Cisco Network / Linux / 모의 해킹 / 정보 보안

공격툴&정보수집 - 21. dnmap을 이용한 분산 스캐닝

본 내용은 교육 과정에서 필요한 실습 목적으로 구성된 것이며, 혹시라도 개인적인 용도 및 악의적인 목적으로 사용할 경우, 법적 책임은 본인에게 있다는 것을 알려드립니다.

 - dnmap : 서버와 클라이언트로 구성하여 여러대의 클라이언트를 이용한 스캐닝 툴

Ex) dnmap 분산 스캐닝 (서버 : Kali Linux, 클라이언트 : Kali Linux)

@ Kali Linux

 - dnmap 패키기 설치 유무 확인

root@kali:~# dpkg -l dnmap
희망상태=알수없음(U)/설치(I)/지우기(R)/깨끗이(P)/고정(H)
| 상태=아님(N)/설치(I)/설정(C)/풀림(U)/절반설정(F)/일부설치(H)/트리거대기(W)/
| /    트리거밀림(T)
|/ 오류?=(없음)/다시설치필요(R) (상태, 오류가 대문자=불량)
||/ 이름           버전         Architecture 설명
+++-==============-============-============-=================================
ii  dnmap          0.6-1kali2   all          Distributed nmap framework

root@kali:~# dpkg -L dnmap
/.
/usr
/usr/share
/usr/share/doc
/usr/share/doc/dnmap
/usr/share/doc/dnmap/README.gz
/usr/share/doc/dnmap/copyright
/usr/share/doc/dnmap/changelog.Debian.gz
/usr/share/dnmap
/usr/share/dnmap/server.pem
/usr/bin
/usr/bin/dnmap_client
/usr/bin/dnmap_server

 - dnmap 서버 명령어 파일 생성

root@kali:~# mkdir -p /root/bin
root@kali:~# cd /root/bin
root@kali:~/bin#
root@kali:~/bin# vi dnmap.txt

 - dnmap 서버 실행

(터미널1)

root@kali:~/bin# dnmap_server -f dnmap.txt
+----------------------------------------------------------------------+
| dnmap_server Version 0.6                                             |
| This program is free software; you can redistribute it and/or modify |
| it under the terms of the GNU General Public License as published by |
| the Free Software Foundation; either version 2 of the License, or    |
| (at your option) any later version.                                  |
|                                                                      |
| Author: Garcia Sebastian, eldraco@gmail.com                          |
| www.mateslab.com.ar                                                  |
+----------------------------------------------------------------------+

=| MET:0:00:00.000561 | Amount of Online clients: 0 |=
~ 중간 생략 ~

 - dnmap 클라이언트 실행

(터미널2)

root@kali:~# dnmap_client -s 192.168.20.50
+----------------------------------------------------------------------+
| dnmap Client Version 0.6                                             |
| This program is free software; you can redistribute it and/or modify |
| it under the terms of the GNU General Public License as published by |
| the Free Software Foundation; either version 2 of the License, or    |
| (at your option) any later version.                                  |
|                                                                      |
| Author: Garcia Sebastian, eldraco@gmail.com                          |
| www.mateslab.com.ar                                                  |
+----------------------------------------------------------------------+

Client Started...
Nmap output files stored in 'nmap_output' directory...
Starting connection...
Client connected succesfully...
Waiting for more commands....
 Command Executed: nmap -sS -p22 192.168.10.0/24 -v -n -oA 192.168.10.0

~ 중간 생략 ~

 - dnmap 클라이언트와 서버 연동 확인

(터미널1)

~ 중간 생략 ~

=| MET:0:00:15.004946 | Amount of Online clients: 0 |=
+ Client ID connected: 192.168.20.50:40329 (Anonymous)
=| MET:0:00:20.000715 | Amount of Online clients: 1 |=
Clients connected
-----------------
Alias           #Commands Last Time Seen (time ago) UpTime  Version IsRoot RunCmdXMin AvrCmdXMin Status
Anonymous       0  May 30 14:40:22 ( 0' 3")  0h 0m  0.6 True        0.0       0.0 Online