May 23, 2021 DOS Command learning manual
Breaker tool: xscan .exe
Basic format
xscan -host -lt; Start IP> -
xscan -file - host list file name
The detection item
-active detects whether the host is alive
-os detection of remote operating system types (via NETBIOS and SNMP protocols)
-port detects the port status of commonly used services
-ftp detects FTP weak passwords
-pub detects write permissions for anonymous users of the FTP service
-pop3 detects POP3-Server weak password
-smtp detects SMTP-Server vulnerabilities
-sql detects SQL-Server weak password
-smb detects NT-Server weak passwords
-iis detects IIS encoding/decoding vulnerabilities
-cgi detects CGI vulnerabilities
-nasl loads the Nessus attack script
-All detects all of the above items
Other options
-i adapter number Set up the network adapter, and the adapter number is available through the "-l" parameter
-l All network adapters are displayed
-v shows the progress of the detailed scan
-p Skip unsysponsive hosts
-o Skip hosts that have no open ports detected
-t Number of synth threads, number of sympo-hosts Specifies the maximum number of sympo-threads and the number of sympo-hosts, with a default number of 100,10
-log file name Specify scan report file name (suffix: TXT or HTML file)
Example of usage
xscan -host 192.168.1.1.1-192.168.255.255 -all -active -p Detects 192.168.1.1-192.168.255.255 all vulnerabilities in the segment, skipping unansponsive hosts
xscan -host 192.168.1.1.1-192.168.255.255 -port -smb -t 150 -o Detection 192.16 8.1.1-192.168.255.255 The standard port state of the host within the segment, NT weak password user, maximum number of syndable threads is 150, skipping the host that no open port is detected
xscan -file hostlist.txt -port -cgi -t 200, 5 -v -o detects the standard port status of all hosts listed in the "hostlist.txt" file, CGI vulnerabilities, maximum number of syndication threads is 200, up to 5 hosts are detected at the same time, showing detailed detection progress, skipping hosts that do not detect open ports