsh-client deb package:
    # sudo apt-get install rsh-client

Try the command:

system ssh start

then check if it is active by typing in service --status-all
If there is a + next to SSH it is activated.


Even though M2 tutorial offers you a walk though, please leave a room for some challenges: "rlogin -l root" is asking you for a "root" user password, right? Check out /etc/issue and think about it... think of username that M2 is using..

  • 3
    While some of those might be helpful thoughts to consider, this doesn't really provide an answer to the question, and so would be better off as a comment. Nov 22, 2016 at 1:40

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Not the answer you're looking for? Browse other questions tagged or ask your own question.