网络信息搜集实验

，最邺》软反腕《网络攻击与防御》学生实验报告口ChengduN?usoftUniversityn《网络攻击与防御》学生实验报告二、实验目的目的：理解域名的含义及DNS解析的过程，掌握基本的搜索引擎语法、DNS服务器查看、主机活跃性检测、网络拓扑检测、端口、开放服务与系统识别的检测，并可以利用漏洞检测工具来进行基本的系统漏洞扫描。要求：1．利用搜索引擎或工具进行网站的域名注册信息查询.对网站IP及其所属C段网络进行主机活跃性检测.对对网络攻防环境中的Windows2003靶机进行网络拓扑检测、端口、开放服务与系统识别.对网络攻防环境中的Windows2003靶机进行漏洞检测三、实验步骤（及实验数据）.利用Google/Baidu等搜索引擎对你感兴趣的网站进行编写语言进行判断并搜索其公布在网络上的excle、word、powerpoint、pdf、txt等文档；GpOytIntaMLpvthon$QCt□bSrt□QIHriDEffi;»l££XA性孕的褥否吊闫叼电.凳就Iglhutj.-ogm>附随加/,由।r植j>8卜1故』-I+akii>^le-p-/lbion.txt-atm才Sbef•d白白ly岛卸业"GitHiibCheckiyntaxInVimAs5nchriDfuudyandflK11匕.wtihServerPrntacd|LSP|suppert-densu■JTdtpcjnEgMiiub.-tenlPylFkMVpiWSnrJnjpfiTeTdi&fi।bhD、Tpython-programming^xenclaesH00+PyttK-nclualtenging…He白版Mid如me口版eicr2Pj/ihcri世曲顿o<ibM?ww时时白帆llw-***四里白>理drw”网帼皿防Bw第逸MaLevei2HfWflWtaiffliwans..dqc^^1honorg卜_制国际।sxl«nlng।highlightlang：!c..._&tnbedding...HisHsapossibkb□山HIheother'Marramuxtennchynurcalion均^rrtedchngPytiKnriILEjrfcetidbg户口小出^nRIraUon'#±1LheaishfId...mMrMjg.8m-R5JDBrtW，FynaN：7』M.谤函明□pcum^ntaliQn.-FTPDirectoryLiftingttpJiTtpslrahJHoonvpu*10ap0s国口才小型11Kl=。作中2了2血npMlpqmE.QQm'dtWnsposDugiMsenEgFyricrHB.F/wigjevl珥zPTNting即hami.?.3la.McsjcpwiE.口ig।cte•叽加山口।py_aeiup_ii_HiftiKws-行至此菸_ln5tal4-QpenCV-Pylhon-in-Windows：InstallOpenCV-Pythanbn,gundalbWedl坨邮w金闻ojwrKIV-^honin"Beio-Mejs.利用Google/Baidu等搜索引擎找出某个你感兴趣的网站的管理员后台地址；《网络攻击与防御》学生实验报告《网络攻击与防御》学生实验报告ChengnuNeusoftUniversityOOgktInurido@n0Q.Q至“，口阳片0W团新闻日的节三里与田・工曰拨加1效畋赵W弼酣!：二敬IH3口痢wwffli附片间).优武]acc&uiiia।bg(n*班单比而LoginsInstagramVftfc-C're匕口EIdInshgian宫中nIdDheckoulK-halyairInerds.iaiihi-£InFemis-havefrswicaphinngM才anrgivcumdTegrid.M«Micrq(mKccm।iogn•础5匕©Logirt]-DrdpbaxL必k>口惮W*；日口啊在。刖*ieAcs.何履附yaxHes对fEt&are.归n.g&v■feiin归login,gw-WelcomeAnqffkh：wetos4tecd:heUnfcedgavenunsntFn.qmr.S^nnJEheiIaddress."PasHAod.ShowpassiMxd.Don'thawnacxounI?Create-anacrawt能tdyrthil田丸山曲id4£!i提询i।螃bWL说加*酹禺此田Lugin-IriEBractiv^BrokersTbuariusnganoHa旧驾onDlInlEmetfijcptorer.UpgiaceIdLakeadh'2ntageatKI即必0hgr培AspTNotfi;mti｛：rI5I即1日旧nghrigerAll却用的Internpl...呻％#仲1如小♦it译it百.利用Whois查询工具或者相关网站对某个你感兴趣的网站进行域名注册信息收集;ali213,netI网站的店巴起治ali2l3„net[when。氏亘]申谢0用■原毡其帧f用母苦卮及亘词：cn-com[k：；画org注田商XrsrnenSSComTechnologyCo.,Ltd联手电匡"*^53511[whois*.®]创这时间2口CH年OG月骂日过期时间加24年口5月K日里新时间ZQ2C库Q3月09,曰场司照KSttfliois.iBLComDNSHSVDNSV2,COMMSZDNSV2.COPJ就存台宏fiSSLlh能树已entTranterPrchiibi-ted)域名的信息冰铸息更新时间.sozo-os-zj12x1^6立即更荒；薄圆；■Sfi长之宝Who：$®iSlDamewnName:ALI213.NETRegitr>-DomainID73*6a325_DOM：ArN_NET-VRSNKegttrarWHQ；SServerYrtioi5.35.coinRegm由URLhtlp^/iVriVjJE.coinUpdatedDate:2020-03-08TM:4：737ZCreationDate2D0I-06-23T1141:302Reqtttiy闲ryDate:2024-06-23T11:41:3OZfteo.itfar.Xi^inen35.C&mTec^noloavCo..Ltd„府IK(TiiiDi隼矶而茄J网My曲1单抑踞单机;湖津物n淋写।