Kenneth LaCroix
28 lines
981 B
Markdown
28 lines
981 B
Markdown
## Vulnerable Application
|
|
|
|
This module queries a DB2 instance information.
|
|
|
|
More information can be found on the [Rapid7 Vulnerability & Exploit Database page](https://www.rapid7.com/db/modules/auxiliary/scanner/db2/db2_version)
|
|
|
|
## Verification Steps
|
|
|
|
1. Start msfconsole
|
|
2. Do: `use auxiliary/scanner/db2/db2_version`
|
|
3. Do: `set RHOSTS [ip]`
|
|
4. Do: `run`
|
|
|
|
## Scenarios
|
|
|
|
### A run on Kali Linux 2019.3 and DB2 11.5.0.0a
|
|
|
|
```
|
|
msf > use auxiliary/scanner/db2/db2_version
|
|
msf auxiliary(scanner/db2/db2_version) > show options
|
|
msf auxiliary(scanner/db2/db2_version) > set DATABASE testdb
|
|
msf auxiliary(scanner/db2/db2_version) > set RHOSTS 172.17.0.2
|
|
msf auxiliary(scanner/db2/db2_version) > run
|
|
[+] 172.17.0.2:50000 - 172.17.0.2:50000 DB2 - Platform: QDB2/LINUXX8664, Version: SQL11050, Instance: db2inst1, Plain-Authentication: OK
|
|
[*] 172.17.0.2:50000 - Scanned 1 of 1 hosts (100% complete)
|
|
[*] Auxiliary module execution completed
|
|
```
|