想找个网管的工作(简历)

pod

原帖由 "haoyufu" 发表：
http://218.94.124.29/acid/acid_main.php

我想请教下楼主

你的这个是怎么做的啊

我也做了一个但是tcp.udp,cmp等没有反映

你的安装步骤能给我一份吗

谢谢

haoyufu@ioz.ac.cn or haoyufu@163.com
..........

使用snort网站的官方文档装不会有问题。

byebyebyebye

byebyebyebye

原帖由 "pod" 发表：


awstats
mrtg
qmail+iGENUS
snort
phpbb

这里面的东西都是最基础的东西，拿着文档很容易都能装下来。
不知道楼主综合应用和troubleshooting 水平如何

应急能力，和综合应用水平感觉还算一般吧，也有一点点安全意识

不知道你是否能看出218.94.124.29这台机器是什么系统 开了什么端口
apache 版本 php 版本  ssh 版本

我不知道现在这台机器上有什么安全漏洞 请帮忙指出 谢谢！

其他机器不要动

gugong

原帖由 "byebyebyebye" 发表：


应急能力，和综合应用水平感觉还算一般吧，也有一点点安全意识

不知道你是否能看出218.94.124.29这台机器是什么系统 开了什么端口
apache 版本 php 版本  ssh 版本

我不知道现在这台机器上有什么安全漏洞 ..........

1. 2005年07月16日星期六下午17时12分10秒[root@yltc root]# hackbot.pl -A 218.94.124.29
   
2. 
   
3. ###############################################################
   
4. #      HackBot v2.21 2003 / http://ws.obit.nl/hackbot/        #
   
5. #               (c) 2000-2003 Marco van Berkum                #
   
6. #                                                             #
   
7. # Marco van Berkum            - m.v.berkum@obit.nl            #
   
8. # Kristian Vlaardingerbroek   - kris@obit.nl                  #
   
9. # Pepijn Vissers              - zoef@zoefdehaas.nl            #
   
10. # Martijn Mooijman            - foobar@obit.nl                #
    
11. # Herman Poortermans          - herman@ofzo.nl                #
    
12. ###############################################################
    
13. 
    
14. 
    
15. Checking 218.94.124.29 ...
    
16. 
    
17. Checking Whois info @APNIC
    
18. --------------------------
    
19. Range:               218.94.124.0 - 218.94.124.31
    
20. Netname:             NANJING-MARCONI-COMMUNICATE-CORP
    
21. Description:         NanJing New&High Technology Industry Development Zone Management Committee(Marconi Communication Tec
    
22. Country:             CN
    
23. Admin-C:             CH481-AP
    
24. 
    
25. Checking for webserver on port 80
    
26. -----------------------------------
    
27. HTTP/1.1 200 OK
    
28. Date: Sat, 16 Jul 2005 09:07:14 GMT
    
29. Server: Apache/2.0.54 (Unix) PHP/4.3.8
    
30. Last-Modified: Sat, 02 Jul 2005 08:48:19 GMT
    
31. ETag: "372413a-232-cbd09ac0"
    
32. Accept-Ranges: bytes
    
33. Content-Length: 562
    
34. Connection: close
    
35. Content-Type: text/html; charset=GB2312
    
36. 
    
37. 
    
38. PHP 4.3.8 found
    
39. 
    
40. HTTP options
    
41. ------------
    
42. Allow options :  GET,HEAD,POST,OPTIONS,TRACE
    
43. 
    
44. Checking the webserver on port 80 for various potential problems
    
45. ------------------------------------------------------------------
    
46. * /mrtg/ found!
    
47. * Server has mrtg directory
    
48. 
    
49. --->;
    
50. - All scans done. Hackbot 2.21 -
    
51. --->; Exiting.
    

