{"id":30258,"date":"2019-10-31T21:34:32","date_gmt":"2019-10-31T18:34:32","guid":{"rendered":"https:\/\/prohoster.info\/blog\/netbios-v-rukah-hakera\/"},"modified":"2019-10-31T21:34:32","modified_gmt":"2019-10-31T18:34:32","slug":"netbios-v-rukah-hakera","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/netbios-v-rukah-hakera","title":{"rendered":"NetBIOS v rukou hackera","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>V tomto \u010dl\u00e1nku se bude stru\u010dn\u011b hovo\u0159it o tom, co n\u00e1m m\u016f\u017ee \u0159\u00edct tak oby\u010dejn\u00e1 v\u011bc jako <i>NetBIOS<\/i>. Jak\u00e9 informace m\u016f\u017ee poskytnout potenci\u00e1ln\u00edmu \u00fato\u010dn\u00edkovi\/pentestero.<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<p>P\u0159edveden\u00e1 oblast pou\u017eit\u00ed rozv\u011bd\u010d\u00edch technik se vztahuje na intern\u00ed, tedy izolovan\u00e9 a zven\u010d\u00ed nedostupn\u00e9 s\u00edt\u011b. Takov\u00e9 s\u00edt\u011b m\u00e1 jako pravidlo jak\u00e1koli i ta nejmen\u0161\u00ed firma.<\/p>\n<p>S\u00e1m o sob\u011b <i>NetBIOS<\/i> se zpravidla pou\u017e\u00edv\u00e1 k z\u00edsk\u00e1n\u00ed s\u00ed\u0165ov\u00e9ho jm\u00e9na. A to sta\u010d\u00ed k tomu, aby se dalo ud\u011blat minim\u00e1ln\u011b 4 v\u011bci.<\/p>\n<p><b>Objevov\u00e1n\u00ed hostitel\u016f<\/b><br \/>\nD\u00edky tomu, \u017ee NetBIOS m\u016f\u017ee pou\u017e\u00edvat UDP jako transport, rychlost jeho pr\u00e1ce umo\u017e\u0148uje objevovat hostitele ve velmi velk\u00fdch s\u00edt\u00edch. Nap\u0159\u00edklad n\u00e1stroj <i>nbtscan<\/i>, sou\u010d\u00e1st stejnojmenn\u00e9ho bal\u00ed\u010dku, m\u016f\u017ee b\u011bhem 2 sekund (m\u016f\u017ee polo\u017eit s\u00ed\u0165) rozresolverovat adresy s\u00edt\u011b typu 192.168.0.0\/16, zat\u00edmco tradi\u010dn\u00ed TCP skenov\u00e1n\u00ed zabere des\u00edtky minut. Tato vlastnost m\u016f\u017ee b\u00fdt pou\u017eita jako technika objevov\u00e1n\u00ed hostitel\u016f (host sweep) ve velmi velk\u00fdch s\u00edt\u00edch, o kter\u00fdch nen\u00ed zn\u00e1mo nic, je\u0161t\u011b ne\u017e se spust\u00ed nmap. A\u010dkoli v\u00fdsledek nezaru\u010duje 100% odhalen\u00ed, proto\u017ee odpov\u00ed p\u0159ev\u00e1\u017en\u011b windows hostitel\u00e9 a to ne v\u0161ichni, p\u0159esto umo\u017e\u0148uje zjistit, v jak\u00fdch p\u0159ibli\u017en\u011b rozsaz\u00edch se nach\u00e1zej\u00ed \u017eiv\u00ed hostitel\u00e9.<\/p>\n<p><b>Identifikace hostitel\u016f<\/b><br \/>\nPou\u017e\u00edv\u00e1n\u00edm v\u00fdsledk\u016f z\u00edskan\u00fdch z ip adres:<\/p>\n<p><img decoding=\"async\" alt=\"NetBIOS v rukou hackera\" src=\"\/wp-content\/uploads\/2019\/03\/c56ad0590b7023bf3fb192f46b8e23c8.