版本:Grey Hack v0.7.3618 - Alpha
适用于SSH (22) 端口、FTP (21) 端口、HTTP (80) 端口、SMTP (25) 端口及3306/3307 端口等。
脚本源码
if params.len != 2 or params[0] == "-h" or params[0] == "--help" then exit("<b>Usage: "+program_path.split("/")[-1]+" [ip_address] [port]</b>")
metaxploit = include_lib("/lib/metaxploit.so")
if not metaxploit then
metaxploit = include_lib(current_path + "/metaxploit.so")
end if
if not metaxploit then exit("Error: Can't find metaxploit library in the /lib path or the current folder")
address = params[0]
port = params[1].to_int
net_session = metaxploit.net_use( address, port )
if not net_session then exit("Error: can't connect to net session")
metaLib = net_session.dump_lib
print("Founded " + metaLib.lib_name + " "+ metaLib.version)
if not metaLib then exit("Error: TargetLib not found.")
newPass = user_input("Enter new password: ")
exploits = metaxploit.scan(metaLib)
for exploit in exploits
print(exploit)
result_lists = metaxploit.scan_address(metaLib, exploit).split("Unsafe check: ")[1:]
for result_list in result_lists
target_str = result_list.split(".")[0]
target_key = target_str.split(" ")[-1]
result = metaLib.overflow(exploit, target_key[3:-4], newPass)
if typeof(result) == "number" then exit("Done...")
end for
end for
exit("Fail...")
用法
【脚本名】 【公网IP】 【端口号】
要注入的Password
效果及示例
输入要注入的Password
检测目标端口库版本
再尝试遍历攻破漏洞以修改Password
通过22端口修改192.168.1.3的Password:
修改并登陆成功