Http/options
De www.metasploit-es.com.ar
El modulo escaneador "options" conecta a un rango de direcciones IP dado y consulta cualquier servidor web sobre sus opciones disponibles. Algunas de estas opciones pueden ser posteriormente elevadas para penetrar el sistema.
msf > use auxiliary/scanner/http/options msf auxiliary(options) > show options Module options: Name Current Setting Required Description ---- --------------- -------- ----------- Proxies no Use a proxy chain RHOSTS yes The target address range or CIDR identifier RPORT 80 yes The target port THREADS 1 yes The number of concurrent threads VHOST no HTTP server virtual host
Definimos nuestros valores de RHOSTS y THREADS y ejecutamos el escaneador.
msf auxiliary(options) > set RHOSTS 192.168.1.200-210 RHOSTS => 192.168.1.200-254 msf auxiliary(options) > set THREADS 11 THREADS => 11 msf auxiliary(options) > run [*] 192.168.1.203 allows OPTIONS, TRACE, GET, HEAD, DELETE, COPY, MOVE, PROPFIND, PROPPATCH, SEARCH, MKCOL, LOCK, UNLOCK methods [*] 192.168.1.204 allows OPTIONS, TRACE, GET, HEAD, DELETE, COPY, MOVE, PROPFIND, PROPPATCH, SEARCH, MKCOL, LOCK, UNLOCK methods [*] 192.168.1.205 allows OPTIONS, TRACE, GET, HEAD, COPY, PROPFIND, SEARCH, LOCK, UNLOCK methods [*] 192.168.1.206 allows OPTIONS, TRACE, GET, HEAD, COPY, PROPFIND, SEARCH, LOCK, UNLOCK methods [*] 192.168.1.208 allows GET,HEAD,POST,OPTIONS,TRACE methods [*] 192.168.1.209 allows GET,HEAD,POST,OPTIONS,TRACE methods [*] Scanned 55 of 55 hosts (100% complete) [*] Auxiliary module execution completed msf auxiliary(options) >
© Offensive Security 2009
Original de www.offensive-security.com Traducido por cbk999
