`
caobihole
  • 浏览: 950513 次
文章分类
社区版块
存档分类
最新评论

11-26>pe_xscan 改进 O10-Winsock LSP(Layered Service Provider)项的显示内容

 
阅读更多

近来有不少朋友询问 pe_xscan 的 log 中的项目 与 瑞星卡卡上网安全助手 之间的对应的关系,看来有必要参照 瑞星卡卡上网安全助手 改进一下 pe_xscan 的log的显示内容……

就从 O10 -Winsock LSP 项开始罢。
新的log显示格式为:

O10 - LSP: MSAFD Tcpip [TCP/IP] = C:/WINDOWS/system32/mswsock.dll | 2004-8-17 12:0:0 | Microsoft(R) Windows(R) Operating System | 5.1.2600.2180 | Microsoft Windows Sockets 2.0 Service Provider | (C) Microsoft Corporation. All rights reserved. | 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Microsoft Corporation| ? | mswsock.dll | mswsock.dll
O10 - LSP: MSAFD Tcpip [UDP/IP] = C:/WINDOWS/system32/mswsock.dll | 2004-8-17 12:0:0 | Microsoft(R) Windows(R) Operating System | 5.1.2600.2180 | Microsoft Windows Sockets 2.0 Service Provider | (C) Microsoft Corporation. All rights reserved. | 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Microsoft Corporation| ? | mswsock.dll | mswsock.dll
O10 - LSP: MSAFD Tcpip [RAW/IP] = C:/WINDOWS/system32/mswsock.dll | 2004-8-17 12:0:0 | Microsoft(R) Windows(R) Operating System | 5.1.2600.2180 | Microsoft Windows Sockets 2.0 Service Provider | (C) Microsoft Corporation. All rights reserved. | 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Microsoft Corporation| ? | mswsock.dll | mswsock.dll
O10 - LSP: RSVP UDP Service Provider = C:/WINDOWS/system32/rsvpsp.dll | 2004-8-17 12:0:0 | Microsoft? Windows? Operating System | 5.1.2600.0 | Microsoft Windows Rsvp 1.0 Service Provider | ? Microsoft Corporation. All rights reserved. | 5.1.2600.0 (xpclient.010817-1148) | Microsoft Corporation| ? | rsvpsp.dll | rsvpsp.dll
O10 - LSP: RSVP TCP Service Provider = C:/WINDOWS/system32/rsvpsp.dll | 2004-8-17 12:0:0 | Microsoft? Windows? Operating System | 5.1.2600.0 | Microsoft Windows Rsvp 1.0 Service Provider | ? Microsoft Corporation. All rights reserved. | 5.1.2600.0 (xpclient.010817-1148) | Microsoft Corporation| ? | rsvpsp.dll | rsvpsp.dll
O10 - LSP: MSAFD nwlnkipx [IPX] = C:/WINDOWS/system32/mswsock.dll | 2004-8-17 12:0:0 | Microsoft(R) Windows(R) Operating System | 5.1.2600.2180 | Microsoft Windows Sockets 2.0 Service Provider | (C) Microsoft Corporation. All rights reserved. | 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Microsoft Corporation| ? | mswsock.dll | mswsock.dll
O10 - LSP: MSAFD nwlnkspx [SPX] = C:/WINDOWS/system32/mswsock.dll | 2004-8-17 12:0:0 | Microsoft(R) Windows(R) Operating System | 5.1.2600.2180 | Microsoft Windows Sockets 2.0 Service Provider | (C) Microsoft Corporation. All rights reserved. | 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Microsoft Corporation| ? | mswsock.dll | mswsock.dll
O10 - LSP: MSAFD nwlnkspx [SPX] [Pseudo Stream] = C:/WINDOWS/system32/mswsock.dll | 2004-8-17 12:0:0 | Microsoft(R) Windows(R) Operating System | 5.1.2600.2180 | Microsoft Windows Sockets 2.0 Service Provider | (C) Microsoft Corporation. All rights reserved. | 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Microsoft Corporation| ? | mswsock.dll | mswsock.dll
O10 - LSP: MSAFD nwlnkspx [SPX II] = C:/WINDOWS/system32/mswsock.dll | 2004-8-17 12:0:0 | Microsoft(R) Windows(R) Operating System | 5.1.2600.2180 | Microsoft Windows Sockets 2.0 Service Provider | (C) Microsoft Corporation. All rights reserved. | 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Microsoft Corporation| ? | mswsock.dll | mswsock.dll
O10 - LSP: MSAFD nwlnkspx [SPX II] [Pseudo Stream] = C:/WINDOWS/system32/mswsock.dll | 2004-8-17 12:0:0 | Microsoft(R) Windows(R) Operating System | 5.1.2600.2180 | Microsoft Windows Sockets 2.0 Service Provider | (C) Microsoft Corporation. All rights reserved. | 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Microsoft Corporation| ? | mswsock.dll | mswsock.dll
