Nmap预测结果

Question

$ ./nmap-banners -sV -vvvvv localhost |grep Banners

产出如下：

Banner on 127.0.0.1:22/tcp matches ssh: SSH-2.0-OpenSSH_4.3p2 Debian-5ubuntu1.

Banner on 127.0.0.1:25/tcp matches smtp: 220 localhost ESMTP Exim 4.62 Wed, 14 Nov 2007 21:06:10

问题是如何使用grep或awk只打印带有SSH-2.0-OpenSSH_4.3p2 Debian-5ubuntu1的IP地址。

Answer 1

如果您正在寻找同时包含字符串Banner和SSH-2.0-OpenSSH_4.3p2 Debian-5ubuntu1的行，那么您也可以使用grep和SSH-2.0-OpenSSH_4.3p2 Debian-5ubuntu1。

带剪切的Grep版本

nmap-banners -sV -vvvvv localhost|
grep 'Banner.*SSH-2.0-OpenSSH_4.3p2 Debian-5ubuntu1'|
cut -d" " -f3|
cut -d":" -f1 

Answer 2

$ cat file
Banner on 127.0.0.1:22/tcp matches ssh: SSH-2.0-OpenSSH_4.3p2 Debian-5ubuntu1.

Banner on 127.0.0.1:25/tcp matches smtp: 220 localhost ESMTP Exim 4.62 Wed, 14 Nov 2007 21:06:10

$ awk -F'[ :]' '/SSH-2.0-OpenSSH_4.3p2/{print $3}' file
127.0.0.1