对中国先锋网络科技基于SNMP的信息刺探

韩冰

作者： Net2k 来自：流星轨迹

/ }2 ]' D5 W5 S! h+ s8 L3 X) R5 k

对中国先锋网络科技基于SNMP的信息刺探

/ O5 V' J Q N/ G# z

得到系统正在运行的程序信息： + P7 g/ |0 y" d) t" f% E------------------------------------------------------------ Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.1 6 F# v& z0 O* n9 ~/ n; w" M. a8 VValue = String System Idle Process

2 o$ Q Z( W% r2 I/ s

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.8 " ^. r' F1 T% ]! n- W7 zValue = String System

! f6 i7 R, k# I3 e% y9 ~

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.172 Value = String smss.exe

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.196 Value = String winlogon.exe

, \0 S/ I# p, m z+ z. U' z

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.200 3 I' F/ Z' P, D$ v9 A4 hValue = String csrss.exe

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.248 # T0 }# O$ i" f* o QValue = String services.exe

' i: j( P5 L/ K6 L9 B/ m- ]& t

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.260 4 Q3 q1 y1 c+ e1 S3 h! vValue = String lsass.exe

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.296 # r8 o# T; x2 U* ^, a1 lValue = String wuauclt.exe

5 n- U( V/ J e5 X6 ]6 W( r

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.456 Value = String svchost.exe

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.496 , X) E$ F0 u0 E3 X& ~. _- H: bValue = String spoolsv.exe

& `( x: D1 v% H" Q3 A3 I6 Y

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.524 Value = String msdtc.exe

! m, x' b) w1 b6 |$ A

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.656 Value = String DefWatch.exe

+ O7 g( [! e5 J) @5 e

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.676 Value = String tcpsvcs.exe

7 S8 l- u( Y. L% o% H8 Z

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.692 0 [# Q8 y1 x; @3 g* `/ S3 rValue = String svchost.exe

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.720 Value = String llssrv.exe

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.764 \6 k3 J( P' m% s; r$ e% r. h: qValue = String Rtvscan.exe

% B- U; }! d9 K6 M5 Q

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.872 Value = String hlds.exe

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.924 ( Y; \6 ~9 y* Y( r) G2 L* FValue = String nvsvc32.exe

: H& ?+ N* m$ U

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.992 + I# @. W3 e& \9 A4 lValue = String Explorer.EXE

. q5 n! H/ Z% ?3 X$ V

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.1000 Value = String regsvc.exe

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.1032 Value = String MSTask.exe

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.1072 * y- k, C: q, K- D- W/ \7 DValue = String snmp.exe

/ u) \1 _/ s/ i7 K

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.1092 1 z% y+ d. n2 q3 u& ?, LValue = String ServUDaemon.exe

2 }) H }9 |# G2 `# h7 F- Y# |. Y

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.1104 Value = String SMAgent.exe

q! Z! n, q7 @0 F0 Z

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.1140 Value = String WinMgmt.exe

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.1164 5 I7 s" o' n; i% ]! w; PValue = String wins.exe

$ x( w) [! \: Z5 |! O( z0 }

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.1176 1 L6 T% G. i3 s1 n' G) m% bValue = String svchost.exe

* l6 g* U% p ]$ J3 M

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.1196 8 r0 ?4 j) e1 X; F& a2 \5 R/ aValue = String xconfserver_t.e

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.1228 Value = String Dfssvc.exe

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.1248 Value = String inetinfo.exe

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.1348 Value = String dns.exe

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.1568 Value = String vptray.exe

) Z" I j) G! z/ }7 i

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.1580 Value = String internat.exe

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.1844 8 N B" |# U$ }5 ~' _5 Z( WValue = String dllhost.exe

8 B* h& |0 B E7 Y( o+ l4 {, g

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.1952 Value = String dllhost.exe

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.2060 4 I5 @. L' Z. j8 j& {+ oValue = String mdm.exe

- y( X" h$ |2 y

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.2144 2 i; I% @9 c" n. e2 b7 nValue = String conime.exe

5 n5 y1 [9 H1 ]/ D; H+ d( R

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.2216 Value = String hlds.exe

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.2336 Value = String hlds.exe

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.2348 Value = String svchost.exe

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.2424 Value = String hlds.exe

. I8 {6 E2 i- a9 w9 [7 M5 Z

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.2460 Value = String hlds.exe

End of MIB subtree. 7 h4 X# |! X1 k# e p# W------------------------------------------------------------

+ t) W4 H( O2 k$ l3 D

得到系统信息: ) f; s( {: A0 s------------------------------------------------------------ Variable = system.sysDescr.0 Value = String Hardware: x86 Family 15 Model 2 Stepping 9 AT/AT COMPATIBLE - . R, A; ?3 i9 I: ?& \5 fSoftware: Windows 2000 Version 5.0 (Build 2195 Multiprocessor Free)

Variable = system.sysObjectID.0 * E! ?7 l1 \' E) J; S. Q1 g' lValue = ObjectID 1.3.6.1.4.1.311.1.1.3.1.2

. z6 @6 \6 j0 F% D5 |2 {

Variable = system.sysUpTime.0 5 u# W" X5 C7 A# z8 }$ u# L b( {) iValue = TimeTicks 24725698

# `1 k5 I- D$ V* w" {+ h" W6 E

Variable = system.sysContact.0 1 k1 l% ]$ p6 Z* C c9 o6 c4 v& UValue = String

. o1 {: r, W0 F4 u. i- C3 K5 [1 j

Variable = system.sysName.0 * q; C6 s) f/ Q( YValue = String XIAOTOU

" C2 ~$ o$ h9 K* i( R: _+ ^

Variable = system.sysLocation.0 0 k% w' ^0 G+ Q5 P# }. EValue = String

Variable = system.sysServices.0 Value = Integer32 76

End of MIB subtree. ------------------------------------------------------------

) f$ b6 ^+ X2 L

------------------------------------------------------------ 关于snmputil的语法： ------------------------------------------------------------ " R5 n4 }3 G b- s/ u" sget，就理解成获取一个信息。

' m9 N9 I" j, Y7 I* F& v

getnext，就理解成获取下一个信息。

; G5 e% A+ Y; p

walk，就理解成获取一堆信息（嗯，应该说所有数据库子树/子目录的信息）

agent，具体某台机器拉。

1 d+ K, v6 S5 ?# A4 n" \* t

community，嗯就是那个“community strings”“查询密码”拉。

oid，这个要多说一下，这个呢，就是物件识别代码（Object Identifier）。 9 j+ F: t& t4 w) d( H............................................................

U" D; w+ r. Q6 F4 W- t

例： ' n: { Z' O5 a0 N& W0 Osnmputil.exe walk 对方IP public .1.3.6.1.2.1.25.4.2.1.2 //**进程列表 snmputil.exe walk 对方IP public .1.3.6.1.4.77.1.2.25.1.1 //**用户列表 9 y' S* T* s( k, d% C" q tsnmputil.exe get 对方IP public .1.3.6.1.4.77.1.4.1.0 //**域名 / `# x% L! r$ {snmputil.exe walk 对方IP public .1.3.6.1.2.1.25.6.3.1.2 //**安装的软件 9 |8 E$ M( F% Y3 E4 Bsnmputil.exe walk 对方IP public .1.3.6.1.2.1.1 //**系统信息