fiffkWl电能附;能懵世(DCitiipE枷实同力邛浮射击..5丁、如孔卷益生甘I柜美音闰运却的运词rafistjpaimfi座或词4.探测上述网站的IP地址并进行网络拓扑检测;《网络攻击与防御》学生实验报告□《网络攻击与防御》学生实验报告□SiCAWiN[<iWSUystfm32;.crnd.wtMicrosoft9indovs1版本10.0.183G2.720]M3019MicrosoftCorporation«-保留所有1投利♦C：\Users\DELL>tracflrtww.ali213,net却过最多M个跳点跟踪到ali2J3,net1222..187,254.116］的路由;2345G910112345G91011<2353945*49*D15ms61,139.34.57国£171.208.lfiti.25ms41SS222.187.2^5.106请求即时.国£GL14L244.226用求超明请求超时.□E222.1S7.254..116充秒192,168.1.1*43扫描你本机的DNS服务器地址及名称;、S32AWlNDQ^V&\5y=ttTn32^crnd.exef0CO；O；O；ffff；；24lTCPIPI二的>t0IQ5..fsc0：0：0：ffffTCPIPI二的>t0IQ5..无线局域M过归法（TLAN连战希定的IMS才嵯描血物理地址EHCP连战希定的IMS才嵯描血物理地址EHCP已鹏用一一一一自动限置」启用一.1户吊地址施时IPv6地址一.亭地链接IPv6地比IPv4地址子河捕柑盘有租约的时同..相约II叨的时间..蚁认"关MCPIII各期...PKCPv6[AID...DHOhrfi客户游QUIDESS限存器....Intel（R）■irel？sj-AC9560160MHzTCPIF卜.的>t0IQ8..30-24-32-Da-23-F2是是240e：^：2b74a触499】4wi3：fbFifIdf4tF「选｝240e：A99：2b74.3d^：blcB.le^S：6bcf.c2flfi（窗迷）f2部：：9991:45d3:fbfl伫IdfeSfl1西选）IS（首选）255.25s,2550202口和月如日1。：羽：国2M府士]费日13:33:54feBD::1UW2.IflSL1.1192.16S.11]。能逐愉00-01-00-0L--E5-F5-田EF-64-33-5F-61feBD::1UIS已启用C：\UBers\OELL>利用Nmap对此网站IP所处C段IP地址进行主机活跃性检测（用ICMP、ACK、SYN、UDP方式分别进行检测并给出结果）；

文件出同短旧百看M虎限机1M选项，(D帮期岫II-号。L③口口回区西口•SearchTerming文件出同短旧百看M虎限机1M选项，(D帮期岫II-号。L③口口回区西口•SearchTerming6^67/tcp9M4,工卬lM42/tCU32775/tCpPOfiT7S7/tcplSC7Ztcpl^BS/tcp1434/tcp贷王面用Kai-LihiiK-^Ol?.2-vrnware-a_.Wed。工二46STATEclosedclosedclosedclosedclosedclosedclosedclosedclosedclosedSERVICEqscinstlbootsansoft-lm-Zwebabjectsns-sql-mdec^notessiiiplifyniwJiaun^nflwnu祚Knowns&netlmes-rpc9◎AutomalilcsuspendiComputerwillsuspendverysoonbecauseofinactivity.Srais50:elapsed;中hosisc^npLeLetinupi.q斗uiiaergviny用meailii占cay5¥MstealthScanT1ning?About78,5^done；etc：81；】$倬二的；34renalfilng}Stats；&；2^：23eUps&d；。Iwstsconoleted(54叩1.64underg&lngStealthS-camSWStealthScanTilling：About79.done；ETC：01：1.9(0:04:54renadning}Hrriapscanreportf&r192.LBB.l.aHastisup(A.eoazislatency)„Hotshoxm二990filteredportsNmap£匚3俏retportfor192.L&B.1.1Hostistip42.后与Latency).N&t二S92closedportsAj/lgliDFlS,Places-QTerminaL▼|P0fiTSTATESERVICE21/tcp-filteredftp22/tcpfilteredsshZ3/tcpfilteredtelnet|P0fiTSTATESERVICE21/tcp-filteredftp22/tcpfilteredsshZ3/tcpfilteredtelnet53/tcpopendamains&/tcpopenhttp别；nmapaone:ihaaaressesi：osrsup?scannedini.