https://wiki.ourominas.com.br/index.php?action=history&feed=atom&title=Identificando_conficker_na_rede 2026-04-17T15:46:58Z Histórico de revisões para esta página neste wiki MediaWiki 1.45.1 https://wiki.ourominas.com.br/index.php?title=Identificando_conficker_na_rede&diff=1657&oldid=prev 2020-08-08T03:12:55Z

<p>uma edição</p> <table style="background-color: #fff; color: #202122;" data-mw="interface"> <col class="diff-marker" /> <col class="diff-content" /> <col class="diff-marker" /> <col class="diff-content" /> <tr class="diff-title" lang="pt-BR"> <td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">← Edição anterior</td> <td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">Edição das 03h12min de 8 de agosto de 2020</td> </tr><tr><td colspan="4" class="diff-notice" lang="pt-BR"><div class="mw-diff-empty">(Sem diferença)</div> </td></tr> <!-- diff cache key omph_wiki-maquine_:diff:1.41:old-1656:rev-1657 --> </table>

imported>Admin https://wiki.ourominas.com.br/index.php?title=Identificando_conficker_na_rede&diff=1656&oldid=prev 2019-01-26T10:50:49Z

<p><span class="autocomment">Identificando conficker na rede</span></p> <p><b>Página nova</b></p><div>== Introdução ==<br /> <br /> Exemplos de uso do poderoso comando nmap<br /> <br /> == Identificando conficker na rede ==<br /> <br /> Exemplo de um scan da rede, o resultado é de uma máquina rodando samba com compartilhamento para rede<br /> <br /> # nmap -p139,445 --script p2p-conficker,smb-os-discovery,smb-check-vulns --script-args checkconficker=1,safe=1 -T4 10.38.54.0/24<br /> <br /> Nmap scan report for 10.38.54.253<br /> Host is up (0.82s latency).<br /> PORT STATE SERVICE<br /> 139/tcp open netbios-ssn<br /> 445/tcp open microsoft-ds<br /> MAC Address: 00:0C:29:3D:2B:8D (VMware)<br /> <br /> Host script results:<br /> | smb-check-vulns: <br /> | MS08-067: CHECK DISABLED (add &#039;--script-args=unsafe=1&#039; to run)<br /> | Conficker: UNKNOWN; not Windows, or Windows with disabled browser service (CLEAN); or Windows with crashed browser service (possibly INFECTED).<br /> | | If you know the remote system is Windows, try rebooting it and scanning<br /> | |_ again. (Error NT_STATUS_OBJECT_NAME_NOT_FOUND)<br /> | regsvc DoS: CHECK DISABLED (add &#039;--script-args=unsafe=1&#039; to run)<br /> | SMBv2 DoS (CVE-2009-3103): CHECK DISABLED (add &#039;--script-args=unsafe=1&#039; to run)<br /> | MS06-025: CHECK DISABLED (add &#039;--script-args=unsafe=1&#039; to run)<br /> |_ MS07-029: CHECK DISABLED (add &#039;--script-args=unsafe=1&#039; to run)<br /> | smb-os-discovery: <br /> | OS: Unix (Samba 3.6.9-151.el6_4.1)<br /> | Computer name: terra<br /> | NetBIOS computer name: <br /> | Domain name: cancella.com.br<br /> | FQDN: terra.cancella.com.br<br /> | NetBIOS domain name: CANCELLA-NET<br /> |_ System time: 2014-06-03T11:55:00-03:00<br /> <br /> <br /> [[Usuário:Danton Cancella|Danton Cancella (31-8456-6829)]] ([[Usuário Discussão:Danton Cancella|discussão]])<br /> <br /> [[Category: TI]]<br /> [[Category: VIRUS]]</div>

2532252>Jefferson