Skip to content

Commit 5d51dd7

Browse files
committed
当存在某些EDR的时候,建议爆破线程设定为10~15
1 parent c65a297 commit 5d51dd7

File tree

2 files changed

+26
-21
lines changed

2 files changed

+26
-21
lines changed

README.md

Lines changed: 25 additions & 20 deletions
Original file line numberDiff line numberDiff line change
@@ -61,6 +61,7 @@ cube crack -x X -s 192.168.1.1
6161
* `-x X`是加载全部可用的爆破插件,先检查端口,端口开放之后爆破
6262
* 未指定用户密码的时候,会加载内置词典
6363
* `zabbix`插件没有卵用,爆破5次失败之后会锁定30s
64+
* **默认线程是30,这种情况下爆破会触发x绒的告警,建议设定为10~15**
6465

6566
#### 支持的爆破插件
6667
* 可组合使用: `elastic/ftp/mongo/mssql/mysql/postgres/redis/smb/ssh`
@@ -75,30 +76,34 @@ cube probe -x Y -s 192.168.2.1/24
7576
```
7677
### 加载指定插件
7778
```shell
79+
# 加载oxid,ms17010插件
7880
cube probe -x oxid,ms17010 -s 192.168.2.1/24
81+
82+
# 加载WIN集合插件,WIN集合插件下有 ping,netbios,oxid,smb,winrm,wmi,mssql
83+
cube probe -x WIN -s 192.168.2.1/24
7984
```
8085

8186
#### 支持的探测插件
82-
| FUNC | PORT | LOAD BY X |
83-
|-------------------------------------------------------|-------|-----------|
84-
| docker | 2375 | Y |
85-
| dubbo | 20880 | Y |
86-
| etcd | 2379 | Y |
87-
| k8s10250 | 10250 | N |
88-
| k8s6443 | 6443 | N |
89-
| ms17010 | 445 | Y |
90-
| mssql | 1433 | N |
91-
| netbios | 137 | N |
92-
| oxid | 135 | Y |
93-
| ping | | N |
94-
| rmi | 1099 | Y |
95-
| smb | 445 | Y |
96-
| smbghost | 445 | Y |
97-
| winrm | 5985 | N |
98-
| wmi | 135 | N |
99-
| zookeeper | 2181 | Y |
100-
| [jboss](https://github.com/JKme/cube/wiki#jboss-3873) | 3873 | Y |
101-
| [prometheus](https://github.com/JKme/cube/wiki#prometheus-9090) | 9090 | Y |
87+
| FUNC | PORT | LOAD BY X |
88+
|-----------------------------------------------------------------|-------|-----------|
89+
| docker | 2375 | Y |
90+
| dubbo | 20880 | Y |
91+
| etcd | 2379 | Y |
92+
| k8s10250 | 10250 | N |
93+
| k8s6443 | 6443 | N |
94+
| ms17010 | 445 | Y |
95+
| mssql | 1433 | N |
96+
| netbios | 137 | N |
97+
| oxid | 135 | Y |
98+
| ping | | N |
99+
| rmi | 1099 | Y |
100+
| smb | 445 | Y |
101+
| smbghost | 445 | Y |
102+
| winrm | 5985 | N |
103+
| wmi | 135 | N |
104+
| zookeeper | 2181 | Y |
105+
| [jboss](https://github.com/JKme/cube/wiki#jboss-3873) | 3873 | Y |
106+
| [prometheus](https://github.com/JKme/cube/wiki#prometheus-9090) | 9090 | Y |
102107

103108
* `smb/wmi/winrm/mssql`是利用NTLM认证过程获取[Windows版本系统信息](https://jkme.github.io/2021/08/06/windows-ntlm-smb-scan.html)
104109
* 使用`ping/netbios`的时候,最好单独使用获取更准确的结果,线程数量建议为10

config/config.go

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -15,6 +15,6 @@ var ProbeX = []string{"docker", "rmi", "oxid", "ms17010", "smb", "zookeeper", "d
1515

1616
var ProbeK8S = []string{"k8s10250", "k8s6443", "etcd"}
1717

18-
var ProbeWIN = []string{"ping", "netbios", "oxid", "smb", "winrm", "wmi"}
18+
var ProbeWIN = []string{"ping", "netbios", "oxid", "smb", "winrm", "wmi", "mssql"}
1919

2020
var PASSWORDS = []string{" ", "123456", "admin", "admin123", "root", "5201314", "pass123", "pass@123", "password", "123123", "654321", "111111", "123", "1", "admin@123", "Admin@123", "admin123!@#", "1234qwer!@#$", "1qaz@WSX1qaz", "QAZwsxEDC", "{user}", "{user}1", "{user}12", "{user}111", "{user}123", "{user}1234", "{user}12345", "{user}123456", "{user}@123", "{user}_123", "{user}#123", "{user}@111", "{user}@2019", "P@ssw0rd!", "P@ssw0rd", "Passw0rd", "qwe123", "12345678", "test", "test123", "123qwe!@#", "123456789", "123321", "666666", "a123456.", "123456~a", "000000", "1234567890", "8888888", "!QAZ2wsx", "1qaz2wsx", "1QAZ2wsx", "1q2w3e4r", "abc123", "abc123456", "1qaz@WSX", "a11111", "a12345", "Aa1234", "Aa1234.", "Aa12345", "123456a", "123456aa", "a123456", "a123123", "Aa123123", "Aa123456", "Aa12345.", "sysadmin", "system"}

0 commit comments

Comments
 (0)