2017-2018-2 20155206 《網絡對抗技術》 實驗六：信息蒐集與漏洞掃描

2017-2018-2 20155206 《網絡對抗技術》 實驗六：信息蒐集與漏洞掃描

基礎問題回答

、 哪些組織負責DNS，IP的管理。
、 全球根服務器均由美國政府受權的ICANN統一管理，負責全球的域名根服務器、DNS和IP地址管理。全球根域名服務器：絕大多數在歐洲和北美（全球 13臺，用A~M編號），中國僅擁有鏡像服務器（備份）。全球一共有5個地區性註冊機構：ARIN主要負責北美地區業務，RIPE主要負責歐洲地區業務，APNIC主要負責亞太地區業務，LACNIC主要負責拉丁美洲美洲業務,AfriNIC負責非洲地區業務。
、 什麼是3R信息。
、 註冊人(Registrant)、註冊商(Registrar)、官方註冊局(Registry)
、 評價下掃描結果的準確性。
、 較爲準確。

使用whois域名註冊信息查詢

、 咱們能夠很清楚地看到要查找的3R註冊信息，包括註冊人的組織和城市等信息。
、 值得注意的是進行whois查詢時要去掉www等前綴不然可能查詢不到。

、 查詢結果
`Domain Name: CNBLOGS.COM
Registry Domain ID: 106507487_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.35.com
Registrar URL: http://www.35.com
Updated Date: 2017-02-21T01:51:06Z
Creation Date: 2003-11-12T03:16:35Z
Registry Expiry Date: 2021-11-12T03:16:35Z
Registrar: Xiamen 35.Com Technology Co., Ltd.
Registrar IANA ID: 1316
Registrar Abuse Contact Email: abuse@35.cn
Registrar Abuse Contact Phone: +86.5925391800
Domain Status: clientDeleteProhibited https://icann.org/epp#clientDeleteProhibited
Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
Name Server: NS3.DNSV4.COM
Name Server: NS4.DNSV4.COM
DNSSEC: unsigned
URL of the ICANN Whois Inaccuracy Complaint Form: https://www.icann.org/wicf/

Last update of whois database: 2018-05-07T03:43:55Z <<<

For more information on Whois status codes, please visit https://icann.org/epp

NOTICE: The expiration date displayed in this record is the date the
registrar's sponsorship of the domain name registration in the registry is
currently set to expire. This date does not necessarily reflect the expiration
date of the domain name registrant's agreement with the sponsoring
registrar. Users may consult the sponsoring registrar's Whois database to
view the registrar's reported date of expiration for this registration.

TERMS OF USE: You are not authorized to access or query our Whois
database through the use of electronic processes that are high-volume and
automated except as reasonably necessary to register domain names or
modify existing registrations; the Data in VeriSign Global Registry
Services' ("VeriSign") Whois database is provided by VeriSign for
information purposes only, and to assist persons in obtaining information
about or related to a domain name registration record. VeriSign does not
guarantee its accuracy. By submitting a Whois query, you agree to abide
by the following terms of use: You agree that you may use this Data only
for lawful purposes and that under no circumstances will you use this Data
to: (1) allow, enable, or otherwise support the transmission of mass
unsolicited, commercial advertising or solicitations via e-mail, telephone,
or facsimile; or (2) enable high volume, automated, electronic processes
that apply to VeriSign (or its computer systems). The compilation,
repackaging, dissemination or other use of this Data is expressly
prohibited without the prior written consent of VeriSign. You agree not to
use electronic processes that are automated and high-volume to access or
query the Whois database except as reasonably necessary to register
domain names or modify existing registrations. VeriSign reserves the right
to restrict your access to the Whois database in its sole discretion to ensure
operational stability. VeriSign may restrict or terminate your access to the
Whois database for failure to abide by these terms of use. VeriSign
reserves the right to modify these terms at any time.