复制代码

everyday365

[root@localhost nikto-1.34]# nikto.pl -h 218.94.124.29
-***** SSL support not available (see docs for SSL install instructions) *****
---------------------------------------------------------------------------
- Nikto 1.34/1.31     -     www.cirt.net
+ Target IP:       218.94.124.29
+ Target Hostname: 218.94.124.29
+ Target Port:     80
+ Start Time:      Sat Jul 16 17:56:42 2005
---------------------------------------------------------------------------
- Scan is dependent on "Server" string which can be faked, use -g to override
+ Server: Apache/2.0.54 (Unix) PHP/4.3.8
+ Allowed HTTP Methods: GET,HEAD,POST,OPTIONS,TRACE
+ HTTP method 'TRACE' is typically only used for debugging. It should be disable
d.
+ PHP/4.3.8 appears to be outdated (current is at least 5.0.1)
+ 2.0.54 (Unix) PHP/4.3.8 - TelCondex Simpleserver 2.13.31027 Build 3289 and bel
ow allow directory traversal with '/.../' entries.
+ /~root - Enumeration of users is possible by requesting ~username (responds wi
th Forbidden for real users, not found for non-existent users) (GET).
+ /icons/ - Directory indexing is enabled, it should only be enabled for specifi
c directories (if required). If indexing is not used all, the /icons directory s
hould be removed. (GET)
+ /manual/images/ - Apache 2.0 directory indexing is enabled, it should only be
enabled for specific directories (if required). Apache's manual should be remove
d and directory indexing disabled. (GET)
+ /test - Needs Auth: (realm "frank share web"
+ /test/jsp/buffer1.jsp - Needs Auth: (realm "frank share web"
+ /test/jsp/buffer2.jsp - Needs Auth: (realm "frank share web"
+ /test/jsp/buffer3.jsp - Needs Auth: (realm "frank share web"
+ /test/jsp/buffer4.jsp - Needs Auth: (realm "frank share web"
+ /test/jsp/declaration/IntegerOverflow.jsp - Needs Auth: (realm "frank share we
b"
+ /test/jsp/extends1.jsp - Needs Auth: (realm "frank share web"
+ /test/jsp/extends2.jsp - Needs Auth: (realm "frank share web"
+ /test/jsp/Language.jsp - Needs Auth: (realm "frank share web"
+ /test/jsp/pageAutoFlush.jsp - Needs Auth: (realm "frank share web"
+ /test/jsp/pageDouble.jsp - Needs Auth: (realm "frank share web")
+ /test/jsp/pageExtends.jsp - Needs Auth: (realm "frank share web")
+ /test/jsp/pageImport2.jsp - Needs Auth: (realm "frank share web")
+ /test/jsp/pageInfo.jsp - Needs Auth: (realm "frank share web")
+ /test/jsp/pageInvalid.jsp - Needs Auth: (realm "frank share web")
+ /test/jsp/pageIsErrorPage.jsp - Needs Auth: (realm "frank share web")
+ /test/jsp/pageIsThreadSafe.jsp - Needs Auth: (realm "frank share web")
+ /test/jsp/pageSession.jsp - Needs Auth: (realm "frank share web")
+ /test/realPath.jsp - Needs Auth: (realm "frank share web")
+ / - TRACE option appears to allow XSS or credential theft. See http://www.cgisecurity.com/whitehat-mirror/WhitePaper_screen.pdf for details (TRACE)

byebyebyebye

那怎么做别人才看不出自己的php,apache 版本呢?
我以为不让别人通过telnet 和 404 错误看到自己的apache php 版本就可以了呢

谢谢各位

everyday365

那怎么做别人才看不出自己的php,apache 版本呢?
我以为不让别人通过telnet 和 404 错误看到自己的apache php 版本就可以了呢icon_smile.gif

谢谢各位

你试试添加或者修改这两行 httpd.conf
ServerTokens Minimal
ServerSignature Off

祝好运!

byebyebyebye

原帖由 "everyday365" 发表：


你试试添加或者修改这两行 httpd.conf
ServerTokens Minimal
ServerSignature Off

祝好运!

php 版本是看不到了 但是apache 版本还是回显示出来

everyday365

php 版本是看不到了 但是apache 版本还是回显示出来

那就用下面的语句啦..
ServerTokens Prod
ServerSignature Off


一定看不到了..这次...

byebyebyebye

原帖由 "everyday365" 发表：


那就用下面的语句啦..
ServerTokens Prod
ServerSignature Off


一定看不到了..这次...

谢谢