We are performing a penetration test as part of a study where the hardware unit listens for connection over FTP, SSH, and Telnet. All of these are password-protected. The hardware unit must first be loaded with a small 4 MB "utility" that tells the hardware to listen on a specific IP address over these services.
We have hex-dumped this utility and found a lot of configuration type files on there. We also discovered the RSA private key and the DSA private key. We should be able to login using these keys instead of the password as shown here:
However, we are unsure how do we go about doing this? Usually the server has the public key encoded in it and the client provides the private key. We found the private key on the "utility" that is supposed to be loaded on the hardware unit. And we don't have the corresponding public key. Any ideas how we could proceed?