Http/webdav website content
De www.metasploit-es.com.ar
El modulo auxiliar "webdav_website_content" escanea un host o rango de hosts en busca de servidores que divulguen su contenido via WebDav.
msf > use auxiliary/scanner/http/webdav_website_content msf auxiliary(webdav_website_content) > show options Module options (auxiliary/scanner/http/webdav_website_content): Name Current Setting Required Description ---- --------------- -------- ----------- Proxies no Use a proxy chain RHOSTS yes The target address range or CIDR identifier RPORT 80 yes The target port THREADS 1 yes The number of concurrent threads VHOST no HTTP server virtual host
Como este modulo puede producir un monton de salida, definiremos RHOSTS para que apunte a una sola maquina y lo ejecutaremos.
msf auxiliary(webdav_website_content) > set RHOSTS 192.168.1.201 RHOSTS => 192.168.1.201 msf auxiliary(webdav_website_content) > run [*] Found file or directory in WebDAV response (192.168.1.201) http://192.168.1.201/ [*] Found file or directory in WebDAV response (192.168.1.201) http://192.168.1.201/aspnet_client/ [*] Found file or directory in WebDAV response (192.168.1.201) http://192.168.1.201/images/ [*] Found file or directory in WebDAV response (192.168.1.201) http://192.168.1.201/_private/ [*] Found file or directory in WebDAV response (192.168.1.201) http://192.168.1.201/_vti_cnf/ [*] Found file or directory in WebDAV response (192.168.1.201) http://192.168.1.201/_vti_cnf/iisstart.htm [*] Found file or directory in WebDAV response (192.168.1.201) http://192.168.1.201/_vti_cnf/pagerror.gif [*] Found file or directory in WebDAV response (192.168.1.201) http://192.168.1.201/_vti_log/ [*] Found file or directory in WebDAV response (192.168.1.201) http://192.168.1.201/_vti_pvt/ [*] Found file or directory in WebDAV response (192.168.1.201) http://192.168.1.201/_vti_pvt/access.cnf [*] Found file or directory in WebDAV response (192.168.1.201) http://192.168.1.201/_vti_pvt/botinfs.cnf [*] Found file or directory in WebDAV response (192.168.1.201) http://192.168.1.201/_vti_pvt/bots.cnf [*] Found file or directory in WebDAV response (192.168.1.201) http://192.168.1.201/_vti_pvt/deptodoc.btr [*] Found file or directory in WebDAV response (192.168.1.201) http://192.168.1.201/_vti_pvt/doctodep.btr [*] Found file or directory in WebDAV response (192.168.1.201) http://192.168.1.201/_vti_pvt/frontpg.lck [*] Found file or directory in WebDAV response (192.168.1.201) http://192.168.1.201/_vti_pvt/linkinfo.btr [*] Found file or directory in WebDAV response (192.168.1.201) http://192.168.1.201/_vti_pvt/service.cnf [*] Found file or directory in WebDAV response (192.168.1.201) http://192.168.1.201/_vti_pvt/service.lck [*] Found file or directory in WebDAV response (192.168.1.201) http://192.168.1.201/_vti_pvt/services.cnf [*] Found file or directory in WebDAV response (192.168.1.201) http://192.168.1.201/_vti_pvt/svcacl.cnf [*] Found file or directory in WebDAV response (192.168.1.201) http://192.168.1.201/_vti_pvt/uniqperm.cnf [*] Found file or directory in WebDAV response (192.168.1.201) http://192.168.1.201/_vti_pvt/writeto.cnf [*] Found file or directory in WebDAV response (192.168.1.201) http://192.168.1.201/_vti_script/ [*] Found file or directory in WebDAV response (192.168.1.201) http://192.168.1.201/_vti_txt/ [*] Scanned 1 of 1 hosts (100% complete) [*] Auxiliary module execution completed msf auxiliary(webdav_website_content) >
© Offensive Security 2009
Original de www.offensive-security.com Traducido por cbk999