//seconasroot^ki:r#nmap-sA192.163G0/24StartingNmap7.70()at2020-03-25LO:44CSTNmapscanreportforHostisup(O.0040slatency).All1000scannedportson192.16B.CL1areunfilteredMACAddress:C8:3A:35:10:6C:70(TendaTechnology)Nmapscanreportfor192.16B.0.1QBHostisup(0,00034slatency).AllIODOscannedportson192.its.0.LOEarefilteredMACAddress：30:24:32:3D:BB:IE(Unknown)Nmapscanreportfor20Hostis叩(0.0013slatency).Natshown：997filteredportsPORTSTATESERVICE22/tcpunfitteredssh80/tcpunfilteredhttp9090/tcpunfilteredzeus-adminMACAddress:OQ:QC:29:06:B9:DO(VMware)Nnidpscanreportfor192.166.o.133Hostisup(0,09000495latency).ChengduChengdu同号以承口代Univ^r5ity□■■■■■■■■■■■■■■■uo^iii»"口inu・小tx七」口口rr」:冰山工；〜#nmap-sS192.168.&.120StartingNmap7.70(https://nmap,org)at2020-03-2510:50CSTNmapscanreportfor192.168,9.120iLtereciportsSERVICEsshhttpzeus-atfminHostisup(O.0015slatency),Notshown：997PORTSTATE22/tcpopen80/tcpopen9090/tcpcloseiLtereciportsSERVICEsshhttpzeus-atfminMACAddress：0&：DC：29：06：59:05(VMware)Nmapdone;1IPaddress(1hostup)scannedin5.11secondsrooti^kali：-#Irootv；:f#nmap-sA192.16S.0.129StartingNm3P7.70()at2020-03-2510:50CSTNmapscanreportfor192.168.0,120Hostisup(9.00979slatency).Notshown：997filteredportsPORTSTATESERVICE22/tcpunfilteredssh80/tcpunfilteredhttp9090/tcpunfilteredzeus-adminMACAddress：GO：9C：29：96：B9：DO(VMware)Ne3Pdone：1IPaddress{1hostup)scannedin5.13secondsrooter.-L::-#|notshown：997filteredportsPORTSTATE5iERVrCEVER5I0M22/tcpopensshOpenSSHB.B(protocol2,0)8&/tepopenhttpApactiehttpd2.4.37((centos)OpenSSL/1.1,1cmodfcgid/2.3.9)9090/tcpclosedzeu5-admin：“#nmap-sv192les.o.izoStartLugNinap7,7。(https://nmap.erg)at?026-03-2519:51CSTNm叩scanreportfor192.168.Q.120Hostisup(0.6013slatency).MACAddress：OG:OC:29:06:B9:DG(VMware)Servicedetectionperformed.Pleaserepostanyincorr&ctresultsathttpsr//ninap.errg/submit/.Flmapdone：1IPaddress(1hostup)seamedin14.13secondsro\:〜#《网络攻击与防御》学生实验报告《网络攻击与防御》学生实验报告《网络攻击与防御》学生实验报告□《网络攻击与防御》学生实验报告□:Tninap-D20StartingMmap7,70(https://nnap,org)at2G2Q-03-25IO：5?CSTNmapscanreportfor192.168.0,120Hostistip(0.JO12sLatencyf.Motshown：997PORT22/tcpFiO/tcp9090/tcpSTATEopenopenclosedMotshown：997PORT22/tcpFiO/tcp9090/tcpSTATEopenopenclosedMACAddress：00filteredports写ERUI匚Esshhttp：zeusodnin:0€:29:06:B9:DO<VMware)AggressiveOSguesses：Linux6AggressiveOSguesses：Linux6■4.6(95、)，Linux2.6.326(93^),Linux2.6.39(93^)r常)3.103.13Linux4.11(97^1fLinux3.2-4,9196嚎Linux3,1(95、),Linux4.LG(93*),LinUK2.5.22-£.6.33.10(93^),Linux4-4(92^1,LirtUK2.6.32{92Noexact0smatehe5forMetworkDistance；Noexact0smatehe5forMetworkDistance；1hapethost(testconditionsnon-ideal).□sdetectionperformed.jsubmit/.J□sdetectionperformed.jsubmit/.JNmapdone:1IPaddress”二01■甸；T同(1hostup}scannedln8.86secnnrEsnmapaone：zbbipaaaresses(4nosrsup)