冰河木马详解.docx

1、冰河木马详解路由器命令router用户模式1：进入特权模式enablerouterenablerouter#2：进入全局配置模式configureterminalrouterenablerouter#configureterminalrouter(conf)#3：交换机命名hostnameroutera以routerA为例routerenablerouter#configureterminalrouter(conf)#hostnamerouterAroutera(conf)#4：配置使能口令enablepasswordcisco以cisco为例routerenablerouter#config

2、ureterminalrouter(conf)#hostnamerouterArouterA(conf)#enablepasswordcisco5：配置使能密码enablesecretciscolab以cicsolab为例routerenablerouter#configureterminalrouter(conf)#hostnamerouterArouterA(conf)#enablesecretciscolab6：进入路由器某一端口interfacefastehernet0/17以17端口为例routerenablerouter#configureterminalrouter(conf)#

3、hostnamerouterArouterA(conf)#interfacefastehernet0/17routerA(conf-if)#进入路由器的某一子端口interfacefastethernet0/17.1以17端口的1子端口为例routerenablerouter#configureterminalrouter(conf)#hostnamerouterArouterA(conf)#interfacefastehernet0/17.17：设置端口ip地址信息routerenablerouter#configureterminalrouter(conf)#hostnamerouterA

4、routerA(conf)#interfacefastehernet0/17以17端口为例routerA(conf-if)#ipaddress192.168.1.1255.255.255.0配置交换机端口ip和子网掩码routerA(conf-if)#noshut是配置处于运行中routerA(conf-if)#exit8：查看命令showrouterenablerouter#showversion察看系统中的所有版本信息showinterfacevlan1查看交换机有关ip协议的配置信息showrunning-configure查看交换机当前起作用的配置信息showinterfacefast

5、ethernet0/1察看交换机1接口具体配置和统计信息showmac-address-table查看mac地址表showmac-address-tableaging-time查看mac地址表自动老化时间showcontrollersserial+编号查看串口类型showiprouter查看路由器的路由表9：cdp相关命令routerenablerouter#showcdp查看设备的cdp全局配置信息showcdpinterfacefastethernet0/17查看17端口的cdp配置信息showcdptraffic查看有关cdp包的统计信息showcdpnerghbors列出与设备相连的c

6、isco设备10：csico2600的密码恢复重新启动路由器，在启动过程中按下win+break键，使路由器进入rommonitor在提示符下输入命令修改配置寄存器的值，然后重新启动路由器remmon1confreg0x2142remmon2reset重新启动路由器后进入setup模式，选择“no”，退回到exec模式，此时路由器原有的配置仍然保存在startup-config中，为使路由器恢复密码后配置不变把startup-config中配置保存到running-config中，然后重新设置enable密码，并把配置寄存器改回0x2102：routerenablerouter#copysta

7、rtup-configrunning-configrouter#configureterminalrouter(conf)#enablepasswordciscorouter(conf)#config-register0x2102保存当前配置到startup-config,重新启动路由器。router#copyrunning-configstartup-configrouter#reload11：路由器telnet远程登录设置：routerenrouter#configureterminalrouter(conf)#hostnamerouterArouterA(conf)#enablepass

8、wordcisco以cisco为特权模式密码routerA(conf)#interfacefastethernet0/1以17端口为telnet远程登录端口routerA(conf-if)#ipaddress192.168.1.1255.255.255.0routerA(conf-if)#noshutrouterA(conf-if)#exitrouterA(conf)linevty04设置0-4个用户可以telnet远程登陆routerA(conf-line)#loginrouterA(conf-line)#passwordedge以edge为远程登录的用户密码主机设置：ip192.168.1

9、.2主机的ip必须和交换机端口的地址在同一网络段netmask255.255.255.0gate-way192.168.1.1网关地址是交换机端口地址运行：telnet192.168.1.1进入telnet远程登录界面password:edgerouteraenpassword:ciscoroutera#12：配置路由器的标识banner$在全局配置的模式下利用“banner”命令可以配置路由器的提示信息，所有连接到路由器的终端都会收到。routerenrouter#configureterminalrouter(conf)#hostnamerouterArouterA(conf)#banne

10、rmotd$Thisisaptechcompanyrouter!Pleasedontchangetheconfigurationwithoutpermission!$13：配置接口标识description接口标识用于区分路由器的各个接口。routerenrouter#configureterminalrouter(conf)#hostnamerouterArouterA(conf)#interfacefastethernet0/1以0/1接口为例routerA(conf-if)#descriptionthisisafastEthernetportusedtoconnectingthecomp

