数学建模社区-数学中国

标题: 对中国先锋网络科技基于SNMP的信息刺探 [打印本页]
作者: 韩冰    时间: 2004-10-5 08:56
标题: 对中国先锋网络科技基于SNMP的信息刺探

作者： Net2k 来自：流星轨迹

$ @- Y. Q) ?; _! R

对中国先锋网络科技基于SNMP的信息刺探

2 V9 m3 U1 A- c4 \( Y7 b8 q % @ i A+ j! W( a/ ~" ] 4 P/ k+ n! \4 V, m: J. ]

得到系统正在运行的程序信息：: `: n+ k. Q5 Q7 q ------------------------------------------------------------ + u* ~ s1 h) T9 B, P& ?Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.1$ W4 [/ U3 L% I. _; q- i Value = String System Idle Process

) X! b) K: ~# C: r

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.8+ l7 o. J$ b; s: ^ Value = String System

, ]7 f! C% E Q4 ?9 k# ^

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.172 ; k4 q4 n% R/ C9 ~. rValue = String smss.exe

% o) j, H4 Q6 d3 T- E" f' Y Y

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.196 ! w, Y3 b9 J2 ~" y9 G! z9 GValue = String winlogon.exe

' D' D8 H1 _- x) L1 D% P8 s; C

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.200 g0 ~7 C& }8 t, y Value = String csrss.exe

3 n2 M7 z$ D1 w; ?7 y4 o8 k; `

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.248( Q' Y7 Y! R7 ]5 J. E$ z Value = String services.exe

8 b% J* z' v9 ?7 |

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.2602 c5 a, j4 M4 a6 `4 a0 _4 p4 o Value = String lsass.exe

5 S2 }+ f2 H1 _ o' K

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.296; f+ u1 \7 { ^; z4 ] Value = String wuauclt.exe

8 c9 b- N, \) @! |5 D! @

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.456& r2 Z6 {' |! R. K9 Z) W+ o! D Value = String svchost.exe

0 g8 K6 g2 ?7 _0 b3 }3 I) l. V

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.496 " d" B0 k0 }6 h- w! o CValue = String spoolsv.exe

" W( r7 d6 U! n6 U* L4 S, Y

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.5243 g$ [. a2 t; s Value = String msdtc.exe

! H$ s2 _! W; t) C$ b6 ?- l1 f

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.656& m; U* Q2 E- c0 N" @ T4 ~4 d Value = String DefWatch.exe

% c2 d+ C, @2 Q+ O) B# ^% i

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.676 & J$ X* A3 q! V% Y/ ~2 p% @# _4 C4 tValue = String tcpsvcs.exe

2 ?' |, o+ r8 f4 M, O- X5 M) b- k

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.692# A K4 S* j: i+ g3 R1 r$ M Value = String svchost.exe

" R$ ^# u1 E6 e

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.720 8 f R8 }9 [ OValue = String llssrv.exe

$ c' F8 I6 h" f, Y; b* q/ |& e7 D

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.764 - F2 z! `/ x$ S0 {! Z. ~) ^Value = String Rtvscan.exe

5 t/ X7 n1 V" h- Z

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.872 , Q. p" {6 N, D8 E6 LValue = String hlds.exe

/ d& H9 q6 c/ J9 M: Y

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.9248 ]9 k0 D+ J6 |1 r# b1 H, J0 e/ T Value = String nvsvc32.exe

, f% M+ X" d4 |* x

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.992: I$ w! x& o5 E$ e9 L; ~1 n Value = String Explorer.EXE

% P6 @6 V: R4 @! f' C: B2 ~

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.1000# Q( A9 e" M3 o& v- u! X Value = String regsvc.exe

/ C3 o+ U }+ ?7 o8 T9 g. `

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.1032- U ^" Y/ W' N8 ^ Value = String MSTask.exe

6 Z/ R' a1 p3 V2 t; y

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.1072+ `* w* L! |. a Value = String snmp.exe

! ~ [' o8 b/ Z$ k& c: J

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.1092 + O2 Y, I, Y$ lValue = String ServUDaemon.exe

) v' p9 H0 M% O0 U! v8 Y

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.1104 ! b- U3 H A4 d5 R! d" tValue = String SMAgent.exe

8 V* q& q0 q/ ]/ Q+ O( w- g

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.1140* o; z$ j3 e% m2 ~ Value = String WinMgmt.exe

( {3 |( M% v4 `$ E9 D9 C; \( g4 k

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.1164 ; d+ j+ d# A& Y0 D. J5 E jValue = String wins.exe

\1 {# d& S% X

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.11766 I& _; O7 v6 S1 W( ?+ P/ M( _) Q Value = String svchost.exe

: m; x- |' n8 l5 z

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.1196 ( I+ ?- I! {6 w7 f+ c/ gValue = String xconfserver_t.e

; Y+ w6 Y; z& ]/ u( Y4 r

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.1228 + e+ c2 S9 C; R r: ^Value = String Dfssvc.exe

8 j' `0 D& x7 m' ~+ Z0 n- j1 g

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.12488 j3 U3 R* n5 ?" K- i+ |8 ]) {& W Value = String inetinfo.exe

0 [- D, C6 w1 O) C7 Q2 U! b8 n! o/ \

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.1348# u5 t0 I1 Z. U$ u7 s' \ Value = String dns.exe

