msf学习笔记（5）

MSF弱点扫描

---

vnc密码破解

use auxiliary/scanner/vnc/vnc_login

vnc无密码访问

use auxiliary/scanner/vnc/vnc_none_auth

RDP远程桌面漏洞

use auxiliary/scanner/rdp/ms12_020_check

设备后门

use auxiliary/scanner/ssh/juniper_backdooruse auxiliary/scanner/ssh/fortinet_backdoor

VMWARE ESXI 暴力破解

use auxiliary/scanner/vmware/vmauthd_loginuse auxiliary/scanner/vmware/vmware_enum_vms

利用WEB API 远程开启虚拟机

use auxiliary/admin/vmware/poweron_vm

---

HTTP弱点扫描

过期证书

use auxiliary/scanner/http/cert

显示目录文件

use auxiliary/scanner/http/dir_listinguse auxiliary/scanner/http/files_dir

WebDAV Unicode编码身份验证绕过

use auxiliary/scanner/http/dir_webdav_unicode_bypass

Tomcat 登录管理页面

use auxiliary/scanner/http/tomcat_mgr_login

基于HTTP方法的身份认证绕过

use auxiliary/scanner/http/verb_auth_bypass

Wordpress密码爆破

use auxiliary/scanner/http/wordpress_login_enum