Portscan/xmas
De www.metasploit-es.com.ar
El modulo de escaneo de puertos "xmas" realiza un escaneo con las banderas FIN, PSH y URG activadas y en ocasiones puede pasar ciertos cortafuegos. Para mas detalles en esta tecnica de escaneo visita el siguiente enlace: http://nmap.org/book/man-port-scanning-techniques.html
msf > use auxiliary/scanner/portscan/xmas msf auxiliary(xmas) > show options Module options (auxiliary/scanner/portscan/xmas): Name Current Setting Required Description ---- --------------- -------- ----------- BATCHSIZE 256 yes The number of hosts to scan per set INTERFACE no The name of the interface PORTS 1-10000 yes Ports to scan (e.g. 22-25,80,110-900) RHOSTS yes The target address range or CIDR identifier SNAPLEN 65535 yes The number of bytes to capture THREADS 1 yes The number of concurrent threads TIMEOUT 500 yes The reply read timeout in milliseconds
Para configurar nuestro escaneo, definimos RHOSTS, THREADS y un pequeño conjunto de PORTS y lo ejecutamos.
msf auxiliary(xmas) > set RHOSTS 192.168.1.200-210 RHOSTS => 192.168.1.200-210 msf auxiliary(xmas) > set THREADS 11 THREADS => 11 msf auxiliary(xmas) > set PORTS 22,80,137,445 PORTS => 22,80,137,445 msf auxiliary(xmas) > run [*] TCP OPEN|FILTERED 192.168.1.200:22 [*] TCP OPEN|FILTERED 192.168.1.202:22 [*] TCP OPEN|FILTERED 192.168.1.204:22 [*] TCP OPEN|FILTERED 192.168.1.209:22 [*] TCP OPEN|FILTERED 192.168.1.210:22 [*] TCP OPEN|FILTERED 192.168.1.200:80 [*] TCP OPEN|FILTERED 192.168.1.202:80 [*] TCP OPEN|FILTERED 192.168.1.204:80 [*] TCP OPEN|FILTERED 192.168.1.209:80 [*] TCP OPEN|FILTERED 192.168.1.210:80 [*] TCP OPEN|FILTERED 192.168.1.202:137 [*] TCP OPEN|FILTERED 192.168.1.204:137 [*] TCP OPEN|FILTERED 192.168.1.209:137 [*] TCP OPEN|FILTERED 192.168.1.210:137 [*] TCP OPEN|FILTERED 192.168.1.200:445 [*] TCP OPEN|FILTERED 192.168.1.202:445 [*] TCP OPEN|FILTERED 192.168.1.204:445 [*] TCP OPEN|FILTERED 192.168.1.209:445 [*] TCP OPEN|FILTERED 192.168.1.210:445 [*] Scanned 11 of 11 hosts (100% complete) [*] Auxiliary module execution completed msf auxiliary(xmas) >
© Offensive Security 2009
Original de www.offensive-security.com Traducido por cbk999