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nje mo\u017en\u00e9 vid\u011bt: krom\u011b toho, \u017ee jm\u00e9no odhaluje vlastn\u00edka pracovn\u00ed stanice (i kdy\u017e se to v n\u011bkter\u00fdch p\u0159\u00edpadech v\u016fbec ned\u011bje), jedna z adres se jasn\u011b vymyk\u00e1 ostatn\u00edm. M\u016f\u017eeme vid\u011bt, \u017ee bylo z\u00edsk\u00e1no jm\u00e9no <i>KALI<\/i>. Takov\u00e9 chov\u00e1n\u00ed je typick\u00e9, zpravidla, pro <i>unix<\/i>-implementace <i>SMB\/NetBIOS<\/i> v r\u00e1mci softwarov\u00e9ho bal\u00ed\u010dku <i>samba<\/i> nebo velmi star\u00fdch <i>Windows 2000<\/i>. <br \/>\nZ\u00edsk\u00e1n\u00ed jm\u00e9na <i>KALI<\/i>, zat\u00edmco na jin\u00fdch hostitel\u00edch to &lt;<i>unknown<\/i>&gt; sv\u011bd\u010d\u00ed o p\u0159\u00edtomnosti takzvan\u00e9 <i>null-session<\/i>. P\u0159i v\u00fdchoz\u00edch nastaven\u00edch <i>SMB<\/i>-server\u016f na <i>linux<\/i> jsou na ni n\u00e1chyln\u00e9. <i>Null-session<\/i> pouze umo\u017e\u0148uje naprosto anonymn\u011b (jak vidno, \u017e\u00e1dn\u00e1 hesla jsme nezad\u00e1vali, jak je vid\u011bt na screenshotu) z\u00edskat dostate\u010dn\u00e9 mno\u017estv\u00ed dal\u0161\u00edch informac\u00ed, jako jsou m\u00edstn\u00ed z\u00e1sady hesel, seznam m\u00edstn\u00edch u\u017eivatel\u016f, skupin a seznam sd\u00edlen\u00fdch zdroj\u016f (share):<\/p>\n<p><img decoding=\"async\" alt=\"NetBIOS v rukou hackera\" src=\"\/wp-content\/uploads\/2019\/03\/29d9c5e9f760d95166abe62a5e8aef4d.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n\u010casto na <i>linux SMB<\/i>-servery mohou m\u00edt ve\u0159ejn\u011b dostupn\u00e9 sd\u00edlen\u00ed, ne jen pro \u010dten\u00ed, ale dokonce i pro z\u00e1pis. P\u0159\u00edtomnost obou typ\u016f nese r\u016fzn\u00e9 hrozby, jejich\u017e vyu\u017eit\u00ed p\u0159esahuje r\u00e1mec tohoto \u010dl\u00e1nku.<\/p>\n<p><i>NetBIOS<\/i> tak\u00e9 umo\u017e\u0148uje z\u00edskat n\u00e1zvy v\u0161ech typ\u016f, kter\u00e9 pracovn\u00ed stanice uchov\u00e1v\u00e1:<\/p>\n<p><img decoding=\"async\" alt=\"NetBIOS v rukou hackera\" src=\"\/wp-content\/uploads\/2019\/03\/0d0f2d46683ff0a829668fafc9dc99d8.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nv tomto p\u0159\u00edpad\u011b to umo\u017e\u0148uje zjistit, \u017ee hostitel je tak\u00e9 \u0159adi\u010dem dom\u00e9ny. <i>ARRIVA<\/i>.<\/p>\n<p>Je tak\u00e9 d\u016fle\u017eit\u00e9 si d\u00e1le uv\u011bdomit, \u017ee <i>NetBIOS<\/i> umo\u017e\u0148uje z\u00edskat <i>mac<\/i>-adresy. A na rozd\u00edl od arp-dotaz\u016f, NetBIOS-dotazy mohou p\u0159ekro\u010dit hranice pods\u00edt\u011b. To m\u016f\u017ee b\u00fdt u\u017eite\u010dn\u00e9, pokud nap\u0159\u00edklad pot\u0159ebujete naj\u00edt v s\u00edti n\u011bjak\u00fd notebook nebo specifick\u00e9 za\u0159\u00edzen\u00ed, znaje jeho v\u00fdrobce. Jeliko\u017e prvn\u00edch t\u0159i oktety <i>mac<\/i>-adres identifikuj\u00ed v\u00fdrobce, m\u016f\u017eete vys\u00edl\u00e1n\u00edm podobn\u00fdch <i>NetBIOS<\/i>-dotaz\u016f do v\u0161ech zn\u00e1m\u00fdch pods\u00edt\u00ed zkusit naj\u00edt po\u017eadovan\u00e9 za\u0159\u00edzen\u00ed (http:\/\/standards-oui.ieee.org\/oui.txt).