[第10章网络扫描工具.pptVIP

图10-28 查询IP地址的地理位置 Evaluation only. Created with Aspose.Slides for .NET 3.5 Client Profile . Copyright 2004-2011 Aspose Pty Ltd. Evaluation only. Created with Aspose.Slides for .NET 3.5 Client Profile . Copyright 2004-2011 Aspose Pty Ltd. 图10-29 CGI列表维护 Evaluation only. Created with Aspose.Slides for .NET 3.5 Client Profile . Copyright 2004-2011 Aspose Pty Ltd. Evaluation only. Created with Aspose.Slides for .NET 3.5 Client Profile . Copyright 2004-2011 Aspose Pty Ltd. 　　 X-Scan是完全免费的软件，运行时应注意以下几点： 　(1) 当网速较慢时，多线程检测CGI漏洞可能会导致本地网络阻塞，出现无法连接远程主机或读取数据失败等情况，此时需要减少线程数，或暂不扫描CGI漏洞。大范围扫描时，建议不对CGI漏洞进行检测，因为漏洞内容较多，需要耗费很长时间。 　 (2) 端口扫描中的SYN方式和被动主机操作系统识别功能，只在Windows 2000/2003系统中有效，且必须拥有管理员(Administrator)权限。 Evaluation only. Created with Aspose.Slides for .NET 3.5 Client Profile . Copyright 2004-2011 Aspose Pty Ltd. Evaluation only. Created with Aspose.Slides for .NET 3.5 Client Profile . Copyright 2004-2011 Aspose Pty Ltd. 　　(3) X-Scan内置的密码字典仅为简单的示范，用户可自行编辑字典文件(dat/*.dic)，使软件拥有更强大的密码猜测能力。 　 (4) X-Scan使用的地址查询数据库为“追捕”软件的数据库，需要升级时可直接将新版的数据库文件“wry.dll”复制到dat文件夹中覆盖原文件即可。 Evaluation only. Created with Aspose.Slides for .NET 3.5 Client Profile . Copyright 2004-2011 Aspose Pty Ltd. Evaluation only. Created with Aspose.Slides for .NET 3.5 Client Profile . Copyright 2004-2011 Aspose Pty Ltd. 10.3.4 在命令提示符下运行X-Scan 　 有时用户需要在命令提示符下运行X-Scan，软件中提供了这方面的支持。在提示符下键入xscan后按〈Enter〉键，屏幕上将显示如图10-30所示的提示信息。 Evaluation only. Created with Aspose.Slides for .NET 3.5 Client Profile . Copyright 2004-2011 Aspose Pty Ltd. Evaluation only. Created with Aspose.Slides for .NET 3.5 Client Profile . Copyright 2004-2011 Aspose Pty Ltd. 图10-30 提示符下运行程序 Evaluation only. Created with Aspose.Slides for .NET 3.5 Client Profile . Copyright 2004-2011 Aspose Pty Ltd. Evaluation only. Created with Aspose.Slides for .NET 3.5 Client Profile . Copyright 2004-2011 Aspose Pty Ltd. 　　3. 高级扫描工具 　　在主界面中，执行“探测”菜单下的“高级扫描工具”命令，打开“高级扫描工具”对话框，如图10-14所示。用户可以通过此对话框指定待扫描主机的地址范围、目标系统的类型及需要检测的项目，如检测开放端口(PORTS)，检测电子邮件帐