【2014-05-11】某《魔鬼训练营》读书笔记：活跃主机探测

[历史归档]本文原发布于 cstriker1407.info 个人博客内容为历史存档仅供参考。发布时间2014-05-11 标题某《魔鬼训练营》读书笔记活跃主机探测分类操作系统 / 安全 标签metasploit·nmap·活跃主机探测某《魔鬼训练营》读书笔记活跃主机探测**笔记仅供学习交流使用请勿进行其他用途**Metasploit自带扫描模块arp\_sweep模块:udp\_sweep模块udp\_probe模块nmap工具使用Nmap进行ping式扫描使用Nmap进行udp式扫描参考笔记仅供学习交流使用请勿进行其他用途Metasploit自带扫描模块arp_sweep模块:路径auxiliary/scanner/discovery/arp_sweep注意事项使用ARP扫描协议可以快速扫描同一网段内活跃主机,最好配置好源地址和IPmsfsearch arp_sweep Matching ModulesName Disclosure Date Rank Description ---- --------------- ---- ----------- auxiliary/scanner/discovery/arp_sweep normal ARP Sweep Local Network Discovery msfuse auxiliary/scanner/discovery/arp_sweep msf auxiliary(arp_sweep)show options Module options(auxiliary/scanner/discovery/arp_sweep): Name Current Setting Required Description ---- --------------- -------- ----------- INTERFACE no The name of the interface RHOSTSyesThe target address range or CIDR identifier SHOST no Source IP Address SMAC no Source MAC Address THREADS1yesThe number of concurrent threads TIMEOUT5yesThe number of seconds towaitfornew data msf auxiliary(arp_sweep)setRHOSTS10.10.10.0-10.10.10.255 RHOSTS10.10.10.0-10.10.10.255 msf auxiliary(arp_sweep)setTHREADS50THREADS50msf auxiliary(arp_sweep)exploit 。。。。。 。。。。。udp_sweep模块路径auxiliary/scanner/discovery/udp_sweepmsfsearch udp_sweep Matching ModulesName Disclosure Date Rank Description ---- --------------- ---- ----------- auxiliary/scanner/discovery/udp_sweep normal UDP Service Sweeper msfuse auxiliary/scanner/discovery/udp_sweep msf auxiliary(udp_sweep)show options Module options(auxiliary/scanner/discovery/udp_sweep): Name Current Setting Required Description ---- --------------- -------- ----------- BATCHSIZE256yesThe number of hosts to probeineachsetCHOST no Thelocalclient address RHOSTSyesThe target address range or CIDR identifier THREADS1yesThe number of concurrent threads msf auxiliary(udp_sweep)setRHOSTS10.10.10.0-10.10.10.255 RHOSTS10.10.10.0-10.10.10.255 msf auxiliary(udp_sweep)setTHREADS50THREADS50msf auxiliary(udp_sweep)exploit 。。。。。 。。。。。udp_probe模块路径auxiliary/scanner/discovery/udp_probe。。。。。。。。。。nmap工具使用Nmap进行ping式扫描用途发送ping命令进行探测可能会被防火墙阻挡。nmap-sn10.10.10.0-255使用Nmap进行udp式扫描用途发送UDP包探测和udp_sweep模块类似。nmap-PU-sn10.10.10.0-255#PU:UDP方式探测 sn仅探测主机不探测端口加速探测。参考http://www.offensive-security.com/metasploit-unleashed/Scanner_Discovery_Auxiliary_Modules