<\/p>\n<p><b>Ur\u010den\u00ed p\u0159\u00edslu\u0161nosti k <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/cs\/domain\/\"   title=\"domain\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"1221\">domain<\/a><\/b><br \/>\n\u010casto p\u0159i pohybu po intern\u00edch podnikov\u00fdch s\u00edt\u00edch je t\u0159eba c\u00edlit p\u0159\u00edmo na pracovn\u00ed stanici p\u0159ipojenou k dom\u00e9n\u011b (nap\u0159\u00edklad za \u00fa\u010delem zv\u00fd\u0161en\u00ed opr\u00e1vn\u011bn\u00ed na \u00farove\u0148 dom\u00e9nov\u00e9ho administr\u00e1tora) nebo naopak. V tomto p\u0159\u00edpad\u011b <i>NetBIOS<\/i> op\u011bt m\u016f\u017ee pomoci:<\/p>\n<p><img decoding=\"async\" alt=\"NetBIOS v rukou hackera\" src=\"\/wp-content\/uploads\/2019\/03\/4488df62ea520dc1898e0e52e5a419a1.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nV tomto p\u0159\u00edpad\u011b pomoc\u00ed <i>NetBIOS<\/i> byly z\u00edsk\u00e1ny v\u0161echny n\u00e1zvy v\u0161ech typ\u016f. Mezi nimi lze krom\u011b jm\u00e9na PC (co\u017e u\u017e bylo z\u00edsk\u00e1no d\u0159\u00edve) vid\u011bt i jm\u00e9no pracovn\u00ed skupiny. Ve v\u00fdchoz\u00edm nastaven\u00ed pro <i>windows<\/i> to obvykle vypad\u00e1 jako <i>WORKGROUP<\/i> nebo <i>IVAN-PC<\/i>, ale pokud je pracovn\u00ed stanice v dom\u00e9n\u011b, pak je jej\u00ed pracovn\u00ed skupina pr\u00e1v\u011b jm\u00e9no dom\u00e9ny.<br \/>\nTakto lze zjistit, zda je pracovn\u00ed stanice v dom\u00e9n\u011b a, pokud ano, tak v kter\u00e9. <i>NetBIOS<\/i> Pokud v\u0161ak pot\u0159ebujete z\u00edskat seznam dom\u00e9nov\u00fdch hostitel\u016f v r\u00e1mci pods\u00edt\u011b, sta\u010d\u00ed jedin\u00fd broadcast dotaz s n\u00e1zvem po\u017eadovan\u00e9 dom\u00e9ny:<br \/>\nv d\u016fsledku toho odpov\u00ed v\u0161echny hostitele, kte\u0159\u00ed jsou sou\u010d\u00e1st\u00ed t\u00e9to dom\u00e9ny.<\/p>\n<p><img decoding=\"async\" alt=\"NetBIOS v rukou hackera\" src=\"\/wp-content\/uploads\/2019\/03\/d99e6b6ed805bebb425d9d2f22cd0bea.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nObjevov\u00e1n\u00ed multihomed hostitel\u016f<\/p>\n<p><b>A nakonec je\u0161t\u011b jedna pravd\u011bpodobn\u011b velmi m\u00e1lo zn\u00e1m\u00e1 technika, kter\u00e1 je zcela nezbytn\u00e1 pro<\/b><br \/>\nnalez\u00e1n\u00ed cest <i>do chr\u00e1n\u011bn\u00fdch, mo\u017en\u00e1 dokonce fyzicky izolovan\u00fdch s\u00edt\u00ed. Mohou to b\u00fdt tov\u00e1rn\u00ed s\u00edt\u011b podnik\u016f pln\u00e9 \u0159adi\u010d\u016f. P\u0159\u00edstup k t\u00e9to s\u00edti pro \u00fato\u010dn\u00edka znamen\u00e1 mo\u017enost ovliv\u0148ovat technologick\u00e9 procesy, a pro podnik riziko utrp\u011bt obrovsk\u00e9 ztr\u00e1ty.<\/i> do chr\u00e1n\u011bn\u00fdch, mo\u017en\u00e1 dokonce fyzicky izolovan\u00fdch s\u00edt\u00ed. M\u016f\u017ee se jednat o podnikov\u00e9 v\u00fdrobn\u00ed s\u00edt\u011b, zapln\u011bn\u00e9 \u0159adi\u010di. P\u0159\u00edstup k t\u00e9to s\u00edti pro \u00fato\u010dn\u00edka znamen\u00e1 mo\u017enost ovlivnit technologick\u00fd proces, a pro podnik je to riziko obrovsk\u00fdch ztr\u00e1t.