3260 - Pentesting ISCSI
Basic Information
In computing, iSCSI is an acronym for Internet Small Computer Systems Interface, an Internet Protocol (IP)-based storage networking standard for linking data storage facilities. It provides block-level access to storage devices by carrying SCSI commands over a TCP/IP network. iSCSI is used to facilitate data transfers over intranets and to manage storage over long distances. It can be used to transmit data over local area networks (LANs), wide area networks (WANs), or the Internet and can enable location-independent data storage and retrieval.
The protocol allows clients (called initiators) to send SCSI commands (CDBs) to storage devices (targets) on remote servers. It is a storage area network (SAN) protocol, allowing organizations to consolidate storage into storage arrays while providing clients (such as database and web servers) with the illusion of locally attached SCSI disks. It mainly competes with Fibre Channel, but unlike traditional Fibre Channel which usually requires dedicated cabling, iSCSI can be run over long distances using existing network infrastructure.
Default port: 3260
PORT STATE SERVICE VERSION
3260/tcp open iscsi?Enumeration
nmap -sV --script=iscsi-info -p 3260 192.168.xx.xxThis script will indicate if authentication is required.
Manual enumeration
First of all you need to discover the targets name behind the IP:
Note that it will show the IP and port of the interfaces where you can reach those targets. It can even show internal IPs or different IPs from the one you used.
Then you catch the 2nd part of the printed string of each line (iqn.1992-05.com.emc:fl1001433000190000-3-vnxe from the first line) and try to login:
Then, you can logout using –logout
We can find more information about it by just using without any --login/--logout parameter
There is a script to automate basic subnet enumeration process available at iscsiadm****
Shodan
port:3260 AuthMethod
References
最后更新于
这有帮助吗？