对中国先锋网络科技基于SNMP的信息刺探

韩冰

作者： Net2k 来自：流星轨迹

4 h0 o4 ^" P0 Z

对中国先锋网络科技基于SNMP的信息刺探

+ ]7 C# K+ `0 x0 l- F/ m $ q( P& H9 C+ z' ?. f& q

得到系统正在运行的程序信息： ! C$ n* ?1 _7 b. N! c. b------------------------------------------------------------ " s+ ~1 c& G+ j! S( l4 ~Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.1 Value = String System Idle Process

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.8 Value = String System

, ?# K0 }* i! f! _! S# U. `

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.172 Value = String smss.exe

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.196 . S, j2 j. V; Q6 l0 @3 R) MValue = String winlogon.exe

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.200 Value = String csrss.exe

: p ~' P$ e/ C. _; w

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.248 2 K1 ^6 z5 E, }) e: i J6 | o3 b( {Value = String services.exe

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.260 % w, d" V$ u+ y7 r) d( wValue = String lsass.exe

, c) r9 d u+ |5 \2 \3 B4 J

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.296 Value = String wuauclt.exe

3 q5 l8 V' I I, y% s

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.456 Value = String svchost.exe

# \1 T! {3 f @' s+ m& h) H0 K

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.496 8 t }( y/ {/ _! f/ r' YValue = String spoolsv.exe

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.524 Value = String msdtc.exe

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.656 $ M' x9 E0 l3 o8 [$ D: KValue = String DefWatch.exe

4 j/ e7 L; o: R0 z4 A

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.676 Value = String tcpsvcs.exe

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.692 # D/ x* l/ i3 P& h/ L& [3 }8 pValue = String svchost.exe

6 `( V& ~; J: G( c: _& k

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.720 $ i& G! A* P- R& b* C4 J3 q9 u: o! {Value = String llssrv.exe

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.764 ; x% I$ [: t4 U" @Value = String Rtvscan.exe

& P8 v# A( k! D+ a9 l8 l

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.872 Value = String hlds.exe

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.924 Value = String nvsvc32.exe

2 Z& \2 \- [$ G7 ]( E# n+ U

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.992 Value = String Explorer.EXE

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.1000 2 f, n! r" `4 o1 _% e }4 LValue = String regsvc.exe

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.1032 Value = String MSTask.exe

4 L S( T9 r2 Z( ^

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.1072 Value = String snmp.exe

7 k1 V! w5 ^( A( }) B% y, u

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.1092 6 S2 C$ q( G8 q, ~Value = String ServUDaemon.exe

7 M) h4 V4 V1 Q+ V7 H# i+ e1 s

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.1104 Value = String SMAgent.exe

& {4 i9 \# U( f; ^) n

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.1140 ! `" W3 s) j/ v CValue = String WinMgmt.exe

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.1164 0 d o. T& X0 C% S, Q, }Value = String wins.exe

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.1176 . e- S. O9 P v. X0 P, G+ `4 I/ QValue = String svchost.exe

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.1196 Value = String xconfserver_t.e

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.1228 Value = String Dfssvc.exe

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.1248 6 C7 H2 a$ T9 R$ U' F% b1 uValue = String inetinfo.exe

. D0 K( ?; z$ P2 c6 b! i) g( e- G

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.1348 Value = String dns.exe

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.1568 $ p! J" _% h- I/ p4 X- d& G, sValue = String vptray.exe

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.1580 Value = String internat.exe

+ m/ ^ O: @5 |) W5 N) |

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.1844 4 \+ Y, C( @7 e; B! q5 A- N5 mValue = String dllhost.exe

0 a9 q) e% W2 t! h q

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.1952 Value = String dllhost.exe

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.2060 # k, @4 r& i4 a/ ^* h8 WValue = String mdm.exe

- w" J) Z i! j$ _" k

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.2144 Value = String conime.exe

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.2216 3 m7 |8 o" ~, n$ G# `9 O7 OValue = String hlds.exe

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.2336 6 C ?/ P; R" n, g' w mValue = String hlds.exe

8 o$ j3 w: o4 f3 e* ^: h" a" ~

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.2348 Value = String svchost.exe

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.2424 ) G8 A8 K! o# y/ UValue = String hlds.exe

/ Z% W. g- c- b, w$ F9 M' R8 [5 x

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.2460 0 a5 n2 x. B2 GValue = String hlds.exe

End of MIB subtree. ------------------------------------------------------------

; r& N( ?! j( I

得到系统信息: : O) l. g( d7 x% X* i------------------------------------------------------------ Variable = system.sysDescr.0 1 g, G5 Y# @7 E% T6 W% Z/ g0 J# eValue = String Hardware: x86 Family 15 Model 2 Stepping 9 AT/AT COMPATIBLE - Software: Windows 2000 Version 5.0 (Build 2195 Multiprocessor Free)

, S" @5 H$ k: x4 M

Variable = system.sysObjectID.0 Value = ObjectID 1.3.6.1.4.1.311.1.1.3.1.2

1 N) q! a, `* B

Variable = system.sysUpTime.0 Value = TimeTicks 24725698

, }7 r% Z8 r/ X7 S+ ?1 p% w) v

Variable = system.sysContact.0 : t G- x# D" v9 PValue = String

Variable = system.sysName.0 Value = String XIAOTOU

Variable = system.sysLocation.0 3 {4 z. F5 M5 z$ w( YValue = String

Variable = system.sysServices.0 + Z+ s( h g& _Value = Integer32 76

End of MIB subtree. ------------------------------------------------------------

------------------------------------------------------------ 5 E6 x5 N+ ~; a( c关于snmputil的语法： , |/ C/ h) N8 k& Y+ C------------------------------------------------------------ ; k5 g* ^( }. c) Kget，就理解成获取一个信息。

1 ^, _- R% t/ ]& G2 T

getnext，就理解成获取下一个信息。

$ }3 y2 t1 t0 r

walk，就理解成获取一堆信息（嗯，应该说所有数据库子树/子目录的信息）

# k$ f0 H$ x2 e h" G0 p4 N3 t

agent，具体某台机器拉。

community，嗯就是那个“community strings”“查询密码”拉。

oid，这个要多说一下，这个呢，就是物件识别代码（Object Identifier）。 ............................................................

J2 I3 ?0 W7 i3 M% y+ P

例： snmputil.exe walk 对方IP public .1.3.6.1.2.1.25.4.2.1.2 //**进程列表 : K: b$ x& b( X# t0 T7 `snmputil.exe walk 对方IP public .1.3.6.1.4.77.1.2.25.1.1 //**用户列表 snmputil.exe get 对方IP public .1.3.6.1.4.77.1.4.1.0 //**域名 snmputil.exe walk 对方IP public .1.3.6.1.2.1.25.6.3.1.2 //**安装的软件 snmputil.exe walk 对方IP public .1.3.6.1.2.1.1 //**系统信息