zoukankan      html  css  js  c++  java
  • 使用Netcat进行攻击

    https://www.freebuf.com/column/135007.html

    在网上找到了一个开启了ftp服务的服务:

    http://static.vhdong.com/Upload/Templates/

    扫描了一下 是21端口   121.41.89.5

    但是ftp的匿名访问并没有开启吧, 连不上的

    root@kali:/home/test# ping  static.vhdong.com
    PING static.vhdong.com (121.41.89.5) 56(84) bytes of data.
    64 bytes from 121.41.89.5 (121.41.89.5): icmp_seq=1 ttl=115 time=30.2 ms
    64 bytes from 121.41.89.5 (121.41.89.5): icmp_seq=2 ttl=115 time=30.1 ms
    ^C
    --- static.vhdong.com ping statistics ---
    2 packets transmitted, 2 received, 0% packet loss, time 3ms
    rtt min/avg/max/mdev = 30.054/30.116/30.179/0.184 ms

    root@kali:
    /home/test# nmap static.vhdong.com Starting Nmap 7.70 ( https://nmap.org ) at 2019-01-08 09:52 CST Nmap scan report for static.vhdong.com (121.41.89.5) Host is up (0.031s latency). Not shown: 997 filtered ports PORT STATE SERVICE 21/tcp open ftp 80/tcp open http 3389/tcp open ms-wbt-server Nmap done: 1 IP address (1 host up) scanned in 17.94 seconds

    root@kali:
    /home/test# nc 121.41.89.5 21 220-FileZilla Server 0.9.53 beta 220-written by Tim Kosse (tim.kosse@filezilla-project.org) 220 Please visit https://filezilla-project.org/ USER anyone 331 Password required for anyone PASS anyone 530 Login or password incorrect! USER 421 Login time exceeded. Closing control connection. root@kali:/home/test# nc 121.41.89.5 21 220-FileZilla Server 0.9.53 beta 220-written by Tim Kosse (tim.kosse@filezilla-project.org) 220 Please visit https://filezilla-project.org/ USER anonymous 331 Password required for anonymous PASS anonymous 530 Login or password incorrect! pwd 530 Please log in with USER and PASS first. 421 Login time exceeded. Closing control connection. root@kali:/home/test# nc 121.41.89.5 21 220-FileZilla Server 0.9.53 beta 220-written by Tim Kosse (tim.kosse@filezilla-project.org) 220 Please visit https://filezilla-project.org/ USER root 331 Password required for root PASS root 530 Login or password incorrect! help 214-The following commands are recognized: ABOR ADAT ALLO APPE AUTH CDUP CLNT CWD DELE EPRT EPSV FEAT HASH HELP LIST MDTM MFMT MKD MLSD MLST MODE NLST NOOP NOP OPTS P@SW PASS PASV PBSZ PORT PROT PWD QUIT REST RETR RMD RNFR RNTO SITE SIZE STOR STRU SYST TYPE USER XCUP XCWD XMKD XPWD XRMD 214 Have a nice day. pwd 530 Please log in with USER and PASS first. 421 Login time exceeded. Closing control connection. root@kali:/home/test#
  • 相关阅读:
    需求墙,挺有创意
    产品分析套路
    复杂问题的拆解分析,有点意思
    xss如何加载远程js的一些tips
    一次有趣的XSS漏洞挖掘分析(3)最终篇
    一次有趣的XSS漏洞挖掘分析(2)
    一次有趣的XSS漏洞挖掘分析(1)
    Java和WebSocket开发网页聊天室
    Socket.IO聊天室~简单实用
    C语言基于GTK+Libvlc实现的简易视频播放器(二)
  • 原文地址:https://www.cnblogs.com/botoo/p/10237037.html
Copyright © 2011-2022 走看看