msf之SNMP的扫描与枚举

最新推荐文章于 2024-06-10 13:08:37 发布

Ahri-情书

最新推荐文章于 2024-06-10 13:08:37 发布

阅读量2.3k

点赞数 1

分类专栏：学习笔记文章标签： msf SNMP

本文链接：https://blog.csdn.net/fake_hydra/article/details/76325451

版权

101 篇文章 3 订阅

订阅专栏

  msf > use auxiliary/scanner/snmp/snmp_login 

  msf auxiliary(snmp_login) > show options 

  Module options (auxiliary/scanner/snmp/snmp_login): 

  Name Current Setting Required Description 

  ---- --------------- -------- ----------- 

  BATCHSIZE 256 yes The number of hosts to probe in each set 

  BLANK_PASSWORDS false no Try blank passwords for all users 

  BRUTEFORCE_SPEED 5 yes How fast to bruteforce, from 0 to 5 

  CHOST no The local client address 

  DB_ALL_CREDS false no Try each user/password couple stored in the current database 

  DB_ALL_PASS false no Add all passwords in the current database to the list 

  DB_ALL_USERS false no Add all users in the current database to the list 

  PASSWORD no The password to test 

  PASS_FILE /opt/metasploit/apps/pro/msf3/data/wordlists/snmp_default_pass.txt no File containing communities, one per line 

  RHOSTS yes The target address range or CIDR identifier 

  RPORT 161 yes The target port 

  STOP_ON_SUCCESS false yes Stop guessing when a credential works for a host 

  THREADS 1 yes The number of concurrent threads 

  USER_AS_PASS false no Try the username as the password for all users 

  VERBOSE true yes Whether to print output for all attempts 

  msf auxiliary(snmp_login) > set RHOSTS 192.168.1.129 

  RHOSTS => 192.168.1.129 

  msf auxiliary(snmp_login) > set T 

  set THREADS set TIMESTAMPOUTPUT 

  msf auxiliary(snmp_login) > set THREADS 10 

  THREADS => 10 

  msf auxiliary(snmp_login) > run 

  成功 

  换另一个模块 

  msf auxiliary(snmp_login) > use auxiliary/scanner/snmp/snmp_enum 

  msf auxiliary(snmp_enum) > show options 

  Module options (auxiliary/scanner/snmp/snmp_enum): 

  Name Current Setting Required Description 

  ---- --------------- -------- ----------- 

  COMMUNITY public yes SNMP Community String 

  RETRIES 1 yes SNMP Retries 

  RHOSTS yes The target address range or CIDR identifier 

  RPORT 161 yes The target port 

  THREADS 1 yes The number of concurrent threads 

  TIMEOUT 1 yes SNMP Timeout 

  VERSION 1 yes SNMP Version <1/2c> 

  msf auxiliary(snmp_enum) > set RHOSTS 192.168.1.129 

  RHOSTS => 192.168.1.129 

  msf auxiliary(snmp_enum) > set THREADS 10 

  THREADS => 10 

  msf auxiliary(snmp_enum) > run 

  [-] 192.168.1.129 SNMP request timeout. 

  [*] Scanned 1 of 1 hosts (100% complete) 

  [*] Auxiliary module execution completed 

  msf auxiliary(snmp_enum) > 

关注