Metasploit mailing list archives
Strange results using auxiliary/scanner/portscan/syn and routing via Meterpreter
From: wfdawson <wfdawson () bellsouth net>
Date: Tue, 23 Mar 2010 21:21:52 -0700 (PDT)
I start off with a compromised host. I execute a Meterpreter payload .exe created with msfpayload / msfencode, and establish a connection back to my pen testing host. I determine the locally routed networks, background the session, and configure a route, e.g.: route add 172.18.0.0 255.255.0.0 1 Then, I use auxiliary/scanner/portscan/syn, set PORTS 80 and RHOSTS to the target network or host. I've tried it both ways. Either way, I get no results, even when there are web servers on the target networks or IP addresses. However, in my syslog, I see USB messages logged when I start the scan. The messages only occur when I do a scan this way. What might be causing this? Mar 24 00:18:18 wdawsonlt kernel: [21242.903636] usb usb1: usb auto-resume Mar 24 00:18:18 wdawsonlt kernel: [21242.903643] ehci_hcd 0000:00:1a.7: resume root hub Mar 24 00:18:18 wdawsonlt kernel: [21242.944048] hub 1-0:1.0: hub_resume Mar 24 00:18:18 wdawsonlt kernel: [21242.944339] hub 1-0:1.0: state 7 ports 4 chg 0000 evt 0000 Mar 24 00:18:18 wdawsonlt kernel: [21242.951720] usb usb4: usb auto-resume Mar 24 00:18:18 wdawsonlt kernel: [21242.951724] usb usb4: wakeup_rh Mar 24 00:18:18 wdawsonlt kernel: [21242.983058] hub 4-0:1.0: hub_resume Mar 24 00:18:18 wdawsonlt kernel: [21242.983340] hub 4-0:1.0: state 7 ports 2 chg 0000 evt 0000 Mar 24 00:18:18 wdawsonlt kernel: [21242.990518] usb usb6: usb auto-resume Mar 24 00:18:18 wdawsonlt kernel: [21242.990521] usb usb6: wakeup_rh Mar 24 00:18:18 wdawsonlt kernel: [21243.022269] hub 6-0:1.0: hub_resume Mar 24 00:18:18 wdawsonlt kernel: [21243.022540] hub 6-0:1.0: state 7 ports 2 chg 0000 evt 0000 Mar 24 00:18:19 wdawsonlt kernel: [21244.000134] usb usb4: suspend_rh (auto-stop) Mar 24 00:18:19 wdawsonlt kernel: [21244.250136] usb usb6: suspend_rh (auto-stop) Mar 24 00:18:20 wdawsonlt kernel: [21244.997118] hub 1-0:1.0: hub_suspend Mar 24 00:18:20 wdawsonlt kernel: [21244.997128] usb usb1: bus auto-suspend Mar 24 00:18:20 wdawsonlt kernel: [21244.997132] ehci_hcd 0000:00:1a.7: suspend root hub Mar 24 00:18:20 wdawsonlt kernel: [21244.997160] hub 4-0:1.0: hub_suspend Mar 24 00:18:20 wdawsonlt kernel: [21244.997165] usb usb4: bus auto-suspend Mar 24 00:18:20 wdawsonlt kernel: [21244.997169] usb usb4: suspend_rh Mar 24 00:18:20 wdawsonlt kernel: [21245.385531] usb usb1: usb auto-resume Mar 24 00:18:20 wdawsonlt kernel: [21245.385537] ehci_hcd 0000:00:1a.7: resume root hub Mar 24 00:18:20 wdawsonlt kernel: [21245.426148] hub 1-0:1.0: hub_resume Mar 24 00:18:20 wdawsonlt kernel: [21245.426202] hub 1-0:1.0: state 7 ports 4 chg 0000 evt 0000 Mar 24 00:18:20 wdawsonlt kernel: [21245.433757] usb usb4: usb auto-resume Mar 24 00:18:20 wdawsonlt kernel: [21245.433761] usb usb4: wakeup_rh Mar 24 00:18:20 wdawsonlt kernel: [21245.465087] hub 4-0:1.0: hub_resume Mar 24 00:18:20 wdawsonlt kernel: [21245.465356] hub 4-0:1.0: state 7 ports 2 chg 0000 evt 0000 Mar 24 00:18:21 wdawsonlt kernel: [21246.500158] usb usb4: suspend_rh (auto-stop) Mar 24 00:18:23 wdawsonlt kernel: [21247.997205] hub 1-0:1.0: hub_suspend Mar 24 00:18:23 wdawsonlt kernel: [21247.997215] usb usb1: bus auto-suspend Mar 24 00:18:23 wdawsonlt kernel: [21247.997219] ehci_hcd 0000:00:1a.7: suspend root hub Mar 24 00:18:23 wdawsonlt kernel: [21247.997247] hub 4-0:1.0: hub_suspend Mar 24 00:18:23 wdawsonlt kernel: [21247.997265] usb usb4: bus auto-suspend Mar 24 00:18:23 wdawsonlt kernel: [21247.997270] usb usb4: suspend_rh Mar 24 00:18:23 wdawsonlt kernel: [21247.997296] hub 6-0:1.0: hub_suspend Mar 24 00:18:23 wdawsonlt kernel: [21247.997300] usb usb6: bus auto-suspend Mar 24 00:18:23 wdawsonlt kernel: [21247.997302] usb usb6: suspend_rh
_______________________________________________ https://mail.metasploit.com/mailman/listinfo/framework
Current thread:
- Strange results using auxiliary/scanner/portscan/syn and routing via Meterpreter wfdawson (Mar 23)
- Re: Strange results using auxiliary/scanner/portscan/syn and routing via Meterpreter HD Moore (Mar 23)
- Re: Strange results using auxiliary/scanner/portscan/syn and routing via Meterpreter wfdawson (Mar 23)
- Re: Strange results using auxiliary/scanner/portscan/syn and routing via Meterpreter Kurt Grutzmacher (Mar 23)
- Re: Strange results using auxiliary/scanner/portscan/syn and routing via Meterpreter wfdawson (Mar 23)
- Re: Strange results using auxiliary/scanner/portscan/syn and routing via Meterpreter HD Moore (Mar 23)