2017-01-12 1 views
0

http-form-brute 스크립트를 사용하여 시간을 벌려고하지만 경로가 잘못되었다고 말할 때마다 이미 경로를 확인 했으므로 예 구문을 확인하고 올바르게 보입니다 ... 내가 잘못 될 지점을 가리 킵니다.오류 Nmap NSE http-form-brute

Starting Nmap 7.25BETA1 (https://nmap.org) at 2017-01-12 19:48 UTC 
--------------- Timing report --------------- 
hostgroups: min 1, max 100000 
rtt-timeouts: init 1000, min 100, max 10000 
max-scan-delay: TCP 1000, UDP 1000, SCTP 1000 
parallelism: min 0, max 0 
max-retries: 10, host-timeout: 0 
min-rate: 0, max-rate: 0 
--------------------------------------------- 
NSE: Using Lua 5.2. 
NSE: Arguments from CLI: userdb=d.dic,passdb=d.dic,http-form-   
brute.uservar=usuario,http-form-brute.passvar=senha,http-form-brute.onfailure=invalido!,http-form-brute.path=/admin/validar.php 
NSE: Arguments parsed: userdb=d.dic,passdb=d.dic,http-form-brute.uservar=usuario,http-form-brute.passvar=senha,http-form-brute.onfailure=invalido!,http-form-brute.path=/admin/validar.php 
NSE: Loaded 1 scripts for scanning. 
NSE: Script Pre-scanning. 
NSE: Starting runlevel 1 (of 1) scan. 
Initiating NSE at 19:48 
Completed NSE at 19:48, 0.00s elapsed 
Initiating Ping Scan at 19:48 
Scanning www.laboratoriohacker.com.br (31.170.164.209) [4 ports] 
Packet capture filter (device wlan0): dst host 192.168.0.102 and (icmp or icmp6 or ((tcp or udp or sctp) and (src host 31.170.164.209))) 
We got a ping packet back from 31.170.164.209: id = 1632 seq = 0 checksum = 63903 
Completed Ping Scan at 19:48, 0.52s elapsed (1 total hosts) 
Overall sending rates: 7.76 packets/s, 294.96 bytes/s. 
mass_rdns: Using DNS server 192.168.0.1 
Initiating Parallel DNS resolution of 1 host. at 19:48 
mass_rdns: 0.01s 0/1 [#: 1, OK: 0, NX: 0, DR: 0, SF: 0, TR: 1] 
Completed Parallel DNS resolution of 1 host. at 19:48, 0.01s elapsed 
DNS resolution of 1 IPs took 0.01s. Mode: Async [#: 1, OK: 0, NX: 1, DR: 0, SF: 0, TR: 1, CN: 0] 
Initiating SYN Stealth Scan at 19:48 
Scanning www.laboratoriohacker.com.br (31.170.164.209) [1 port] 
Packet capture filter (device wlan0): dst host 192.168.0.102 and (icmp or icmp6 or ((tcp or udp or sctp) and (src host 31.170.164.209))) 
Discovered open port 80/tcp on 31.170.164.209 
Completed SYN Stealth Scan at 19:48, 0.31s elapsed (1 total ports) 
Overall sending rates: 3.24 packets/s, 142.60 bytes/s. 
NSE: Script scanning 31.170.164.209. 
NSE: Starting runlevel 1 (of 1) scan. 
Initiating NSE at 19:48 
NSE: Starting http-form-brute against www.laboratoriohacker.com.br (31.170.164.209:80). 
NSE: [http-form-brute 31.170.164.209:80] Form submission path: /admin/validar.php 
NSE: [http-form-brute 31.170.164.209:80] HTTP method: POST 
NSE: [http-form-brute 31.170.164.209:80] Username field: usuario 
NSE: [http-form-brute 31.170.164.209:80] Password field: senha 
NSE: [http-form-brute 31.170.164.209:80] Failed to get new session cookies:  Unable to retrieve a login form from path "/admin/validar.php" 
NSE: Finished http-form-brute against www.laboratoriohacker.com.br (31.170.164.209:80). 
Completed NSE at 19:48, 1.35s elapsed 
Nmap scan report for www.laboratoriohacker.com.br (31.170.164.209) 
Host is up, received echo-reply ttl 52 (0.46s latency). 
Scanned at 2017-01-12 19:48:02 UTC for 2s 
PORT STATE SERVICE REASON 
80/tcp open http syn-ack ttl 52 
| http-form-brute: 
|_ ERROR: Failed to submit the form to path "/admin/validar.php" 
Final times for host: srtt: 457110 rttvar: 414875 to: 2116610 

NSE: Script Post-scanning. 
NSE: Starting runlevel 1 (of 1) scan. 
Initiating NSE at 19:48 
Completed NSE at 19:48, 0.00s elapsed 
Read from /usr/bin/../share/nmap: nmap-payloads nmap-services. 
Nmap done: 1 IP address (1 host up) scanned in 3.02 seconds 
     Raw packets sent: 5 (196B) | Rcvd: 2 (72B) 
+0

Nmap의 버전은 무엇입니까? 최신 정보 (2016 년 12 월 20 일 기준, 7.40)를 사용하고 있습니까? '-d'의 결과는 무엇입니까? '--script-trace'는 어떨까요? – bonsaiviking

+0

네, nmap은 최신 버전입니다 7.40 –

답변

0

당신은 /admin/validar.php로 HTML 양식에 대한 경로를 제공하고 있지만, 스크립트는 해당 페이지에서 양식을 포함하는 응답을 GET 할 수 없습니다. 폼이 존재하는 페이지가 아니라 폼이 POST 할 경로입니다. 제공된 경로는 양식을 작성할 때 사용자가 브라우저에서 보는 URI 경로 여야합니다. 또는 양식 검색을 피하기 위해 sessioncookies을 0 (거짓)으로 설정해도되지만 양식에 각 제출마다 새로운 쿠키가 필요한 경우에는 무차별 강제 적용을 사용할 수 없습니다.

+0

대단히 감사합니다 –