Nmap http-joomla-brute脚本示例？ [英] Nmap http-joomla-brute script example?

问题描述

这是一个相对模糊的主题，但仍然感谢任何帮助。

This is a relatively obscure topic, but any help is nevertheless appreciated.

我正在尝试在我的网站的Joomla登录上进行暴力测试。我试图使用nmap的http-joomla-brute，但由于某种原因它既没有输出进程也没有实际用我给它的密码列表做暴力。这是我的脚本：

I am trying to run a brute force test on my website's Joomla login. I was trying to use nmap's http-joomla-brute, but for some reason it does not output neither the process nor does it actually do the brute force with the password list I gave it. Here is my script:

nmap -sV --script http-joomla-brute --script-args 'passdb=/Users/abc/Documents/passwords.txt,http-joomla-brute.threads=5,brute.firstonly=true' my.website.here.

我认为它只运行初始测试（这真的很烦人BTW，有没有人有办法避免/跳过它？）和默认密码列表，因为它显示类似1495密码测试，我的密码列表是496 MB，绝对超过1495密码。我究竟做错了什么？

I think it only runs the initial testing(which is really annoying BTW, does anyone have a way to avoid/skip it?) and the default password list, because it shows something like "1495 passwords tested" and my password list is 496 MB and definitely more than 1495 passwords. What am I doing wrong?

提前谢谢。

编辑：修正了部分运行的脚本，但现在它执行此操作：

Fixed the script partially running, but now it does this:

Starting Nmap 6.40-2 ( http://nmap.org ) at 2014-04-02 19:39 EDT
Stats: 0:02:21 elapsed; 0 hosts completed (1 up), 1 undergoing Script Scan
NSE Timing: About 0.00% done
Stats: 0:03:41 elapsed; 0 hosts completed (1 up), 1 undergoing Script Scan
NSE Timing: About 0.00% done
Stats: 0:05:46 elapsed; 0 hosts completed (1 up), 1 undergoing Script Scan
NSE Timing: About 0.00% done
Stats: 0:05:50 elapsed; 0 hosts completed (1 up), 1 undergoing Script Scan
NSE Timing: About 0.00% done
Stats: 0:05:51 elapsed; 0 hosts completed (1 up), 1 undergoing Script Scan
NSE Timing: About 0.00% done
Stats: 0:05:51 elapsed; 0 hosts completed (1 up), 1 undergoing Script Scan
NSE Timing: About 0.00% done
Stats: 0:05:52 elapsed; 0 hosts completed (1 up), 1 undergoing Script Scan
NSE Timing: About 0.00% done
Stats: 0:05:52 elapsed; 0 hosts completed (1 up), 1 undergoing Script Scan
NSE Timing: About 0.00% done
Stats: 0:05:52 elapsed; 0 hosts completed (1 up), 1 undergoing Script Scan
NSE Timing: About 0.00% done
Stats: 0:07:18 elapsed; 0 hosts completed (1 up), 1 undergoing Script Scan
NSE Timing: About 0.00% done
Stats: 0:15:55 elapsed; 0 hosts completed (1 up), 1 undergoing Script Scan
NSE Timing: About 0.00% done
Stats: 0:16:03 elapsed; 0 hosts completed (1 up), 1 undergoing Script Scan
NSE Timing: About 0.00% done
Stats: 0:17:50 elapsed; 0 hosts completed (1 up), 1 undergoing Script Scan
NSE Timing: About 0.00% done
Stats: 0:22:06 elapsed; 0 hosts completed (1 up), 1 undergoing Script Scan
NSE Timing: About 0.00% done
Stats: 0:22:22 elapsed; 0 hosts completed (1 up), 1 undergoing Script Scan
NSE Timing: About 0.00% done

<我不认为这是正常的。有没有办法解决这个问题？

I don't think this is normal. Is there a way to fix this?

推荐答案

请参阅 unpwdb NSE库，其中 http-joomla-brute 用于管理用户名和密码。它默认为10分钟的时间限制，之后它将停止返回凭据。如果你真的想在它完成之前运行它，请传递 unpwdb.timelimit = 0 脚本参数来禁用计时器。

See the documentation for the unpwdb NSE library, which http-joomla-brute uses to manage usernames and passwords. It defaults to a 10-minute time limit, after which it stops returning credentials. If you really want to run it until it is finished, pass the unpwdb.timelimit=0 script argument to disable the timer.

关于您想要跳过的初始检查，只需从调用中删除 -sV ，这将删除扫描的服务版本检测阶段，并添加 -p 80 以指示Nmap仅扫描端口80（或运行Joomla应用程序的任何端口）。

Regarding the "initial checks" that you would like to skip, simply drop the -sV from your invocation, which will remove the service version detection phase of the scan, and add -p 80 to instruct Nmap to only scan port 80 (or whatever port your Joomla app is running on).

这篇关于Nmap http-joomla-brute脚本示例？的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！