第5章 批量主機掃描

批量主機服務掃描目的：1、批量主機存活掃描。2、針對主機服務掃描作用：1、能更方便快捷獲取網絡中主機的存活狀態。2、更加細致、智能獲取主機服務偵査情況。典型命令：nmap、ncat

nmap命令的使用介紹

掃描類型?	描述	特點
ICMP協議類型(-P)	ping掃描	簡單、快速、有效
TCP SYN 掃描(-sS)	TCP半開放掃描	1、高效 2、不易被檢測 3、通用
TCP connect(掃描(-sT)	TCP全開放掃描	1、真實 2、結果可靠
UDP掃描(-sU)	UDP協議掃描	有效透過防火墻策略

icmp 不是tcp 協議[root@centos-6 ~]# nmap -sP 10.0.1.10Starting Nmap 5.51 ( http://nmap.org ) at 2019-10-14 07:27 UTCNmap scan report for 10.0.1.10Host is up (0.00034s latency).MAC Address: 08:00:27:66:D2:2F (Cadmus Computer Systems)Nmap done: 1 IP address (1 host up) scanned in 0.12 seconds[root@centos-6 ~]# nmap -sP 10.0.1.0/24Starting Nmap 5.51 ( http://nmap.org ) at 2019-10-14 07:27 UTCNmap scan report for 10.0.1.1Host is up (0.00021s latency).MAC Address: 0A:00:27:00:00:1A (Unknown)Nmap scan report for 10.0.1.10Host is up (0.00024s latency).MAC Address: 08:00:27:66:D2:2F (Cadmus Computer Systems)Nmap scan report for 10.0.1.60Host is up.Nmap done: 256 IP addresses (3 hosts up) scanned in 9.26 seconds[root@centos-6 ~]# nmap -sS 10.0.1.10Starting Nmap 5.51 ( http://nmap.org ) at 2019-10-14 07:32 UTCNmap scan report for 10.0.1.10Host is up (0.000074s latency).Not shown: 997 closed portsPORT STATE SERVICE22/tcp open ssh111/tcp open rpcbind3306/tcp open mysqlMAC Address: 08:00:27:66:D2:2F (Cadmus Computer Systems)Nmap done: 1 IP address (1 host up) scanned in 0.09 seconds0-1024 ? ?默認掃描[root@centos-6 ~]# nmap -sS -p 0-30000 10.0.1.10Starting Nmap 5.51 ( http://nmap.org ) at 2019-10-14 07:42 UTCNmap scan report for 10.0.1.10Host is up (0.000070s latency).Not shown: 29998 closed portsPORT STATE SERVICE22/tcp open ssh111/tcp open rpcbind3306/tcp open mysqlMAC Address: 08:00:27:66:D2:2F (Cadmus Computer Systems)Nmap done: 1 IP address (1 host up) scanned in 1.38 seconds[root@centos-6 ~]# nmap -sT -p 0-30000 10.0.1.10?Starting Nmap 5.51 ( http://nmap.org ) at 2019-10-14 07:43 UTCNmap scan report for 10.0.1.10Host is up (0.0016s latency).Not shown: 29998 closed portsPORT STATE SERVICE22/tcp open ssh111/tcp open rpcbind3306/tcp open mysqlMAC Address: 08:00:27:66:D2:2F (Cadmus Computer Systems)Nmap done: 1 IP address (1 host up) scanned in 2.10 seconds掃描用udp會慢，一直處于等待的狀態

ncat工具使用

組合參數-W 設置的超時時間-z —個輸入輸出模式-ν 顯示命令執行過程方式一、基于tcp協議(默認)nc -v -z -w2 10.10.250.254 1-50方式二、基于udp協議-unc -v -u -z -w2 10.10.250.254 1-50[root@centos-6 ~]# nc -v -z -w2 10.0.1.10 1-100nc: connect to 10.0.1.10 port 1 (tcp) failed: Connection refusednc: connect to 10.0.1.10 port 2 (tcp) failed: Connection refusednc: connect to 10.0.1.10 port 3 (tcp) failed: Connection refusednc: connect to 10.0.1.10 port 4 (tcp) failed: Connection refusednc: connect to 10.0.1.10 port 5 (tcp) failed: Connection refusednc: connect to 10.0.1.10 port 6 (tcp) failed: Connection refusednc: connect to 10.0.1.10 port 7 (tcp) failed: Connection refusednc: connect to 10.0.1.10 port 8 (tcp) failed: Connection refusednc: connect to 10.0.1.10 port 9 (tcp) failed: Connection refusednc: connect to 10.0.1.10 port 10 (tcp) failed: Connection refusednc: connect to 10.0.1.10 port 11 (tcp) failed: Connection refusednc: connect to 10.0.1.10 port 12 (tcp) failed: Connection refusednc: connect to 10.0.1.10 port 13 (tcp) failed: Connection refusednc: connect to 10.0.1.10 port 14 (tcp) failed: Connection refusednc: connect to 10.0.1.10 port 15 (tcp) failed: Connection refusednc: connect to 10.0.1.10 port 16 (tcp) failed: Connection refusednc: connect to 10.0.1.10 port 17 (tcp) failed: Connection refusednc: connect to 10.0.1.10 port 18 (tcp) failed: Connection refusednc: connect to 10.0.1.10 port 19 (tcp) failed: Connection refusednc: connect to 10.0.1.10 port 20 (tcp) failed: Connection refusednc: connect to 10.0.1.10 port 21 (tcp) failed: Connection refusedConnection to 10.0.1.10 22 port [tcp/ssh] succeeded!nc: connect to 10.0.1.10 port 23 (tcp) failed: Connection refusednc: connect to 10.0.1.10 port 24 (tcp) failed: Connection refused[root@centos-6 ~]# nc -u -v -z -w2 10.0.1.10 1-100內核限制，單位時間不可達的數量

總結

以上是生活随笔為你收集整理的第5章 批量主机扫描 nmap、ncat的全部內容，希望文章能夠幫你解決所遇到的問題。

如果覺得生活随笔網站內容還不錯，歡迎將生活随笔推薦給好友。