nmap
Nmap 又叫做Network Mapper(網(wǎng)絡(luò)映射器)是一個開源并且為了Linux系統(tǒng)管理員或者網(wǎng)絡(luò)管理員的萬能的工具。Nmap用于瀏覽網(wǎng)絡(luò),執(zhí)行安全掃描,網(wǎng)絡(luò)審計以及在遠程機器找到開放端口。它可以掃描在線主機,操作系統(tǒng),濾包器和遠程主機打開的端口。(來源)
安裝:
yum install nmap
使用Hostname和IP地址來掃描系統(tǒng),掃描出他的系統(tǒng)所有開放端口,服務(wù)和MAC地址。
[root@ssqs-test1 ~]# nmap baidu.com
Starting Nmap 5.51 ( http://nmap.org ) at 2018-06-12 17:34 CST
Nmap scan report for baidu.com (123.125.115.110)
Host is up (0.0026s latency).
Other addresses for baidu.com (not scanned): 220.181.57.216
Not shown: 998 filtered ports
PORT STATE SERVICE
80/tcp open http
443/tcp open https
Nmap done: 1 IP address (1 host up) scanned in 4.02 seconds
[root@ssqs-test1 ~]# nmap 47.92.65.98
Starting Nmap 5.51 ( http://nmap.org ) at 2018-06-12 17:34 CST
Nmap scan report for 47.92.65.98
Host is up (0.0070s latency).
Not shown: 996 filtered ports
PORT STATE SERVICE
22/tcp open ssh
80/tcp closed http
443/tcp closed https
3389/tcp closed ms-term-serv
Nmap done: 1 IP address (1 host up) scanned in 4.54 seconds
使用 “-v” 選項,此選項給了更多的遠程設(shè)備的細節(jié)。
[root@ssqs-test1 ~]# nmap -v 47.92.65.98
Starting Nmap 5.51 ( http://nmap.org ) at 2018-06-12 17:36 CST
Initiating Ping Scan at 17:36
Scanning 47.92.65.98 [4 ports]
Completed Ping Scan at 17:36, 0.01s elapsed (1 total hosts)
Initiating Parallel DNS resolution of 1 host. at 17:36
Completed Parallel DNS resolution of 1 host. at 17:36, 0.02s elapsed
Initiating SYN Stealth Scan at 17:36
Scanning 47.92.65.98 [1000 ports]
Discovered open port 22/tcp on 47.92.65.98
Completed SYN Stealth Scan at 17:36, 4.04s elapsed (1000 total ports)
Nmap scan report for 47.92.65.98
Host is up (0.0070s latency).
Not shown: 996 filtered ports
PORT STATE SERVICE
22/tcp open ssh
80/tcp closed http
443/tcp closed https
3389/tcp closed ms-term-serv
Read data files from: /usr/share/nmap
Nmap done: 1 IP address (1 host up) scanned in 4.13 seconds
Raw packets sent: 1996 (87.800KB) | Rcvd: 9 (480B)
掃描特定的端口,Nmap有多種多樣的選項去發(fā)現(xiàn)遠程機器的端口。通過“-p”選項,你可以指定你想要掃描的端口,默認情況下Nmap掃描只掃描TCP端口??蓲呙鑶蝹€或者多個,用逗號分隔。
[root@ssqs-test1 ~]# nmap 47.92.65.98 -p 5672
Starting Nmap 5.51 ( http://nmap.org ) at 2018-06-12 17:40 CST
Nmap scan report for 47.92.65.98
Host is up (0.0065s latency).
PORT STATE SERVICE
5672/tcp open amqp
Nmap done: 1 IP address (1 host up) scanned in 0.10 seconds
[root@ssqs-test1 ~]# nmap 47.92.65.98 -p 5672,15672
Starting Nmap 5.51 ( http://nmap.org ) at 2018-06-12 17:40 CST
Nmap scan report for 47.92.65.98
Host is up (0.0064s latency).
PORT STATE SERVICE
5672/tcp open amqp
15672/tcp open unknown
Nmap done: 1 IP address (1 host up) scanned in 0.13 seconds
Linux基本命令不能用解決方法
--
先執(zhí)行如下命令:
export PATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin:/root/bin
然后在當前命令界面,基本命令都已經(jīng)可用,繼續(xù)如下操作
vim /etc/profile
source /etc/profile
/etc/sysconfig/iptables文件不存在
--
在虛擬機上裝的centos7是最小安裝方式,所以許多東西都沒裝,需要自己手動安裝。
因此/etc/sysconfig/iptables不存在,沒有安裝iptables防火墻
可以通過以下命令安裝iptables防火墻
systemctl stop firewalld
systemctl mask firewalld
// 安裝
yum install iptables-services
// 查看狀態(tài)
service iptables status
//設(shè)置開機啟動
systemctl enable iptables
//管理
systemctl stop iptables
systemctl start iptables
systemctl restart iptables
service iptables save