File tree Expand file tree Collapse file tree 1 file changed +42
-0
lines changed
documentation/modules/auxiliary/scanner/nntp Expand file tree Collapse file tree 1 file changed +42
-0
lines changed Original file line number Diff line number Diff line change
1
+ ## Description
2
+
3
+ This module attempts to authenticate to NNTP services which support the AUTHINFO authentication extension.
4
+
5
+ This module supports AUTHINFO USER/PASS authentication, but does not support AUTHINFO GENERIC or AUTHINFO SASL authentication methods.
6
+
7
+ If you have loaded a database plugin and connected to a database this module will record successful logins and hosts so you can track your access.
8
+
9
+
10
+ ## Vulnerable Application
11
+
12
+ This module has been tested successfully on:
13
+
14
+ * [ SurgeNews] ( http://netwinsite.com/surgenews/ ) on Windows 7 SP 1.
15
+ * [ SurgeNews] ( http://netwinsite.com/surgenews/ ) on Ubuntu Linux.
16
+ * [ INN2] ( https://www.eyrie.org/~eagle/faqs/inn.html ) on Debian Linux.
17
+
18
+
19
+ ## Verification Steps
20
+
21
+ 1 . Do: ` use auxiliary/scanner/nntp/nntp_login `
22
+ 2 . Do: ` set RHOSTS [IP] `
23
+ 3 . Do: ` set RPORT [IP] `
24
+ 4 . Do: ` run `
25
+
26
+
27
+ ## Scenarios
28
+
29
+ ```
30
+ msf auxiliary(nntp_login) > run
31
+
32
+ [+] 172.16.191.166:119 - 172.16.191.166:119 Successful login with: 'asdf' : 'asdf'
33
+ [+] 172.16.191.166:119 - 172.16.191.166:119 Successful login with: 'zxcv' : 'zxcv'
34
+ [+] 172.16.191.166:119 - 172.16.191.166:119 Successful login with: 'test' : 'test'
35
+ [*] Scanned 1 of 2 hosts (50% complete)
36
+ [+] 172.16.191.213:119 - 172.16.191.213:119 Successful login with: 'asdf' : 'asdf'
37
+ [+] 172.16.191.213:119 - 172.16.191.213:119 Successful login with: 'admin' : 'admin'
38
+ [+] 172.16.191.213:119 - 172.16.191.213:119 Successful login with: 'user' : 'pass'
39
+ [*] Scanned 2 of 2 hosts (100% complete)
40
+ [*] Auxiliary module execution completed
41
+ ```
42
+
You can’t perform that action at this time.
0 commit comments