11、anysintranet!14：配置超时超时适用于设置在多长时间没有对console进行配置，自动返回exec会话时间。默认为10分钟。routerenrouter#configureterminalrouter(conf)#hostnamerouterArouterA(conf)#lineconsole0routerA(conf-if)#exec-timeout00第一个“0”代表分钟，第二个“0”代表秒15：配置串口参数两台路由器通过串口连接需要一个做为DTE，一个做为DCE。DCE设备要向DTE设备提供时钟频率和带宽。DCE配置：routerenrouter#configuretermi

12、nalrouter(conf)#hostnamerouterArouterA(conf)#interfaceserial0/0routerA(conf_if)#clockrate64000提供时钟频率为64000routerA(conf_if)#bandwidth64提供带宽为64DTE配置：路由器串口配置ip地址routerenrouter#configureterminalrouter(conf)#hostnamerouterBrouterB(conf)#interfaceserial0/0routerB(conf_if)#ipaddress192.168.1.1255.255.255.0

13、16：静态路由的配置配置路由器A的主机名和接口参数routerenablerouter#configureterminalrouter(conf)#hostnamerouterArouterA(conf)#interfacefastethernet0/1路由器A的1端口为两路由器的连接端口routerA(conf-if)#ipaddress192.168.2.1255.255.255.0routerA(conf-if)#noshutdownrouterA(conf-if)#exitrouterA(conf)#interfacefastethernet0/0路由器A的0端口为与主机的连接端口ro

14、uterA(conf-if)#ipaddress192.168.1.2255.255.255.0routerA(conf-if)#noshutdown主机A的ip地址为192.168.1.1255.255.255.0192.168.1.2配置路由器B的主机名和接口参数routerenablerouter#configureterminalrouter(conf)#hostnamerouterBrouterB(conf)#interfacefastethernet0/0路由器B的0端口为两路由器的连接端口routerB(conf-if)#ipaddress192.168.2.2255.255.2

15、55.0routerB(conf-if)#noshutdownrouterB(conf-if)#exitrouterB(conf)#interfacefastethernet0/1路由器B的1端口为与主机的连接端口routerB(conf-if)#ipaddress192.168.3.1255.255.255.0主机B的ip地址为192.168.3.2255.255.255.0192.168.3.1配置路由器A的静态路由表routerA(conf)#iprouter192.168.3.0255.255.255.0192.168.2.2配置路由器B的静态路由表routerA(conf)#ipro

16、uter192.168.1.0255.255.255.0192.168.2.1在routerA和routerB上配置默认路由routerA(conf)#iproute0.0.0.00.0.0.0192.168.2.2routerA(conf)#ipclasslessrouterB(conf)#iproute0.0.0.00.0.0.0192.168.2.1routerB(conf)#ipclassless在routerA和routerB上配置动态路由(RIP)routerA(conf)#routerriprouterA(conf)#network192.168.1.0routerA(conf)

17、#network192.168.2.0routerB(conf)#routerriprouterB(conf)#network192.168.2.0routerB(conf)#network192.168.3.0常见端口列表 TCP端口7 = 回显9 = 丢弃11 = 在线用户13 = 时间服务15 = 网络状态17 = 每日引用18 = 消息发送19 = 字符发生器20 = ftp数据21 = 文件传输22 = SSH端口23 = 远程终端25 = 发送邮件31 = Masters Paradise木马37 = 时间39 = 资源定位协议41 = DeepThroat木马42 = WINS

18、主机名服务43 = WhoIs服务58 = DMSetup木马59 = 个人文件服务63 = WHOIS端口69 = TFTP服务70 = 信息检索79 = 查询在线用户80 = WEB网页88 = Kerberros5认证101 = 主机名102 = ISO107 = 远程登录终端109 = pop2邮件110 = pop3邮件111 = SUN远程控制113 = 身份验证117 = UUPC119 = nntp新闻组121 = JammerKillah木马135 = 本地服务138 = 隐形大盗139 = 文件共享143 = IMAP4邮件146 = FC-Infector木马158 =

19、邮件服务170 = 打印服务179 = BGP194 = IRC PORT213 = TCP OVER IPX220 = IMAP3邮件389 = 目录服务406 = IMSP PORT411 = DC+421 = TCP Wrappers443 = 安全WEB访问445 = SMB(交换服务器消息块)456 = Hackers Paradise木马464 = Kerberros认证512 = 远程执行或卫星通讯513 = 远程登录与查询514 = SHELL/系统日志515 = 打印服务517 = Talk518 = 网络聊天520 = EFS525 = 时间服务526 = 日期更新530

