--- 工具名稱: dnmap 所屬分類: Information Gathering 標簽: [portscanning,information gathering,recon,dnmap,kali linux] 創建時間: 2016-10-20 08:52:56 --- 0x00 dnmap介紹 ------------- dnmap（distributed nmap）是一款基于nmap的分布式掃描工具，它能夠用一個集群來對另外一個大型集群網絡進行掃描。 dnmap采用的是客戶端/服務器體系結構，服務端主要是用來分發任務和匯總掃描狀態，客戶端主要用來執行掃描任務和記錄自身的掃描狀態。 該工具主要用于你想一個大型集群網絡進行掃描，你自己擁有一個集群（肉雞）的資源或者你的小伙伴想幫你的情況。 工具來源： http://mateslab.weebly.com/dnmap-the-distributed-nmap.html [dnmap主頁][1] | [Kali dnmap Repo倉庫][2] - 作者：www.mateslab.com.ar - 證書：GPLv3 0x01 dnmap_client功能 ----------------- dnmap_client - 分布式nmap框架（客戶端） ```shell root@kali:~# dnmap_client -h +----------------------------------------------------------------------+ | dnmap Client Version 0.6 | | This program is free software; you can redistribute it and/or modify | | it under the terms of the GNU General Public License as published by | | the Free Software Foundation; either version 2 of the License, or | | (at your option) any later version. | | | | Author: Garcia Sebastian, eldraco@gmail.com | | www.mateslab.com.ar | +----------------------------------------------------------------------+ 用法: /usr/bin/dnmap_client <選項> 選項: -s, --server-ip dnmap服務器的IP地址 -p, --server-port dnmap服務器的IP地址端口，默認46001 -a, --alias 您的別名，以便我們可以信貸給您的幫助，可選 -d, --debug 調試 -m, --max-rate 強制命令nmap最多使用最大速率，當nmap下來時添加--max-rate參數很管用 ``` 0x02 dnmap_server功能 --------------------- dnmap_server - 分布式nmap框架（服務端） ```shell root@kali:~# dnmap_server -h +----------------------------------------------------------------------+ | dnmap_server Version 0.6 | | This program is free software; you can redistribute it and/or modify | | it under the terms of the GNU General Public License as published by | | the Free Software Foundation; either version 2 of the License, or | | (at your option) any later version. | | | | Author: Garcia Sebastian, eldraco@gmail.com | | www.mateslab.com.ar | +----------------------------------------------------------------------+ 用法: /usr/bin/dnmap_server <選項> 選項: -f, --nmap-commands Nmap命令文件 -p, --port 監聽連接的TCP端口 -L, --log-file 日志文件，默認為/var/log/dnmap_server.conf -l, --log-level 日志記錄級別，默認詳細 -v, --verbose_level 顯示執行詳細級別(1-5)，默認1，級別0表示無輸出 -t, --client-timeout 客服端超時時間 -s, --sort 用于對靜態值進行排序的字段。 您可以選擇：Alias, #Commands, UpTime, RunCmdXMin, AvrCmdXMin, Status -P, --pem-file pem文件用于TLS連接，默認情況下，我們使用當前目錄中的服務器提供的server.pem文件 dnmap_server使用'<nmap-commands-file-name> .dnmaptrace'文件知道它從讀取nmap命令文件中繼續的地方，如果你想重新開始，只需刪除'<nmap-commands-file-name> .dnmaptrace'文件即可。 ``` 0x03 dnmap_client用法示例 ----------------- ```shell root@kali:~# echo "nmap -F 192.168.1.0/24 -v -n -oA sub1" >> dnmap.txt root@kali:~# echo "nmap -F 192.168.0.0/24 -v -n -oA sub0" >> dnmap.txt root@kali:~# dnmap_server -f dnmap.txt +----------------------------------------------------------------------+ | dnmap_server Version 0.6 | | This program is free software; you can redistribute it and/or modify | | it under the terms of the GNU General Public License as published by | | the Free Software Foundation; either version 2 of the License, or | | (at your option) any later version. | | | | Author: Garcia Sebastian, eldraco@gmail.com | | www.mateslab.com.ar | +----------------------------------------------------------------------+ =| MET:0:00:00.000544 | Amount of Online clients: 0 |= ``` 0x04 dnmap_server用法示例 ```shell root@kali:~# dnmap_client -s 192.168.1.15 -a dnmap-client1 +----------------------------------------------------------------------+ | dnmap Client Version 0.6 | | This program is free software; you can redistribute it and/or modify | | it under the terms of the GNU General Public License as published by | | the Free Software Foundation; either version 2 of the License, or | | (at your option) any later version. | | | | Author: Garcia Sebastian, eldraco@gmail.com | | www.mateslab.com.ar | +----------------------------------------------------------------------+ Client Started... Nmap output files stored in 'nmap_output' directory... Starting connection... Client connected succesfully... Waiting for more commands.... Command Executed: nmap -F 192.168.1.0/24 -v -n -oA sub1 ``` [1]: http://sourceforge.net/projects/dnmap/ [2]: http://git.kali.org/gitweb/?p=packages/dnmap.git;a=summary