eth

scripts.sh

/** gerais **/
// Request
// curl -X GET --url http://192.168.0.21:3000/
// curl -X -I --url http://192.168.0.21:80/ -> SEND A HEAD REQUEST TO GET INFO ABOUT WHAT IS RUNNING ON PORT X


/** Nmap
 https://nmap.org/book/
*/
// nmap -sn -n 192.168.0.1/24 | grep 192 | cut -d ' ' -f 5 > ips.txt
// nmap -iL ips.txt
// sudo nmap -p0 -sW 192.168.0.1/24
// sudo nmap -p0 -O 192.168.0.1/24
// nmap --script [scriptname] --script-args exploit.cmd=[commnand] 192.168.0.47
// ls /usr/share/nmap/scripts/ | grep '' // find scripts

/** 
shodan
https://cli.shodan.io/
**/
// net 192.168.0.1

// busca por webservers IIS
// shodan search --fields ip_str,port,org,hostnames microsoft iis 6.0


/** 
netcat
**/
// verifica 
nc 192.168.0.21 3000  + http verb with /