<br \/>\nPodstata v\u011bci je takov\u00e1, \u017ee i kdy\u017e je s\u00ed\u0165 izolov\u00e1na od podnikov\u00e9 s\u00edt\u011b, n\u011bkte\u0159\u00ed administr\u00e1to\u0159i, a\u0165 u\u017e z lenosti, nebo z jin\u00fdch d\u016fvod\u016f, r\u00e1di nakonfiguruj\u00ed dal\u0161\u00ed s\u00ed\u0165ovou kartu na sv\u00fdch PC, aby z\u00edskali p\u0159\u00edstup k t\u00e9to s\u00edti. To se samoz\u0159ejm\u011b d\u011bje mimo ve\u0161ker\u00e1 pravidla podnikov\u00fdch firewall\u016f. Je to pohodln\u00e9, ano, ale ne p\u0159\u00edli\u0161 bezpe\u010dn\u00e9; pokud jste hacknuti, stanete se mostem do t\u00e9to s\u00edt\u011b a ponese odpov\u011bdnost.<br \/>\nPro \u00fato\u010dn\u00edka je to v\u0161ak probl\u00e9m \u2014 naj\u00edt toho spr\u00e1vn\u00e9ho administr\u00e1tora, kter\u00fd se t\u00edmto nez\u00e1konn\u00fdm zp\u016fsobem dostal do chr\u00e1n\u011bn\u00e9 s\u00edt\u011b. A to nen\u00ed snadn\u00fd \u00fakol ani pro samotn\u00e9 bezpe\u010dnostn\u00ed odborn\u00edky. Na velk\u00fdch podnic\u00edch je to skute\u010dn\u011b n\u00e1ro\u010dn\u00e1 \u00faloha, jako hledat jehlu v kupce sena.<br \/>\nV t\u00e9to situaci jsou pro \u00fato\u010dn\u00edka z\u0159ejm\u00e9 dv\u011b mo\u017enosti:<br \/>\n1. pokusit se pou\u017e\u00edt ka\u017ed\u00e9 PC v podnikov\u00e9 pods\u00edti jako br\u00e1nu do po\u017eadovan\u00e9 s\u00edt\u011b. Bylo by to velmi pohodln\u00e9, ale to se jen z\u0159\u00eddka vyskytuje, proto\u017ee <i>windows<\/i> na hostitel\u00edch <i>ip forwarding<\/i> je t\u00e9m\u011b\u0159 v\u017edy vypnuto. Nav\u00edc je takov\u00e1 kontrola mo\u017en\u00e1 pouze v r\u00e1mci vlastn\u00ed pods\u00edt\u011b a vy\u017eaduje, aby \u00fato\u010dn\u00edk p\u0159esn\u011b znal c\u00edlovou adresu z izolovan\u00e9 s\u00edt\u011b.<br \/>\n2. sna\u017eit se vzd\u00e1len\u011b p\u0159istupovat k ka\u017ed\u00e9mu hostiteli a vykonat jednoduch\u00fd p\u0159\u00edkaz <i>ipconfig\/ifconfig<\/i>. A tady to nen\u00ed tak jednoduch\u00e9. I kdy\u017e m\u00e1 \u00fato\u010dn\u00edk pr\u00e1va dom\u00e9nov\u00e9ho administr\u00e1tora, nikdo nezru\u0161il firewally a m\u00edstn\u00ed firewall. Tak\u017ee \u00fakol nen\u00ed mo\u017en\u00e9 pln\u011b automatizovat. Nakonec z\u016fst\u00e1v\u00e1 mu\u010div\u00e9 p\u0159ihla\u0161ov\u00e1n\u00ed k ka\u017ed\u00e9mu hostiteli, p\u0159ekon\u00e1v\u00e1n\u00ed firewall\u016f (\u010dasto blokuj\u00edc\u00edch pr\u00e1v\u011b port 445\/tcp) v nad\u011bji, \u017ee kone\u010dn\u011b uvid\u00edte po\u017eadovan\u00e9 s\u00ed\u0165ov\u00e9 rozhran\u00ed.<\/p>\n<p>Nicm\u00e9n\u011b, existuje mnohem snaz\u0161\u00ed zp\u016fsob. Existuje jeden extr\u00e9mn\u011b jednoduch\u00fd trik, kter\u00fd v\u00e1m umo\u017e\u0148uje z\u00edskat ze zvolen\u00e9ho hostitele seznam s\u00ed\u0165ov\u00fdch rozhran\u00ed. P\u0159edstavme si, \u017ee m\u00e1me n\u011bjak\u00fd hostitel:<\/p>\n<p><img decoding=\"async\" alt=\"NetBIOS v rukou hackera\" src=\"\/wp-content\/uploads\/2019\/03\/79b10413cb1b0c3ab1f3116af8d6609b.