Http/ssl
De www.metasploit-es.com.ar
El modulo "ssl" consulta un host o rango de hosts y muestra la informacion del certificado SSL si se encuentra.
msf > use auxiliary/scanner/http/ssl msf auxiliary(ssl) > show options Module options: Name Current Setting Required Description ---- --------------- -------- ----------- RHOSTS yes The target address range or CIDR identifier RPORT 443 yes The target port THREADS 1 yes The number of concurrent threads
Para configurar el modulo, definimos nuestros valores RHOSTS y THREADS y lo ejecutamos.
msf auxiliary(ssl) > set RHOSTS 192.168.1.200-254 RHOSTS => 192.168.1.200-254 msf auxiliary(ssl) > set THREADS 20 THREADS => 20 msf auxiliary(ssl) > run [*] Error: 192.168.1.205: OpenSSL::SSL::SSLError SSL_connect SYSCALL returned=5 errno=0 state=SSLv3 read server hello A [*] Error: 192.168.1.206: OpenSSL::SSL::SSLError SSL_connect SYSCALL returned=5 errno=0 state=SSLv3 read server hello A [*] 192.168.1.208:443 Subject: /C=--/ST=SomeState/L=SomeCity/O=SomeOrganization/OU=SomeOrganizationalUnit/CN=localhost.localdomain/emailAddress=root@localhost.localdomain Signature Alg: md5WithRSAEncryption [*] 192.168.1.208:443 WARNING: Signature algorithm using MD5 (md5WithRSAEncryption) [*] 192.168.1.208:443 has common name localhost.localdomain [*] 192.168.1.211:443 Subject: /C=--/ST=SomeState/L=SomeCity/O=SomeOrganization/OU=SomeOrganizationalUnit/CN=localhost.localdomain/emailAddress=root@localhost.localdomain Signature Alg: sha1WithRSAEncryption [*] 192.168.1.211:443 has common name localhost.localdomain [*] Scanned 13 of 55 hosts (023% complete) [*] Error: 192.168.1.227: OpenSSL::SSL::SSLError SSL_connect SYSCALL returned=5 errno=0 state=SSLv3 read server hello A [*] 192.168.1.223:443 Subject: /CN=localhost Signature Alg: sha1WithRSAEncryption [*] 192.168.1.223:443 has common name localhost [*] 192.168.1.222:443 WARNING: Signature algorithm using MD5 (md5WithRSAEncryption) [*] 192.168.1.222:443 has common name MAILMAN [*] Scanned 30 of 55 hosts (054% complete) [*] Scanned 31 of 55 hosts (056% complete) [*] Scanned 39 of 55 hosts (070% complete) [*] Scanned 41 of 55 hosts (074% complete) [*] Scanned 43 of 55 hosts (078% complete) [*] Scanned 45 of 55 hosts (081% complete) [*] Scanned 46 of 55 hosts (083% complete) [*] Scanned 53 of 55 hosts (096% complete) [*] Scanned 55 of 55 hosts (100% complete) [*] Auxiliary module execution completed msf auxiliary(ssl) >
© Offensive Security 2009
Original de www.offensive-security.com Traducido por cbk999