% D+ s( Y* _! t% l) E8 C3 s

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.1568. M& Z0 v; W; x& d1 A# l% | Value = String vptray.exe

8 h) z$ t' O: z

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.1580, G4 ~- d k5 A/ x, z9 [0 b Value = String internat.exe

4 b6 T. X/ [9 h/ z) a8 o

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.1844 7 o, }: {) }: h4 @6 lValue = String dllhost.exe

" G# K+ H, |' ]. G- L# ~

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.1952( M# ^5 n2 S: B" ]- D6 z Value = String dllhost.exe

' z) u3 c9 [0 P

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.2060 0 \8 ~7 C3 I3 `6 P! z4 K5 S+ q( w, nValue = String mdm.exe

; _1 B% K' z# E$ I

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.2144 8 f: H5 }0 D# |' v" Y# {/ bValue = String conime.exe

3 b# ]3 D: U1 X# k$ W8 P! w

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.2216% G0 @6 s2 }; u Value = String hlds.exe

9 J6 D9 t, b. ~3 c+ Q

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.2336 / X4 Y8 I/ U) e D; jValue = String hlds.exe

; F4 N6 X5 G4 F

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.2348 % |& C* A, L0 Q2 v0 _; C# u I4 qValue = String svchost.exe

; n, v7 K# {: {6 O' v5 d! m: b* b( Y7 v

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.2424. J {- ^" B; V ]( j Value = String hlds.exe

) x: E/ o- ~1 u1 [

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.24608 v: v: @- `5 f& Q7 H4 y9 K5 n# n Value = String hlds.exe

( z, u4 F! \, t

End of MIB subtree.8 w! F/ m- H5 @0 r3 a4 R4 M ------------------------------------------------------------

0 ^7 Z& A2 F9 E# U! J

得到系统信息: " o& W$ d8 i( y------------------------------------------------------------( F" N, O% M3 ]" k3 C9 f Variable = system.sysDescr.07 I6 J7 R2 v3 V- w+ v4 F Value = String Hardware: x86 Family 15 Model 2 Stepping 9 AT/AT COMPATIBLE -# p/ h$ u- j4 n7 P: S Software: Windows 2000 Version 5.0 (Build 2195 Multiprocessor Free)

; t3 \* q2 j, U' R& H

Variable = system.sysObjectID.0! u& F0 w; o( B5 f" s Value = ObjectID 1.3.6.1.4.1.311.1.1.3.1.2

* m9 {: V6 I. L: B* C, o7 p

Variable = system.sysUpTime.0- \9 ~0 ]- Y7 K% B- y. u2 ` Value = TimeTicks 24725698

! W. y0 ~& @- E( T- W

Variable = system.sysContact.03 r2 Y' K: k* ~! o4 `! D Value = String

; j" Y4 I' y# l7 X( p+ R+ R

Variable = system.sysName.0 , }0 t$ a& y* s+ s# `2 bValue = String XIAOTOU

" `) @% J1 M" k( c5 y/ C

Variable = system.sysLocation.0$ v: b) |8 y/ L* G% H Value = String

% D9 W' O, h0 |) A

Variable = system.sysServices.0$ O! b7 c: Z$ \5 b. h9 `" N9 ? Value = Integer32 76

, T2 ?5 Z3 X N" t# l

End of MIB subtree. 9 v6 V( z3 e4 U! a5 n: O4 v/ r* ^2 d------------------------------------------------------------

' R' `9 o2 R$ }; b8 L

------------------------------------------------------------ ( q; R5 \; H: Z: d' l关于snmputil的语法：' [) w" ^% e, Z ------------------------------------------------------------ 1 I( o* W( y- qget，就理解成获取一个信息。

7 q5 P' s3 M+ k! Q( J& x

getnext，就理解成获取下一个信息。

5 I5 k+ N" b/ h( [9 S( o) T: |

walk，就理解成获取一堆信息（嗯，应该说所有数据库子树/子目录的信息）

) O6 C( [2 B5 ^$ Y- z1 h* r* L5 U

agent，具体某台机器拉。

3 a0 A1 V0 s8 O6 c, F1 Q$ d* X

community，嗯就是那个“community strings”“查询密码”拉。

. H4 e, @% f& v& c

oid，这个要多说一下，这个呢，就是物件识别代码（Object Identifier）。 Y E3 h" e! h$ w. U" F. U............................................................

, y1 u2 q1 w+ y

例：8 O8 Y! }9 J. H& ? snmputil.exe walk 对方IP public .1.3.6.1.2.1.25.4.2.1.2 //**进程列表 2 f2 P% ^$ E( T6 u* `snmputil.exe walk 对方IP public .1.3.6.1.4.77.1.2.25.1.1 //**用户列表 / C; |$ Q8 `0 i3 b) k1 z# {9 nsnmputil.exe get 对方IP public .1.3.6.1.4.77.1.4.1.0 //**域名 ' J9 l! M' ?! n7 ]2 qsnmputil.exe walk 对方IP public .1.3.6.1.2.1.25.6.3.1.2 //**安装的软件: O9 C$ T' N* ]$ ~ snmputil.exe walk 对方IP public .1.3.6.1.2.1.1 //**系统信息





欢迎光临 数学建模社区-数学中国 (http://www.madio.net/) Powered by Discuz! X2.5