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nje to reverzn\u00ed resolvov\u00e1n\u00ed ip-adresy \u2192 s\u00ed\u0165ov\u00e9 jm\u00e9no. Pokud se nyn\u00ed pokus\u00edme ud\u011blat p\u0159\u00edm\u00e9 resolvov\u00e1n\u00ed s\u00ed\u0165ov\u00e9ho jm\u00e9na \u2192 ip-adresy:<\/p>\n<p><img decoding=\"async\" alt=\"NetBIOS v rukou hackera\" src=\"\/wp-content\/uploads\/2019\/03\/e72c3b210658d935c58354d6a8e6092b.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nzjist\u00edme, \u017ee tento hostitel je tak\u00e9 br\u00e1nou (nejsp\u00ed\u0161) do n\u011bjak\u00e9 jin\u00e9 s\u00edt\u011b. Je t\u0159eba poznamenat, \u017ee v tomto p\u0159\u00edpad\u011b byl dotaz vysl\u00e1n jako broadcast. Jin\u00fdmi slovy, usly\u0161\u00ed ho pouze hostitel\u00e9 z pods\u00edt\u011b \u00fato\u010dn\u00edka.<br \/>\nPokud je c\u00edlov\u00fd host mimo pods\u00ed\u0165, m\u016f\u017eete poslat c\u00edlenou \u017e\u00e1dost:<\/p>\n<p><img decoding=\"async\" alt=\"NetBIOS v rukou hackera\" src=\"\/wp-content\/uploads\/2019\/03\/525de9a6d615691458beff622ea60d5b.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nV tomto p\u0159\u00edpad\u011b je jasn\u00e9, \u017ee c\u00edl je mimo pods\u00ed\u0165 \u00fato\u010dn\u00edka. Pomoc\u00ed kl\u00ed\u010de -B bylo ur\u010deno, \u017ee \u017e\u00e1dost by m\u011bla b\u00fdt zasl\u00e1na na konkr\u00e9tn\u00ed adresu, nikoli na vys\u00edlac\u00ed adresu.<br \/>\nNyn\u00ed sta\u010d\u00ed rychle shrom\u00e1\u017edit informace o cel\u00e9 c\u00edlov\u00e9 pods\u00edti, nikoli pouze o jedn\u00e9 adrese. K tomu m\u016f\u017eete pou\u017e\u00edt mal\u00fd <i>python<\/i>-skript:<\/p>\n<p><img decoding=\"async\" alt=\"NetBIOS v rukou hackera\" src=\"\/wp-content\/uploads\/2019\/03\/f70721f54fe98d16c6ac6ae85b41c19c.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nA za n\u011bkolik sekund:<\/p>\n<p><img decoding=\"async\" alt=\"NetBIOS v rukou hackera\" src=\"\/wp-content\/uploads\/2019\/03\/d37932871820fcf07de8ca68b5060f6d.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nV tomto improvizovan\u00e9m p\u0159\u00edpad\u011b by se vyhrazen\u00fd host stal prvn\u00edm c\u00edlem \u00fato\u010dn\u00edka, pokud by usiloval o s\u00ed\u0165 172.16.1\/24.<\/p>\n<p><img decoding=\"async\" alt=\"NetBIOS v rukou hackera\" src=\"\/wp-content\/uploads\/2019\/03\/e5a4a9e3f61f1b7232ae230304e56b93.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nOpakuj\u00edc\u00ed se n\u00e1zvy na r\u016fzn\u00fdch ip sv\u011bd\u010d\u00ed o tom, \u017ee host m\u00e1 tak\u00e9 dv\u011b s\u00ed\u0165ov\u00e9 karty, ale ji\u017e v jedn\u00e9 pods\u00edti. Je t\u0159eba poznamenat, \u017ee <i>NetBIOS<\/i> nezve\u0159ej\u0148uje <i>Spravovat aliasy obraz\u016f<\/i>-y (kter\u00e9 mohou b\u00fdt snadno po\u010d\u00edt\u00e1ny pomoc\u00ed arp-dotaz\u016f jako ip s toto\u017en\u00fdm <i>mac<\/i>). V tomto p\u0159\u00edpad\u011b <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/cs\/lir\/ipv4\/\"   title=\"IP adresy\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"620\">IP adresy<\/a> maj\u00ed r\u016fzn\u00e9 <i>mac<\/i>.