O10 - LSP: MSAFD NetBIOS [/Device/NwlnkNb] SEQPACKET 3 = C:/WINDOWS/system32/mswsock.dll | 2004-8-17 12:0:0 | Microsoft(R) Windows(R) Operating System | 5.1.2600.2180 | Microsoft Windows Sockets 2.0 Service Provider | (C) Microsoft Corporation. All rights reserved. | 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Microsoft Corporation| ? | mswsock.dll | mswsock.dll
O10 - LSP: MSAFD NetBIOS [/Device/NwlnkNb] DATAGRAM 3 = C:/WINDOWS/system32/mswsock.dll | 2004-8-17 12:0:0 | Microsoft(R) Windows(R) Operating System | 5.1.2600.2180 | Microsoft Windows Sockets 2.0 Service Provider | (C) Microsoft Corporation. All rights reserved. | 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Microsoft Corporation| ? | mswsock.dll | mswsock.dll
O10 - LSP: MSAFD NetBIOS [/Device/NetBT_Tcpip_{34EFE989-37C5-4CB3-8AA1-0BC172DECF23}] SEQPACKET 0 = C:/WINDOWS/system32/mswsock.dll | 2004-8-17 12:0:0 | Microsoft(R) Windows(R) Operating System | 5.1.2600.2180 | Microsoft Windows Sockets 2.0 Service Provider | (C) Microsoft Corporation. All rights reserved. | 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Microsoft Corporation| ? | mswsock.dll | mswsock.dll
O10 - LSP: MSAFD NetBIOS [/Device/NetBT_Tcpip_{34EFE989-37C5-4CB3-8AA1-0BC172DECF23}] DATAGRAM 0 = C:/WINDOWS/system32/mswsock.dll | 2004-8-17 12:0:0 | Microsoft(R) Windows(R) Operating System | 5.1.2600.2180 | Microsoft Windows Sockets 2.0 Service Provider | (C) Microsoft Corporation. All rights reserved. | 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Microsoft Corporation| ? | mswsock.dll | mswsock.dll
O10 - LSP: MSAFD NetBIOS [/Device/NetBT_Tcpip_{A52130BD-7487-4C81-A0BD-22EB3FF060DE}] SEQPACKET 1 = C:/WINDOWS/system32/mswsock.dll | 2004-8-17 12:0:0 | Microsoft(R) Windows(R) Operating System | 5.1.2600.2180 | Microsoft Windows Sockets 2.0 Service Provider | (C) Microsoft Corporation. All rights reserved. | 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Microsoft Corporation| ? | mswsock.dll | mswsock.dll
O10 - LSP: MSAFD NetBIOS [/Device/NetBT_Tcpip_{A52130BD-7487-4C81-A0BD-22EB3FF060DE}] DATAGRAM 1 = C:/WINDOWS/system32/mswsock.dll | 2004-8-17 12:0:0 | Microsoft(R) Windows(R) Operating System | 5.1.2600.2180 | Microsoft Windows Sockets 2.0 Service Provider | (C) Microsoft Corporation. All rights reserved. | 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Microsoft Corporation| ? | mswsock.dll | mswsock.dll
O10 - LSP: MSAFD NetBIOS [/Device/NetBT_Tcpip_{AD7B3780-5095-47A2-9423-3FECD329A0A8}] SEQPACKET 2 = C:/WINDOWS/system32/mswsock.dll | 2004-8-17 12:0:0 | Microsoft(R) Windows(R) Operating System | 5.1.2600.2180 | Microsoft Windows Sockets 2.0 Service Provider | (C) Microsoft Corporation. All rights reserved. | 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Microsoft Corporation| ? | mswsock.dll | mswsock.dll
O10 - LSP: MSAFD NetBIOS [/Device/NetBT_Tcpip_{AD7B3780-5095-47A2-9423-3FECD329A0A8}] DATAGRAM 2 = C:/WINDOWS/system32/mswsock.dll | 2004-8-17 12:0:0 | Microsoft(R) Windows(R) Operating System | 5.1.2600.2180 | Microsoft Windows Sockets 2.0 Service Provider | (C) Microsoft Corporation. All rights reserved. | 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Microsoft Corporation| ? | mswsock.dll | mswsock.dll

分享到:
评论

相关推荐

    xscan

    -t <并发线程数量[,并发主机数量]>: 指定最大并发线程数量和并发主机数量, 默认数量为100,10 * cgi及iis参数中"编码方案"含义: 1.用"HEAD"替换"GET" 2.用"POST"替换"GET" 3.用"GET / HTTP/1.0\r\nHeader:" ...

