对中国先锋网络科技基于SNMP的信息刺探

韩冰

作者： Net2k 来自：流星轨迹

对中国先锋网络科技基于SNMP的信息刺探

/ R: R9 d( \$ ?) U$ L2 g - z9 q6 w) J8 v3 H* C1 n5 R/ }) M

得到系统正在运行的程序信息： . s: k- ^+ G0 y5 g5 x- W% J4 W, d0 p------------------------------------------------------------ Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.1 % L6 I- Q7 I& S, S3 T4 WValue = String System Idle Process

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.8 E, G6 p0 O" SValue = String System

: e; C; w% t+ I4 |1 E& k

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.172 - x0 i: S1 K- K- b8 [! |" bValue = String smss.exe

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.196 - L- t" @" q1 ]" zValue = String winlogon.exe

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.200 Value = String csrss.exe

6 ^9 |3 y7 k1 O" x& l

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.248 % G7 ~' ~ Z- G3 i4 w l+ t& y( kValue = String services.exe

6 R- G' C% t8 B, w: N% T4 [8 ^: M

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.260 Value = String lsass.exe

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.296 Value = String wuauclt.exe

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.456 Value = String svchost.exe

; K( x% `6 y" E- o$ k: @% B" b' [

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.496 Value = String spoolsv.exe

7 a* v' }; B( \% A9 C

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.524 Value = String msdtc.exe

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.656 F# O7 S0 b3 p" aValue = String DefWatch.exe

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.676 Value = String tcpsvcs.exe

% B' k9 K8 {" K+ b D4 n9 V6 h/ q8 i

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.692 : }. c( F9 F7 i" B: Z0 RValue = String svchost.exe

$ f" [4 q# K8 Q

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.720 - R* H$ Y, e% j; gValue = String llssrv.exe

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.764 x u5 A# W3 w0 V# rValue = String Rtvscan.exe

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.872 Value = String hlds.exe

( I3 @/ k1 O0 w" g& M& @) l

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.924 0 H u! }9 E( p7 n2 F" l6 A5 l% SValue = String nvsvc32.exe

+ q9 J$ @3 k6 k; ]' j% r& j# x

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.992 Value = String Explorer.EXE

9 |! y7 J4 ^9 i$ d1 p ~7 p

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.1000 Value = String regsvc.exe

" L5 y" l a6 n4 b

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.1032 ) q, I# Z6 r" _5 e1 d% SValue = String MSTask.exe

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.1072 0 Y7 ^' s5 G* x6 bValue = String snmp.exe

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.1092 Value = String ServUDaemon.exe

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.1104 Value = String SMAgent.exe

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.1140 Value = String WinMgmt.exe

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.1164 + \7 W+ f+ C7 n# t) C- KValue = String wins.exe

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.1176 Value = String svchost.exe

$ M) ~6 i8 N M* m. N9 M

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.1196 Value = String xconfserver_t.e

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.1228 Value = String Dfssvc.exe

& R& C/ W: d! r, A C0 }5 Z, t& l6 @+ ^6 W

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.1248 Value = String inetinfo.exe

2 Z$ r1 h, A6 F; F4 N: i7 E

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.1348 Value = String dns.exe

/ f2 X1 u! z5 p6 H% e' X5 R

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.1568 ( C) g }. V5 d) r" ?6 H* n% O# AValue = String vptray.exe

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.1580 Value = String internat.exe

5 f6 _7 Q1 U |1 \2 ~3 h/ m

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.1844 Value = String dllhost.exe

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.1952 $ B# ]3 T- ^/ z6 p+ C& mValue = String dllhost.exe

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.2060 4 Z1 A! z6 h8 r2 \Value = String mdm.exe

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.2144 $ ]$ L9 L4 C& qValue = String conime.exe

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.2216 Value = String hlds.exe

- g$ _/ C/ X: y, l

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.2336 " c$ ]" a% Q6 Y% xValue = String hlds.exe

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.2348 . N7 @; d9 m7 g/ r- H: VValue = String svchost.exe

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.2424 Value = String hlds.exe

* b6 B: E" P' ~ L) `$ r4 f# K

Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.2460 Value = String hlds.exe

Z* I4 {- }. p; Y" H

End of MIB subtree. ------------------------------------------------------------

得到系统信息: ------------------------------------------------------------ , V) F) u0 ?: R y/ CVariable = system.sysDescr.0 Value = String Hardware: x86 Family 15 Model 2 Stepping 9 AT/AT COMPATIBLE - Software: Windows 2000 Version 5.0 (Build 2195 Multiprocessor Free)

Variable = system.sysObjectID.0 Value = ObjectID 1.3.6.1.4.1.311.1.1.3.1.2

Variable = system.sysUpTime.0 Value = TimeTicks 24725698

Variable = system.sysContact.0 Value = String

8 j- `5 q6 w" d: a p

Variable = system.sysName.0 Value = String XIAOTOU

Variable = system.sysLocation.0 Value = String

Variable = system.sysServices.0 4 {* T1 n+ H0 k+ c$ P6 mValue = Integer32 76

End of MIB subtree. ------------------------------------------------------------

------------------------------------------------------------ 9 s( P7 ]6 K6 u7 Q. m# ]: |8 w关于snmputil的语法： ------------------------------------------------------------ 5 t" h2 ~ F' J4 C) v c$ |4 M" ^( hget，就理解成获取一个信息。

4 t& _5 u) Z& t

getnext，就理解成获取下一个信息。

/ r" B( H* e4 m' z5 j0 Z! j8 X

walk，就理解成获取一堆信息（嗯，应该说所有数据库子树/子目录的信息）

agent，具体某台机器拉。

$ ~) ]5 N. l& F) h6 U& t

community，嗯就是那个“community strings”“查询密码”拉。

; u7 H5 I( S: f1 N. R8 k: }

oid，这个要多说一下，这个呢，就是物件识别代码（Object Identifier）。 - z& c! \* [% j( X( C............................................................

例： " B4 R; ~! h* ?* E6 vsnmputil.exe walk 对方IP public .1.3.6.1.2.1.25.4.2.1.2 //**进程列表 ) B9 s8 H1 x. ]9 l: s, Isnmputil.exe walk 对方IP public .1.3.6.1.4.77.1.2.25.1.1 //**用户列表 & K+ Z3 Q* P p# Isnmputil.exe get 对方IP public .1.3.6.1.4.77.1.4.1.0 //**域名 & x. c+ p3 b8 I: Gsnmputil.exe walk 对方IP public .1.3.6.1.2.1.25.6.3.1.2 //**安装的软件 snmputil.exe walk 对方IP public .1.3.6.1.2.1.1 //**系统信息