对中国先锋网络科技基于SNMP的信息刺探

韩冰

作者： Net2k 来自：流星轨迹

对中国先锋网络科技基于SNMP的信息刺探

0 P2 L" y# F+ Q2 @

得到系统正在运行的程序信息： ; u! @9 X0 ^ l O------------------------------------------------------------ + Y* Z2 }! P2 ?/ V+ V- ^& S2 OVariable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.1 7 E* P8 z- L) c' w+ W6 k. D7 r( jValue = String System Idle Process

. W2 n2 F4 }5 c: h* p# h1 v/ c) X

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.8 * r2 ?1 {$ f6 i; V9 DValue = String System

* |0 u" k& ]- F4 i7 n. v3 w/ K* _

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.172 ! _ _, Z) }3 ~( Z- UValue = String smss.exe

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.196 # {2 s& [0 p2 f+ G1 SValue = String winlogon.exe

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.200 5 V; `& Y& Q; s& C6 j9 Q! [Value = String csrss.exe

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.248 0 l5 V: n; g. `1 i+ dValue = String services.exe

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.260 Value = String lsass.exe

& X y9 ~' {. Y S8 h M7 E1 I

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.296 Value = String wuauclt.exe

: Q$ X8 G; O) k" \) s( t

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.456 1 n. A7 i2 B2 v2 v+ e' T' RValue = String svchost.exe

5 z) T7 m) H6 I9 m) S% i) u6 P

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.496 3 t% H% J) e; jValue = String spoolsv.exe

- ?3 D" K6 i5 _

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.524 ( W/ U( j8 W! [7 ?; rValue = String msdtc.exe

$ m0 C; I, c0 n, V6 H+ d9 }

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.656 Value = String DefWatch.exe

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.676 8 g, K! q: E8 cValue = String tcpsvcs.exe

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.692 Value = String svchost.exe

! A% y8 s( J# p2 G

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.720 ! B- f H# S: QValue = String llssrv.exe

' p: E' L* k( F; Z8 W! M9 g U+ C

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.764 / K% M& b, s5 l6 J" i! X; {Value = String Rtvscan.exe

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.872 Value = String hlds.exe

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.924 Value = String nvsvc32.exe

9 o% K* `' E& S3 @. @6 ]- F

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.992 Value = String Explorer.EXE

0 V t: j4 V9 @# P Z) s% z

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.1000 7 q: U! P; |2 w% jValue = String regsvc.exe

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.1032 ' L7 ?7 N# z) p7 A3 zValue = String MSTask.exe

9 _0 {$ L i; t0 \8 @$ B

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.1072 / w( h/ B& z% v e; SValue = String snmp.exe

- L2 z9 {' G. i' |" z* b

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.1092 Value = String ServUDaemon.exe

. T# ^ W6 f$ J) U

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.1104 Value = String SMAgent.exe

4 ~+ ]! p, H- u: D# N1 M, g

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.1140 Value = String WinMgmt.exe

J- a. r! s* D# Q& r

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.1164 1 _4 ]8 [7 O; d2 W! Y0 y! NValue = String wins.exe

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.1176 Value = String svchost.exe

1 P9 {4 Y. w1 B9 I3 A

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.1196 Value = String xconfserver_t.e

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.1228 Value = String Dfssvc.exe

$ z. \3 X9 d j1 V# H" x

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.1248 Value = String inetinfo.exe

3 o+ Y, y' ?3 j# C; Y+ X \, i

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.1348 Value = String dns.exe

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.1568 * \- K6 D4 @4 MValue = String vptray.exe

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.1580 7 o: B9 J7 ^( G: T# y) zValue = String internat.exe

- w1 J2 G. ^1 q' R6 [7 G

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.1844 Value = String dllhost.exe

; C# }# Y! J) l2 `/ e% g8 G

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.1952 7 G, m' A4 T; D' \5 KValue = String dllhost.exe

8 C h1 o+ j! U9 I& c

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.2060 Value = String mdm.exe

; X7 _- D7 N J6 Z

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.2144 Value = String conime.exe

' f/ j# g- U9 K1 b/ H, x

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.2216 Value = String hlds.exe

o3 I w+ {# Q5 O$ I1 M6 t

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.2336 . G+ X \# C: e+ K+ E/ f; WValue = String hlds.exe

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.2348 : Y6 W8 d. q! i0 R. iValue = String svchost.exe

. b% `# X* }2 _: B

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.2424 1 P- G0 a f+ RValue = String hlds.exe

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.2460 Value = String hlds.exe

& u0 D# P; z- o

End of MIB subtree. ------------------------------------------------------------

0 f1 X: X) y3 k$ ?5 ^5 Q3 P

得到系统信息: , f6 C! z) F2 J3 w3 p------------------------------------------------------------ . k: s$ I" f/ h( pVariable = system.sysDescr.0 % T9 J% E. {7 y8 n |Value = String Hardware: x86 Family 15 Model 2 Stepping 9 AT/AT COMPATIBLE - Software: Windows 2000 Version 5.0 (Build 2195 Multiprocessor Free)

3 `3 K. D8 {0 J

Variable = system.sysObjectID.0 0 a1 ~; U" @# E% z1 JValue = ObjectID 1.3.6.1.4.1.311.1.1.3.1.2

Variable = system.sysUpTime.0 Value = TimeTicks 24725698

$ m% J P* A0 R1 c7 p/ s/ a

Variable = system.sysContact.0 9 P( g) X8 C' lValue = String

Variable = system.sysName.0 Value = String XIAOTOU

Variable = system.sysLocation.0 Value = String

Variable = system.sysServices.0 Value = Integer32 76

, E5 q4 T6 M. `" x4 B+ J& v$ n" C

End of MIB subtree. 5 F4 o& M: S! M! H p- C# N; w------------------------------------------------------------

------------------------------------------------------------ 关于snmputil的语法： ------------------------------------------------------------ get，就理解成获取一个信息。

, H* }9 d1 G: O" J/ g0 [

getnext，就理解成获取下一个信息。

walk，就理解成获取一堆信息（嗯，应该说所有数据库子树/子目录的信息）

agent，具体某台机器拉。

8 C2 }) y- E1 p: d, P) P

community，嗯就是那个“community strings”“查询密码”拉。

oid，这个要多说一下，这个呢，就是物件识别代码（Object Identifier）。 ............................................................

$ j7 U9 i. f0 n C2 j: E

例： - E# u H8 Y/ f2 ]& x5 Q, Fsnmputil.exe walk 对方IP public .1.3.6.1.2.1.25.4.2.1.2 //**进程列表 $ x% q5 Q4 Q% j5 Vsnmputil.exe walk 对方IP public .1.3.6.1.4.77.1.2.25.1.1 //**用户列表 6 d J$ |. q8 R6 e/ h( q5 h; gsnmputil.exe get 对方IP public .1.3.6.1.4.77.1.4.1.0 //**域名 snmputil.exe walk 对方IP public .1.3.6.1.2.1.25.6.3.1.2 //**安装的软件 snmputil.exe walk 对方IP public .1.3.6.1.2.1.1 //**系统信息