Back Track 5 network stepping points (2)

Operating system detection

• Xprobe2

Format:

./Xprobe2 Domain Name

 

./xprobe2 –v –r IP

 

Port service software testing

• Amap

Application Mapping mode:

Amap-A domain name port

 

Banner mode:

Amap-B domain name port

 

• Dmirty

Format:

Dmitry [-winsepfb] [-t -] [-o %host.txt] host

 

Query whois

Dmitry-w Domain Name

Query IP Address Registration Information:

Query port opening status:

• Httprint

Format:

./httprint {-h 
 
Check IP Address

Scan web Server Information


 

 
  
Httsquash

 

Format:
./Httsquash-r range [parameter]
 


 

 
  
Sslscan

 

Format:
Sslscan [parameter] [host: port | host]
 

Email Detection

 

 
  
Smtpscan

 

Format:
Smtpscan [parameter] hostname (s)
 
Smtpscan [parameter]-D DOMAIN
 
Vera mode test:
Smtpscan-v www.cdut.edu.cn

Debug mode test:
Smtpscan-d www.cdut.edu.cn



 

 
  
Smtp-user-enum

 

Format:
./Smtp-user-. pl [parameter] (-u username |-U file-of-usernames) (-t host |-T file-of-targets)
 




 

 
  
Swaks

 

Format:
./Swaks-to email account-email account
 


 

 

 
  
Knowledge obtained

 
Thanks again for the book back track 5, from entry to mastery-penetration.
In the previous tests, some of them failed to be tested. The main reason is that the server of the school prohibits access from some ports. This is a sad story.
These things seem really boring, but when you do it, you will find it interesting and interesting. I will share web tracking later.
 
 
 
Reprinted please indicate the source: http://www.cnblogs.com/yydcdut/p/3488228.html