<\/p>\n<p>Dal\u0161\u00ed p\u0159\u00edklad pou\u017eit\u00ed t\u00e9to techniky \u2014 ve\u0159ejn\u00e9 Wi-Fi. N\u011bkdy m\u016f\u017eete narazit na situaci, kdy se mezi hostuj\u00edc\u00edmi za\u0159\u00edzen\u00edmi k ve\u0159ejn\u00e9 s\u00edti p\u0159ipojuje person\u00e1l pracuj\u00edc\u00ed v uzav\u0159en\u00e9m korpor\u00e1tn\u00edm segmentu. Pot\u00e9 m\u016f\u017ee \u00fato\u010dn\u00edk pomoc\u00ed t\u00e9to zpravodajsk\u00e9 techniky velmi rychle nakreslit cestu k proniknut\u00ed do uzav\u0159en\u00e9 s\u00edt\u011b:<\/p>\n<p><img decoding=\"async\" alt=\"NetBIOS v rukou hackera\" src=\"\/wp-content\/uploads\/2019\/03\/5feac7ee3cfbd70c4c323f8e9583227c.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nV tomto p\u0159\u00edpad\u011b mezi 65 klienty ve\u0159ejn\u00e9ho Wi-Fi byly dv\u011b pracovn\u00ed stanice, kter\u00e9 m\u011bly dal\u0161\u00ed rozhran\u00ed, pravd\u011bpodobn\u011b pat\u0159\u00edc\u00ed k firemn\u00ed s\u00edti.<\/p>\n<p>Pokud mezi s\u00ed\u0165ov\u00fdmi segmenty nebo p\u0159\u00edmo na pracovn\u00edch stanic\u00edch dojde k filtraci provozu na port 445\/tcp, co\u017e br\u00e1n\u00ed vzd\u00e1len\u00e9mu p\u0159\u00edstupu k syst\u00e9mu (vzd\u00e1len\u00e9mu vykon\u00e1n\u00ed k\u00f3du), pak je v tomto p\u0159\u00edpad\u011b pro \u0159e\u0161en\u00ed jmen pou\u017eito <i>NetBIOS<\/i> portu 137\/udp, jeho\u017e v\u011bdom\u00e9 blokov\u00e1n\u00ed se t\u00e9m\u011b\u0159 nevyskytuje, proto\u017ee by to v\u00fdrazn\u011b po\u0161kodilo pohodl\u00ed pr\u00e1ce v s\u00edti, nap\u0159\u00edklad by mohlo zmizet s\u00ed\u0165ov\u00e9 prost\u0159ed\u00ed apod.<\/p>\n<p>Jak se \u0159\u00edk\u00e1, <i>enumeration is the key<\/i><br \/>\nJe zde n\u011bjak\u00e1 ochrana? Nen\u00ed, proto\u017ee to nen\u00ed zranitelnost v\u016fbec. Je to jen standardn\u00ed funkce toho m\u00e1lo, co je ve v\u00fdchoz\u00edm nastaven\u00ed u <i>windows<\/i> (v <i>linux<\/i> chov\u00e1n\u00ed se m\u00edrn\u011b li\u0161\u00ed). A pokud byste n\u00e1hodou bez schv\u00e1len\u00ed, obch\u00e1zen\u00edm pravidel s\u00ed\u0165ov\u00e9ho sm\u011brov\u00e1n\u00ed vstoupili do uzav\u0159en\u00e9ho segmentu, \u00fato\u010dn\u00edk v\u00e1s ur\u010dit\u011b najde a ud\u011bl\u00e1 to velmi rychle.