对中国先锋网络科技基于SNMP的信息刺探

韩冰

作者： Net2k 来自：流星轨迹

1 @0 S! m2 B, ?* s

对中国先锋网络科技基于SNMP的信息刺探

得到系统正在运行的程序信息： ------------------------------------------------------------ 2 |9 n1 b" j: v- h4 t- F$ @7 v7 QVariable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.1 2 ]6 m6 T; w) X5 n* zValue = String System Idle Process

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.8 Value = String System

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.172 Value = String smss.exe

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.196 Value = String winlogon.exe

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.200 Value = String csrss.exe

7 R# X& b, U' h' f* Y, t6 P

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.248 Value = String services.exe

7 i# i; j* g* o9 V' C1 g6 V

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.260 Value = String lsass.exe

: G$ s: c6 I+ H" O3 W' E! n5 b3 _; p

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.296 8 l' m$ W( t: |" k( ?- `Value = String wuauclt.exe

8 a" s. a+ a6 A8 C

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.456 , L7 e( _. x6 a+ R* @" SValue = String svchost.exe

) }/ z! Y/ N$ ]9 b* Z R4 q! q

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.496 $ B9 A. K5 }& n. [' uValue = String spoolsv.exe

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.524 " r, e& c n# ] l& B) s: F! o+ jValue = String msdtc.exe

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.656 Value = String DefWatch.exe

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.676 7 j* d9 k3 g9 D$ F( Q0 BValue = String tcpsvcs.exe

# ^; Z3 ~# l/ m$ I) E! W# M3 J

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.692 Value = String svchost.exe

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.720 8 z- x& s: _8 U& ~# x# IValue = String llssrv.exe

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.764 / d" a2 W1 M( o8 ~1 n! q; o, y' n, a. xValue = String Rtvscan.exe

' ? W- ~! J* x& |8 H; p4 l

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.872 % V/ [+ @" I; \' s- [Value = String hlds.exe

. w) n, w3 z* S* }

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.924 Value = String nvsvc32.exe

, ^# G* \( C/ P5 k

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.992 % u: W0 h( c+ y$ l$ c7 R3 lValue = String Explorer.EXE

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.1000 % H U9 o) c1 I' g2 x6 {; ~Value = String regsvc.exe

7 ` U' v; _' ?4 k% P1 V1 t

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.1032 u0 ], k( F/ d2 o9 E+ x% QValue = String MSTask.exe

r) w4 {$ Z( M

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.1072 ) _' U7 W8 V" U; e9 tValue = String snmp.exe

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.1092 Value = String ServUDaemon.exe

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.1104 Value = String SMAgent.exe

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.1140 Value = String WinMgmt.exe

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.1164 + p4 U- N' V+ WValue = String wins.exe

' E1 ~+ \. ]% V8 ^% o

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.1176 " J3 l" R8 f3 G5 S0 S l: Z# ^Value = String svchost.exe

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.1196 Value = String xconfserver_t.e

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.1228 Value = String Dfssvc.exe

% j4 V7 |9 v/ a7 G4 Y- h P+ [0 L

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.1248 3 ]( i& ]4 R7 T- P" nValue = String inetinfo.exe

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.1348 Value = String dns.exe

$ d6 y2 h: I4 d1 i; g

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.1568 Value = String vptray.exe

7 `, h# B5 \) }1 ^: f! Z* j

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.1580 % d. y* h8 k4 c* q2 p6 pValue = String internat.exe

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.1844 Value = String dllhost.exe

' G ?% j/ V( \1 P4 W

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.1952 ! @; ?, V4 G' m; vValue = String dllhost.exe

( t. T2 x. ^* p" k, k# E

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.2060 Value = String mdm.exe

9 U5 G# J" I2 ^# d+ z

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.2144 " {4 W9 j0 a5 c4 S2 J W7 g* @/ iValue = String conime.exe

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.2216 Value = String hlds.exe

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.2336 ' \) q/ J5 n1 u/ VValue = String hlds.exe

9 m0 f7 Q0 H: Q9 B

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.2348 0 I b0 H: _* c! B& CValue = String svchost.exe

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.2424 Value = String hlds.exe

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.2460 Value = String hlds.exe

End of MIB subtree. ------------------------------------------------------------

得到系统信息: 3 O; k5 m! T! P# i4 G$ P------------------------------------------------------------ ; g6 v9 ~9 l& b6 L% \9 @) b* YVariable = system.sysDescr.0 Value = String Hardware: x86 Family 15 Model 2 Stepping 9 AT/AT COMPATIBLE - ) k: Q7 \4 S: p. f( H: |' Q# ASoftware: Windows 2000 Version 5.0 (Build 2195 Multiprocessor Free)

Variable = system.sysObjectID.0 # W5 U: r9 G, G( B# VValue = ObjectID 1.3.6.1.4.1.311.1.1.3.1.2

Variable = system.sysUpTime.0 , u8 N: _% C3 \- |+ KValue = TimeTicks 24725698

) h4 O K% a( c2 u* n

Variable = system.sysContact.0 Value = String

Variable = system.sysName.0 Value = String XIAOTOU

Variable = system.sysLocation.0 : r( T+ X1 S& {; o0 M2 y( YValue = String

Variable = system.sysServices.0 Value = Integer32 76

End of MIB subtree. ------------------------------------------------------------

------------------------------------------------------------ K$ q' l$ W+ n2 V2 y关于snmputil的语法： 2 Z5 U# M5 U" x0 _: M+ t4 H------------------------------------------------------------ ' ~* s5 Z3 Q, v+ V4 [get，就理解成获取一个信息。

getnext，就理解成获取下一个信息。

walk，就理解成获取一堆信息（嗯，应该说所有数据库子树/子目录的信息）

agent，具体某台机器拉。

1 K; n4 A$ d9 {9 K+ X4 [

community，嗯就是那个“community strings”“查询密码”拉。

oid，这个要多说一下，这个呢，就是物件识别代码（Object Identifier）。 ............................................................

; K$ [! W! t3 ~

例： snmputil.exe walk 对方IP public .1.3.6.1.2.1.25.4.2.1.2 //**进程列表 snmputil.exe walk 对方IP public .1.3.6.1.4.77.1.2.25.1.1 //**用户列表 snmputil.exe get 对方IP public .1.3.6.1.4.77.1.4.1.0 //**域名 snmputil.exe walk 对方IP public .1.3.6.1.2.1.25.6.3.1.2 //**安装的软件 snmputil.exe walk 对方IP public .1.3.6.1.2.1.1 //**系统信息