Kali中Metasploit信息收集并使用暴力破解

淡淡的烟草味﹌ 2023-07-13 04:29 13阅读 0赞

**信息收集在渗透测试中极为重要，只有了解了渗透对象的具体信息才能更有针对性的对目标进行测试渗透，暴力破解只是一种展示的方法，仅用于交流学习。**

1.1发起攻击的准备阶段  
1.1.1 使用Metasploit 中的nmap和arp\_sweep 收集主机信息  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80Mzg5NDc3MQ_size_16_color_FFFFFF_t_70]  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80Mzg5NDc3MQ_size_16_color_FFFFFF_t_70 1]  
1.1.2 使用半连接方式扫描TCP端口  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80Mzg5NDc3MQ_size_16_color_FFFFFF_t_70 2]  
1.1.3 使用auxiliary /sniffer下的psnuffle模块进行密码嗅探  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80Mzg5NDc3MQ_size_16_color_FFFFFF_t_70 3]  
1.2基于SNMP协议收集主机信息  
1.2.1使用snmp\_enum模块通过snmp协议扫描目标服务器信息  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80Mzg5NDc3MQ_size_16_color_FFFFFF_t_70 4]  
1.3基于SMB协议收集信息  
1.3.1使用smb\_version 基于SMB协议扫描版本号  
![在这里插入图片描述][20200310215226835.png]![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80Mzg5NDc3MQ_size_16_color_FFFFFF_t_70 5]  
1.3.2 使用smb\_enumshares基于SMB协议扫共享文件（账号、密码）  
![在这里插入图片描述][20200310215244719.png]  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80Mzg5NDc3MQ_size_16_color_FFFFFF_t_70 6]  
1.4基于SSH协议收集信息  
1.4.1查看ssh服务的版本信息  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80Mzg5NDc3MQ_size_16_color_FFFFFF_t_70 7]  
1.4.2对SSH暴力破解  
![在这里插入图片描述][20200310215306255.png]  
1.5基于FTP协议收集信息  
1.5.1查看ftp服务的版本信息  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80Mzg5NDc3MQ_size_16_color_FFFFFF_t_70 8]  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80Mzg5NDc3MQ_size_16_color_FFFFFF_t_70 9]  
1.5.2ftp匿名登录扫描  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80Mzg5NDc3MQ_size_16_color_FFFFFF_t_70 10]  
1.5.3暴力破解  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80Mzg5NDc3MQ_size_16_color_FFFFFF_t_70 11]

[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80Mzg5NDc3MQ_size_16_color_FFFFFF_t_70]: https://img-blog.csdnimg.cn/20200310215113503.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80Mzg5NDc3MQ==,size_16,color_FFFFFF,t_70
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80Mzg5NDc3MQ_size_16_color_FFFFFF_t_70 1]: https://img-blog.csdnimg.cn/20200310215126652.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80Mzg5NDc3MQ==,size_16,color_FFFFFF,t_70
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80Mzg5NDc3MQ_size_16_color_FFFFFF_t_70 2]: https://img-blog.csdnimg.cn/2020031021513640.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80Mzg5NDc3MQ==,size_16,color_FFFFFF,t_70
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80Mzg5NDc3MQ_size_16_color_FFFFFF_t_70 3]: https://img-blog.csdnimg.cn/20200310215150779.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80Mzg5NDc3MQ==,size_16,color_FFFFFF,t_70
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80Mzg5NDc3MQ_size_16_color_FFFFFF_t_70 4]: https://img-blog.csdnimg.cn/20200310215209765.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80Mzg5NDc3MQ==,size_16,color_FFFFFF,t_70
[20200310215226835.png]: https://img-blog.csdnimg.cn/20200310215226835.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80Mzg5NDc3MQ_size_16_color_FFFFFF_t_70 5]: https://img-blog.csdnimg.cn/20200310215218227.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80Mzg5NDc3MQ==,size_16,color_FFFFFF,t_70
[20200310215244719.png]: https://img-blog.csdnimg.cn/20200310215244719.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80Mzg5NDc3MQ_size_16_color_FFFFFF_t_70 6]: https://img-blog.csdnimg.cn/2020031021525455.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80Mzg5NDc3MQ==,size_16,color_FFFFFF,t_70
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80Mzg5NDc3MQ_size_16_color_FFFFFF_t_70 7]: https://img-blog.csdnimg.cn/20200310215256941.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80Mzg5NDc3MQ==,size_16,color_FFFFFF,t_70
[20200310215306255.png]: https://img-blog.csdnimg.cn/20200310215306255.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80Mzg5NDc3MQ_size_16_color_FFFFFF_t_70 8]: https://img-blog.csdnimg.cn/20200310215322256.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80Mzg5NDc3MQ==,size_16,color_FFFFFF,t_70
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80Mzg5NDc3MQ_size_16_color_FFFFFF_t_70 9]: https://img-blog.csdnimg.cn/20200310215331545.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80Mzg5NDc3MQ==,size_16,color_FFFFFF,t_70
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80Mzg5NDc3MQ_size_16_color_FFFFFF_t_70 10]: https://img-blog.csdnimg.cn/2020031021533422.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80Mzg5NDc3MQ==,size_16,color_FFFFFF,t_70
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80Mzg5NDc3MQ_size_16_color_FFFFFF_t_70 11]: https://img-blog.csdnimg.cn/20200310215343245.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80Mzg5NDc3MQ==,size_16,color_FFFFFF,t_70