Skip to content

Examples

Jump to bottom
Zach Grace edited this page Sep 30, 2017 · 3 revisions

Basic Scan

./changeme.py 192.168.59.3

Basic Scan

Target Specification

Targets can be specified in a number of ways. Below are examples of how targets can be fed into changeme.

  • host/IP - ./changeme.py 192.168.59.3
  • proto://host - ./changeme.py mongodb://192.168.59.3
  • subnet - ./changeme.py 192.168.59.0/24
  • host list (may contain any of the above) - ./changeme.py hosts.txt
  • nmap xml - ./changeme.py subnet.xml

proto://host

Proto

Overriding Ports

Normally when you specify a target, only the default port (as specified in the yaml file) is checked. For example, when scanning for Apache Tomcat, only port 8080 is checked. The --portoverride flag can be used to scan alternative ports.

./changeme.py -v -n tomcat --portoverride 192.168.59.103:8180

--portoverride

Proxy

changeme has the ability to forward it's http traffic through a proxy by specifying the --proxy option.

./changeme.py --proxy http://192.168.59.3:8080 -v 192.168.59.3

Scan Through Proxy

Multiple protocols

By default changeme only scans the http protocol. You can override this by using the --protocol option which takes in a comma separated list.

./changeme.py -v --protocols ssh,ssh_key 192.168.1.47

Scan Multiple Protocols

Clone this wiki locally