<br \/>\n<br \/>Zdroj: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/post\/445212\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0412 \u0434\u0430\u043d\u043d\u043e\u0439 \u0441\u0442\u0430\u0442\u044c\u0435 \u043f\u043e\u0439\u0434\u0451\u0442 \u043a\u0440\u0430\u0442\u043a\u043e\u0435 \u043f\u043e\u0432\u0435\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u0438\u0435 \u043e \u0442\u043e\u043c, \u0447\u0442\u043e \u043d\u0430\u043c \u043c\u043e\u0436\u0435\u0442 \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u0430\u0442\u044c \u0442\u0430\u043a\u0430\u044f \u043f\u0440\u0438\u0432\u044b\u0447\u043d\u0430\u044f \u0441 \u0432\u0438\u0434\u0443 \u0432\u0435\u0449\u044c \u043a\u0430\u043a NetBIOS. \u041a\u0430\u043a\u0443\u044e \u043e\u043d \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u0434\u043b\u044f \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\/\u043f\u0435\u043d\u0442\u0435\u0441\u0442\u0435\u0440\u0430. \u041f\u0440\u043e\u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0430\u044f \u043e\u0431\u043b\u0430\u0441\u0442\u044c \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0440\u0430\u0437\u0432\u0435\u0434\u044b\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0442\u0435\u0445\u043d\u0438\u043a \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0441\u044f \u043a \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u043c, \u0442\u043e \u0435\u0441\u0442\u044c \u0438\u0437\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0438 \u043d\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u043c \u0438\u0437\u0432\u043d\u0435 \u0441\u0435\u0442\u044f\u043c. \u0422\u0430\u043a\u0438\u0435 \u0441\u0435\u0442\u0438 \u0435\u0441\u0442\u044c \u043a\u0430\u043a \u043f\u0440\u0430\u0432\u0438\u043b\u043e \u0443 \u043b\u044e\u0431\u043e\u0439 \u0434\u0430\u0436\u0435 \u0443 \u0441\u0430\u043c\u043e\u0439 \u043a\u0440\u043e\u0448\u0435\u0447\u043d\u043e\u0439 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438. \u0421\u0430\u043c [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[10],"tags":[],"class_list":["post-30258","post","type-post","status-publish","format-standard","hentry","category-blog"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.4 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0412 \u0434\u0430\u043d\u043d\u043e\u0439 \u0441\u0442\u0430\u0442\u044c\u0435 \u043f\u043e\u0439\u0434\u0451\u0442 \u043a\u0440\u0430\u0442\u043a\u043e\u0435 \u043f\u043e\u0432\u0435\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u0438\u0435 \u043e \u0442\u043e\u043c, \u0447\u0442\u043e \u043d\u0430\u043c \u043c\u043e\u0436\u0435\u0442 \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u0430\u0442\u044c \u0442\u0430\u043a\u0430\u044f \u043f\u0440\u0438\u0432\u044b\u0447\u043d\u0430\u044f \u0441 \u0432\u0438\u0434\u0443 \u0432\u0435\u0449\u044c \u043a\u0430\u043a NetBIOS.