Http/robots txt
De www.metasploit-es.com.ar
El modulo auxiliar "robots_txt" escanea un servidor o rango de servidores buscando la presencia y contenidos de un archivo robots.txt. Estos archivos frecuentemente contienen informacion valiosa que los administradores no quieren que los motores de busqueda descubran.
msf > use auxiliary/scanner/http/robots_txt msf auxiliary(robots_txt) > show options Module options: Name Current Setting Required Description ---- --------------- -------- ----------- PATH / yes The test path to find robots.txt file Proxies no Use a proxy chain RHOSTS yes The target address range or CIDR identifier RPORT 80 yes The target port THREADS 1 yes The number of concurrent threads VHOST no HTTP server virtual host
La configuracion para este modulo es minima. Simplemente definimos los valores de RHOSTS y THREADS y lo corremos.
msf auxiliary(robots_txt) > set RHOSTS 192.168.1.200-254 RHOSTS => 192.168.1.200-254 msf auxiliary(robots_txt) > set THREADS 20 THREADS => 20 msf auxiliary(robots_txt) > run [*] [192.168.1.208] /robots.txt - /internal/, /tmp/ [*] [192.168.1.209] /robots.txt - / [*] [192.168.1.211] /robots.txt - / [*] Scanned 15 of 55 hosts (027% complete) [*] Scanned 29 of 55 hosts (052% complete) [*] Scanned 38 of 55 hosts (069% complete) [*] Scanned 39 of 55 hosts (070% complete) [*] Scanned 40 of 55 hosts (072% complete) [*] Scanned 44 of 55 hosts (080% complete) [*] Scanned 45 of 55 hosts (081% complete) [*] Scanned 46 of 55 hosts (083% complete) [*] Scanned 50 of 55 hosts (090% complete) [*] Scanned 55 of 55 hosts (100% complete) [*] Auxiliary module execution completed msf auxiliary(robots_txt) >
© Offensive Security 2009
Original de www.offensive-security.com Traducido por cbk999