使用msf进行FTP扫描

开启PostgreSQL

Kali 2.0

1
service postgresql start

查看PostgreSQL是否启动成功

默认端口为5432

1
2
3
4
5
6
➜  ~  netstat -antp
Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address           Foreign Address         State       PID/Program name    
tcp        0      0 127.0.0.1:5432          0.0.0.0:*               LISTEN      2377/postgres       
tcp        0      0 127.0.0.1:6379          0.0.0.0:*               LISTEN      737/redis-server 12
tcp6       0      0 ::1:5432                :::*                    LISTEN      2377/postgres

initialize the msf database

1
msfdb init

Launch msfconsole in Kali

1
msfconsole
1
2
3
msf > db_status
[*] postgresql connected to msf
msf >

FTP 扫描

1
msf > use scanner/ftp/ftp_version
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
msf auxiliary(ftp_version) > set RHOSTS 192.168.1.0/24
RHOSTS => 192.168.1.0/24
msf auxiliary(ftp_version) > set THREADS 255
THREADS => 255
msf auxiliary(ftp_version) > run
[*] 192.168.1.55:21 FTP Banner: '220 Slyar FTPserver!\x0d\x0a'
[*] 192.168.1.88:21 FTP Banner: '220 \xbb\xb6\xd3\xad\xb7\xc3\xce\xca Slyar FTPserver!\x0d\x0a'
[*] Scanned  32 of 256 hosts (12% complete)
[*] Scanned 244 of 256 hosts (95% complete)
[*] Scanned 250 of 256 hosts (97% complete)
[*] Scanned 253 of 256 hosts (98% complete)
[*] Scanned 254 of 256 hosts (99% complete)
[*] Scanned 256 of 256 hosts (100% complete)
[*] Auxiliary module execution completed

查看是否可用匿名登陆

1
2
3
4
5
6
msf auxiliary(ftp_version) > use auxiliary/scanner/ftp/anonymous
msf auxiliary(anonymous) > set RHOSTS 192.168.1.0/24
RHOSTS => 192.168.1.0/24
msf auxiliary(anonymous) > set THREADS 50
THREADS => 50
msf auxiliary(anonymous) > run
1
2
3
4
5
6
7
8
9
10
11
12
13
[+] 192.168.1.55:21 - Anonymous READ (220 Slyar FTPserver!)
[*] Scanned  38 of 256 hosts (14% complete)
[*] Scanned  71 of 256 hosts (27% complete)
[*] Scanned  82 of 256 hosts (32% complete)
[*] Scanned 111 of 256 hosts (43% complete)
[*] Scanned 160 of 256 hosts (62% complete)
[*] Scanned 167 of 256 hosts (65% complete)
[*] Scanned 188 of 256 hosts (73% complete)
[*] Scanned 247 of 256 hosts (96% complete)
[*] Scanned 255 of 256 hosts (99% complete)
[*] Scanned 256 of 256 hosts (100% complete)
[*] Auxiliary module execution completed
msf auxiliary(anonymous) >
赏

谢谢你请我吃糖果

微信

扫一扫，分享到微信

微信分享二维码

tag:

    缺失模块。
    1、在博客根目录（注意不是yilia根目录）执行以下命令：
    npm i hexo-generator-json-content --save

    2、在根目录_config.yml里添加配置： 

      jsonContent:
    meta: false
    pages: false
    posts:
      title: true
      date: true
      path: true
      text: true
      raw: false
      content: false
      slug: false
      updated: false
      comments: false
      link: false
      permalink: false
      excerpt: false
      categories: false
      tags: true

这个人很懒,什么都没留下