    MASM32编程通过WMI获取Windows计划任务(源代码+EXE下载)

    上回用MASM32编程使用了Windows系统提供的API函数:NetScheduleJobEnum()来枚举Windows计划任务(详见 MASM32编程枚举Windows计划任务,... 所以 pe_xscan 在扫描计划任务时使用的是另外一种方法:-D

    xscan工具-到期时间7.1

    - 多网址扫描 ./xscan -url-file 1.txt 细节 - similarity 相似度阈值灵活运用,若发现网站基本一样,相似度可以调高0.98~0.99,其他默认0.95就很高了 - 想要了解返回包细节,可将response设置为True - 扫描完毕后...

    网安实验-xscan扫描

    请在实验报告中叙述本软件的基本功用,并将上述问题操作步骤、结果写出来。 (需要用相关截图证明)。实验报告要打印上交。XSCAN软件所自动形成的报告不 要打印,直接与实验报告打包压缩,发送到FTP。

    X-Scan

    命令格式: xscan -host <起始IP>[-<终止IP>] <检测项目> [其他选项]<br> xscan -file <主机列表文件名> <检测项目> [其他选项]<br><br> 其中<检测项目> 含义如下:<br> -active : 检测目标主机是否存活<br> -os : ...

    1.xscan.zip

    xscan安装包

    X-Scan v3.1

    命令格式: xscan -host <起始IP>[-<终止IP>] <检测项目> [其他选项] xscan -file <主机列表文件名> <检测项目> [其他选项] 其中<检测项目> 含义如下: -active : 检测目标主机是否存活 -os : 检测远程操作系统...

    网络安全实验 xscan扫描

    网络安全实验 xscan扫描安全漏洞 整份实验报告 仅作参考

    bat_do 0.0.0003 bata4

    当我们用HijackThis、pe_xscan等系统分析软件发现可疑文件,或者发现病毒文件时,要把这些位于不同文件夹的可疑文件和病毒文件分别设置密码压缩打包,即使是写一个BAT文件也比较麻烦!现在好了,用“文件批处理器 / ...

    xscan3.3扫描器

    X-Scan是国内最著名的综合扫描器之一,是不需要安装的绿色软件、界面支持中文和英文两种语言、包括图形界面和命令行方式。主要由国内著名的民间黑客组织“安全焦点”完成,从2000年的内部测试版X-Scan V0.2到目前的...

    Xscan-汉语版扫描更容易

    可以详细的扫描计算机,时间消耗较长,同时也和网速有关

    XSCAN

    扫描工具,非常好 哈哈 不要错过

    XScan扫描器

    xscan扫描工具。很好用。使用与网络安全及黑客技术爱好者。

    Xscan扫描工具,自解压版

    采用多线程方式对指定IP地址段(或单机)进行安全漏洞检测,支持插件功能,提供了图形界面和命令行两种操作方式,扫描内容包括:远程操作系统类型及版本,标准端口状态及端口BANNER信息,CGI漏洞,IIS漏洞,RPC漏洞,...

    x-SCAN -V3.3-CN.

    感谢wlj提供大量改进建议及相关资料,感谢安全焦点全体成员和coolc、killer等朋友协助测试。 X-Scan v3.1 -- 发布日期:03/25/2004,修改“存活主机”插件,加入2.3版本中SNMP、NETBIOS插件,优化主程序及NASL库...

    Xscan进行系统弱口令的检测

    Xscan进行系统弱口令的检测,安全保障你的电脑

    扫描 xscan

    扫描 xscan

    xscan 特别好用的漏洞扫描

    采用多线程方式对指定IP地址段(或单机)进行安全漏洞检测,支持插件功能,提供了图形界面和命令行两种操作方式,扫描内容包括:远程操作系统类型及版本,标准端口状态及端口BANNER信息,SNMP信息,CGI漏洞,IIS漏洞...

    Xscan信息探测

    实验要求: [实验目的] ◆ 掌握漏洞扫描这种信息探测技术的...[实验内容] ◆ Netbios空会话漏洞扫描。 ◆ IIS和CGI漏洞扫描。 ◆ 弱口令漏洞扫描。 ◆ 查看漏洞扫描报告。 ◆ 分析各种漏洞的补救措施。 实验指导:

    xscan扫描器.zip

    xscan扫描器

Global site tag (gtag.js) - Google Analytics