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/cs\/blog\/netbios-v-rukah-hakera\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.4\" \/>\n\t\t<meta property=\"og:locale\" content=\"cs_CZ\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47NetBIOS \u0432 \u0440\u0443\u043a\u0430\u0445 \u0445\u0430\u043a\u0435\u0440\u0430 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0412 \u0434\u0430\u043d\u043d\u043e\u0439 \u0441\u0442\u0430\u0442\u044c\u0435 \u043f\u043e\u0439\u0434\u0451\u0442 \u043a\u0440\u0430\u0442\u043a\u043e\u0435 \u043f\u043e\u0432\u0435\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u0438\u0435 \u043e \u0442\u043e\u043c, \u0447\u0442\u043e \u043d\u0430\u043c \u043c\u043e\u0436\u0435\u0442 \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u0430\u0442\u044c \u0442\u0430\u043a\u0430\u044f \u043f\u0440\u0438\u0432\u044b\u0447\u043d\u0430\u044f \u0441 \u0432\u0438\u0434\u0443 \u0432\u0435\u0449\u044c \u043a\u0430\u043a NetBIOS.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/cs\/blog\/netbios-v-rukah-hakera\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T18:34:32+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2019-10-31T18:34:32+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47NetBIOS v rukou hackera | ProHoster","description":"V tomto \u010dl\u00e1nku se bude kr\u00e1tce vypr\u00e1v\u011bt o tom, co n\u00e1m m\u016f\u017ee \u0159\u00edct tak na prvn\u00ed pohled b\u011b\u017en\u00e1 v\u011bc jako NetBIOS.","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/netbios-v-rukah-hakera","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47NetBIOS \u0432 \u0440\u0443\u043a\u0430\u0445 \u0445\u0430\u043a\u0435\u0440\u0430 | ProHoster","og:description":"\u0412 \u0434\u0430\u043d\u043d\u043e\u0439 \u0441\u0442\u0430\u0442\u044c\u0435 \u043f\u043e\u0439\u0434\u0451\u0442 \u043a\u0440\u0430\u0442\u043a\u043e\u0435 \u043f\u043e\u0432\u0435\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u0438\u0435 \u043e \u0442\u043e\u043c, \u0447\u0442\u043e \u043d\u0430\u043c \u043c\u043e\u0436\u0435\u0442 \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u0430\u0442\u044c \u0442\u0430\u043a\u0430\u044f \u043f\u0440\u0438\u0432\u044b\u0447\u043d\u0430\u044f \u0441 \u0432\u0438\u0434\u0443 \u0432\u0435\u0449\u044c \u043a\u0430\u043a NetBIOS.","og:url":"https:\/\/prohoster.info\/cs\/blog\/netbios-v-rukah-hakera","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:34:32+00:00","article:modified_time":"2019-10-31T18:34:32+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"30258","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"Article","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-09 15:53:47","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 03:38:39","updated":"2026-02-09 15:53:47","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/30258","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=30258"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/30258\/revisions"}],"predecessor-version":[{"id":158465,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/30258\/revisions\/158465"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=30258"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=30258"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=30258"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}