20、= RPC531 = RASmin木马532 = 新闻阅读533 = 紧急广播540 = UUCP543 = Kerberos登录544 = 远程shell550 = who554 = RTSP555 = Ini-Killer木马556 = 远程文件系统560 = 远程监控561 = 监控636 = 安全目录服务666 = Attack FTP木马749 = Kerberos管理750 = Kerberos V4911 = Dark Shadow木马989 = FTPS990 = FTPS992 = TelnetS993 = IMAPS999 = DeepThroat木马1001 = Sile

21、ncer木马1010 = Doly木马1011 = Doly木马1012 = Doly木马1015 = Doly木马1024 = NetSpy木马1042 = Bla木马1045 = RASmin木马1080 = SOCKS代理1090 = Extreme木马1095 = Rat木马1097 = Rat木马1098 = Rat木马1099 = Rat木马1109 = Kerberos POP1167 = 私用电话1170 = Psyber Stream Server1214 = KAZAA下载1234 = Ultors/恶鹰木马1243 = Backdoor/SubSeven木马1245 =

22、VooDoo Doll木马1349 = BO DLL木马1352 = Lotus Notes1433 = SQL SERVER1492 = FTP99CMP木马1494 = CITRIX1503 = Netmeeting1512 = WINS解析1524 = IngresLock后门1600 = Shivka-Burka木马1630 = 网易泡泡1701 = L2TP1720 = H3231723 = PPTP(虚拟专用网)1731 = Netmeeting1755 = 流媒体服务1807 = SpySender木马1812 = Radius认证1813 = Radius评估1863 = MS

23、N聊天1981 = ShockRave木马1999 = Backdoor木马2000 = TransScout-Remote-Explorer木马2001 = TransScout木马2002 = TransScout/恶鹰木马2003 = TransScout木马2004 = TransScout木马2005 = TransScout木马2023 = Ripper木马2049 = NFS服务器2053 = KNETD2115 = Bugs木马2140 = Deep Throat木马2401 = CVS2535 = 恶鹰2565 = Striker木马2583 = WinCrash木马2773

24、 = Backdoor/SubSeven木马2774 = SubSeven木马2801 = Phineas Phucker木马2869 = UPNP(通用即插即用)3024 = WinCrash木马3050 = InterBase3128 = squid代理3129 = Masters Paradise木马3150 = DeepThroat木马3306 = MYSQL3389 = 远程桌面3544 = MSN语音3545 = MSN语音3546 = MSN语音3547 = MSN语音3548 = MSN语音3549 = MSN语音3550 = MSN语音3551 = MSN语音3552 = M

25、SN语音3553 = MSN语音3554 = MSN语音3555 = MSN语音3556 = MSN语音3557 = MSN语音3558 = MSN语音3559 = MSN语音3560 = MSN语音3561 = MSN语音3562 = MSN语音3563 = MSN语音3564 = MSN语音3565 = MSN语音3566 = MSN语音3567 = MSN语音3568 = MSN语音3569 = MSN语音3570 = MSN语音3571 = MSN语音3572 = MSN语音3573 = MSN语音3574 = MSN语音3575 = MSN语音3576 = MSN语音3577 = M

26、SN语音3578 = MSN语音3579 = MSN语音3700 = Portal of Doom木马4080 = WebAdmin4081 = WebAdmin+SSL4092 = WinCrash木马4267 = SubSeven木马4443 = AOL MSN4567 = File Nail木马4590 = ICQ木马4661 = 电驴下载4662 = 电驴下载4663 = 电驴下载4664 = 电驴下载4665 = 电驴下载4666 = 电驴下载4899 = Radmin木马5000 = Sokets-de木马5000 = UPnP(通用即插即用)5001 = Back Door Se

27、tup木马5060 = SIP5168 = 高波蠕虫5190 = AOL MSN5321 = Firehotcker木马5333 = NetMonitor木马5400 = Blade Runner木马5401 = Blade Runner木马5402 = Blade Runner木马5550 = JAPAN xtcp木马5554 = 假警察蠕虫5555 = ServeMe木马5556 = BO Facil木马5557 = BO Facil木马5569 = Robo-Hack木马5631 = pcAnywhere5632 = pcAnywhere5742 = WinCrash木马5800 = VNC端口5801 = VNC端口5890 = VNC端口5891 = VNC端口5892 = VNC端口6267 = 广外女生6400 = The Thing木马6665 = IRC6666 = IRC SERVER PORT6667 = 小邮差6668 = IRC6669 = IRC6670 = DeepThroat木马6711 = SubSeven木马