Wiki

¡Esta es una revisión vieja del documento!

---

nmap_vuln_pcomunes_ru_rg.txt.gz

sudo nmap -Pn -p 20-23,69,139,137,445,53,443,80,8080,8443 -sV --script vuln rg.ru -oN nmap_vuln_pcomunes_ru_rg.txt

Servicios abiertos

gzip nmap_vuln_pcomunes_ru_rg.txt
gunzip -c nmap_vuln_pcomunes_ru_rg.txt.gz | grep -Ex '^[0-9]+\/.*open.*' | sed -E 's/ {2,}/ /g' | sort | uniq
137/tcp open netbios-ns?
139/tcp open netbios-ssn?
20/tcp open ftp-data?
21/tcp open ftp?
22/tcp open ssh?
23/tcp open telnet?
443/tcp open ssl/https QRATOR
445/tcp open microsoft-ds?
53/tcp open domain?
69/tcp open tftp?
8080/tcp open http-proxy?
80/tcp open http QRATOR
8443/tcp open https-alt?

Vulnerabilidades encontradas

gunzip -c nmap_vuln_pcomunes_ru_rg.txt.gz | sed -nE '/VULNERABLE:/{n;p;n;p;n;p}' | sort | uniq
|     IDs:  CVE:CVE-2007-6750
|     State: LIKELY VULNERABLE
|   Slowloris DOS attack