nmap -- [ip-geolocation-maxmind]

最新推荐文章于 2024-06-18 17:26:57 发布

Nixawk

最新推荐文章于 2024-06-18 17:26:57 发布

阅读量1.1k

点赞数

分类专栏： Information Gathering Pentesting

本文链接：https://blog.csdn.net/nixawk/article/details/38173467

版权

Pentesting 同时被 2 个专栏收录

160 篇文章

订阅专栏

Information Gathering

27 篇文章

订阅专栏

插件ip-location-maxmind，可以帮助nmap获取ip的geo信息。类似的插件有(ip-geolication-geobytes, ip-geolocation-ipinfodb, traceroute-geolocation)

官方说明:
http://nmap.org/nsedoc/scripts/ip-geolocation-maxmind.html

数据库:
http://geolite.maxmind.com/download/geoip/database/GeoLiteCity.dat.gz

安装:
cd/usr/local/share/nmap/nselib/data/
wgethttp://geolite.maxmind.com/download/geoip/database/GeoLiteCity.dat.gz
gzip -d GeoLiteCity.dat.gz

示例: (如果脚本执行过程中有错误，请自行修改脚本更正)

nixawk@gnu:~$ nmap -v -Pn --script ip-geolocation-maxmind 8.8.8.8

Starting Nmap 6.40 ( http://nmap.org ) at 2014-07-28 04:41 CST
NSE: Loaded 1 scripts for scanning.
NSE: Script Pre-scanning.
Initiating Parallel DNS resolution of 1 host. at 04:41
Completed Parallel DNS resolution of 1 host. at 04:41, 0.00s elapsed
Initiating Connect Scan at 04:41
Scanning google-public-dns-a.google.com (8.8.8.8) [1000 ports]
Discovered open port 53/tcp on 8.8.8.8
Completed Connect Scan at 04:41, 15.16s elapsed (1000 total ports)
NSE: Script scanning 8.8.8.8.
Initiating NSE at 04:41
Completed NSE at 04:41, 0.00s elapsed
Nmap scan report for google-public-dns-a.google.com (8.8.8.8)
Host is up (0.21s latency).
Not shown: 999 filtered ports
PORT STATE SERVICE
53/tcp open domain

Host script results:
| ip-geolocation-maxmind:
| 8.8.8.8
| coordinates (lat,lon): 38,-97
|_ , United States

NSE: Script Post-scanning.
Read data files from: /usr/local/bin/../share/nmap
Nmap done: 1 IP address (1 host up) scanned in 15.22 seconds