The Registry database contains ONLY .COM, .NET, .EDU domains and
Registrars.
Domain Name: cnblogs.com
Registry Domain ID: 106507487_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.35.com
Registrar URL: http://www.35.com
Updated Date: 2016-10-23T22:59:39Z
Creation Date: 2003-11-11T04:00:00Z
Registrar Registration Expiration Date: 2021-11-11T04:00:00Z
Registrar: 35 Technology Co., Ltd.
Registrar IANA ID: 1316
Registrar Abuse Contact Email: abuse@35.cn
Registrar Abuse Contact Phone: +86.5925391800
Domain Status: clientDeleteProhibited https://icann.org/epp#clientDeleteProhibited
Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
Registry Registrant ID: Not Available From Registry
Registrant Name: du yong
Registrant Organization: du yong
Registrant Street: 405, Building No.5, Heshan Street No.369, Xihu District
Registrant City: Hangzhou
Registrant State/Province: Zhejiang
Registrant Postal Code: 310024
Registrant Country: CN
Registrant Phone: +86.057188079867
Registrant Phone Ext:
Registrant Fax: +86.057188079867
Registrant Fax Ext:
Registrant Email: dudu.yz@gmail.com
Registry Admin ID: Not Available From Registry
Admin Name: du yong
Admin Organization: du yong
Admin Street: 405, Building No.5, Heshan Street No.369, Xihu District
Admin City: Hangzhou
Admin State/Province: Zhejiang
Admin Postal Code: 310024
Admin Country: CN
Admin Phone: +86.057188079867
Admin Phone Ext:
Admin Fax: +86.057188079867
Admin Fax Ext:
Admin Email: dudu.yz@gmail.com
Registry Tech ID: Not Available From Registry
Tech Name: du yong
Tech Organization: du yong
Tech Street: 405, Building No.5, Heshan Street No.369, Xihu District
Tech City: Hangzhou
Tech State/Province: Zhejiang
Tech Postal Code: 310024
Tech Country: CN
Tech Phone: +86.057188079867
Tech Phone Ext:
Tech Fax: +86.057188079867
Tech Fax Ext:
Tech Email: dudu.yz@gmail.com
Name Server: ns3.dnsv4.com
Name Server: ns4.dnsv4.com
DNSSEC: unsigned
URL of the ICANN Whois Inaccuracy Complaint Form:
https://www.icann.org/wicf/

Last update of WHOIS database: 2016-10-23T22:59:39Z <<<

For more information on Whois status codes, please visit https://icann.org/epp

This data is provided by 35 Technology Co., Ltd.
for information purposes, and to assist persons obtaining information
about or related to domain name registration records.
35 Technology Co., Ltd. does not guarantee its accuracy.
By submitting a WHOIS query, you agree that you will use this data
only for lawful purposes and that, under no circumstances, you will
use this data to
1) allow, enable, or otherwise support the transmission of mass
unsolicited, commercial advertising or solicitations via E-mail
(spam); or
2) enable high volume, automated, electronic processes that apply
to this WHOIS server.
These terms may be changed without prior notice.
By submitting this query, you agree to abide by this policy.
`
、 經過域名Whois查詢 - 站長之家進行查詢

使用nslookup和dig進行域名查詢

、 經過dig命令或nslookup命令能夠獲得網址對應的ip地址
可是nslookup能夠獲得DNS解析服務器保存的Cache的結果，並不必定準確。dig能夠從官方DNS服務器上查詢精確的結果。

、 查詢了百度與博客園的域名，均可以正常訪問

使用netcraft提供的信息查詢服務

IP2反域名查詢

、 能夠看到ip-adress.com提供的位置信息和百度地圖提供的位置信息相符

、 besti.edu.cn與地圖提供的位置相符

、cnblogs.cn的位置不明白是個什麼鬼

traceroute命令進行路由偵查

、 這5條信息依次表明了生存時間、三次發送的ICMP包返回時間和途經路由器的IP地址。其中*的信息表示該次ICMP包返回時間超時。

nmap

-O

、 -O 識別操做系統

-sn

、 -sn 來尋找活躍主機

-sS

、 -sS tcp掃描

-sU

、 -sU udp掃描

漏洞掃描

、 首先安裝openvas，並配置完成

進行漏洞掃描