2019-11-19 19:56:30 -07:00
## Vulnerable Application
2019-11-23 06:07:58 -07:00
This module attempts to authenticate against a DB2 instance using username and password combinations indicated by the `USER_FILE` , `PASS_FILE` , and `USERPASS_FILE` options.
2019-11-19 19:56:30 -07:00
2019-11-23 12:59:51 -05:00
More information can be found on the [Rapid7 Vulnerability & Exploit Database page ](https://www.rapid7.com/db/modules/auxiliary/scanner/db2/db2_auth )
2019-11-19 19:56:30 -07:00
## Verification Steps
1. Start msfconsole
2. Do: `use auxiliary/scanner/db2/db2_auth`
2019-11-22 20:40:52 -07:00
3. Do: `set RHOSTS [ip]`
2019-11-19 19:56:30 -07:00
4. Do: `run`
## Scenarios
2019-11-22 21:41:06 -07:00
### A run on Kali Linux 2019.3 and DB2 11.5.0.0a
2019-11-22 20:40:52 -07:00
2019-11-19 19:56:30 -07:00
```
msf > use auxiliary/scanner/db2/db2_auth
msf auxiliary/scanner/db2/db2_auth) > show options
msf auxiliary/scanner/db2/db2_auth) > set USERNAME db2inst1
msf auxiliary/scanner/db2/db2_auth) > set PASSWORD db2pass
msf auxiliary(scanner/db2/db2_auth) > set DATABASE testdb
msf auxiliary/scanner/db2/db2_auth) > set RHOST 172.17.0.2
msf auxiliary/scanner/db2/db2_auth) > run
[-] 172.17.0.2:50000 - 172.17.0.2:50000 - LOGIN FAILED: db2inst1:db2inst1@testdb (Incorrect: )
[-] 172.17.0.2:50000 - 172.17.0.2:50000 - LOGIN FAILED: db2inst1:dasusr1@testdb (Incorrect: )
[-] 172.17.0.2:50000 - 172.17.0.2:50000 - LOGIN FAILED: db2inst1:db2fenc1@testdb (Incorrect: )
2019-11-19 20:17:30 -07:00
[*] 172.17.0.2:50000 - Login Successful: db2inst1:db2pass
2019-11-19 19:56:30 -07:00
[*] 172.17.0.2:50000 - Scanned 1 of 1 hosts (100% complete)
[*] Auxiliary module execution completed
` ``
