{"id":31811,"date":"2019-10-31T21:43:17","date_gmt":"2019-10-31T18:43:17","guid":{"rendered":"https:\/\/prohoster.info\/blog\/network-tools-ili-s-chego-nachat-pentesteru\/"},"modified":"2019-10-31T21:43:17","modified_gmt":"2019-10-31T18:43:17","slug":"network-tools-ili-s-chego-nachat-pentesteru","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/network-tools-ili-s-chego-nachat-pentesteru","title":{"rendered":"N\u00e1stroje pro s\u00ed\u0165, nebo jak za\u010d\u00edt pentester?","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Toolkit za\u010d\u00ednaj\u00edc\u00edho pentestera: p\u0159edstavujeme stru\u010dn\u00fd p\u0159ehled hlavn\u00edch n\u00e1stroj\u016f, kter\u00e9 se hod\u00ed p\u0159i pentestu vnit\u0159n\u00ed s\u00edt\u011b. Tyto n\u00e1stroje jsou ji\u017e aktivn\u011b pou\u017e\u00edv\u00e1ny \u0161irok\u00fdm spektrem specialist\u016f, tak\u017ee zn\u00e1t jejich mo\u017enosti a ovl\u00e1dat je v dokonalosti bude u\u017eite\u010dn\u00e9 pro ka\u017ed\u00e9ho. <\/p>\n<p><img decoding=\"async\" alt=\"N\u00e1stroje pro s\u00ed\u0165, nebo jak za\u010d\u00edt pentester?\" src=\"\/wp-content\/uploads\/2019\/04\/a6846992cd5eb7769c87bbfb5aaaabbc.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<h2>Obsah:<\/h2>\n<p><\/p>\n<ul>\n<li> <noindex><a rel=\"nofollow\" href=\"#Nmap\">Nmap<\/a><\/noindex><\/li>\n<li> <noindex><a rel=\"nofollow\" href=\"#Zmap\">Zmap<\/a><\/noindex><\/li>\n<li> <noindex><a rel=\"nofollow\" href=\"#Masscan\">Masscan<\/a><\/noindex><\/li>\n<li> <noindex><a rel=\"nofollow\" href=\"#Nessus\">Nessus<\/a><\/noindex><\/li>\n<li> <noindex><a rel=\"nofollow\" href=\"#Net-Creds\">Net-Creds<\/a><\/noindex><\/li>\n<li> <noindex><a rel=\"nofollow\" href=\"#network-miner\">network-miner<\/a><\/noindex><\/li>\n<li> <noindex><a rel=\"nofollow\" href=\"#mitm6\">mitm6<\/a><\/noindex><\/li>\n<li> <noindex><a rel=\"nofollow\" href=\"#Responder\">Responder<\/a><\/noindex><\/li>\n<li> <noindex><a rel=\"nofollow\" href=\"#Evil_Foca\">Evil_Foca<\/a><\/noindex><\/li>\n<li> <noindex><a rel=\"nofollow\" href=\"#Bettercap\">Bettercap<\/a><\/noindex><\/li>\n<li> <noindex><a rel=\"nofollow\" href=\"#gateway_finder\">gateway_finder<\/a><\/noindex><\/li>\n<li> <noindex><a rel=\"nofollow\" href=\"#mitmproxy\">mitmproxy<\/a><\/noindex><\/li>\n<li> <noindex><a rel=\"nofollow\" href=\"#SIET\">SIET<\/a><\/noindex><\/li>\n<li> <noindex><a rel=\"nofollow\" href=\"#yersinia\">yersinia<\/a><\/noindex><\/li>\n<li> <noindex><a rel=\"nofollow\" href=\"#proxychains\">proxychains<\/a><\/noindex><\/li>\n<\/ul>\n<p><\/p>\n<h2><noindex><a rel=\"nofollow\" name=\"Nmap\"><\/a><\/noindex>Nmap<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/nmap.org\/\">Nmap<\/a><\/noindex> \u2013 opensource utilita pro skenov\u00e1n\u00ed s\u00edt\u00ed, je jedn\u00edm z nejpopul\u00e1rn\u011bj\u0161\u00edch n\u00e1stroj\u016f mezi bezpe\u010dnostn\u00edmi experty a syst\u00e9mov\u00fdmi administr\u00e1tory. Prim\u00e1rn\u011b se pou\u017e\u00edv\u00e1 k skenov\u00e1n\u00ed port\u016f, ale krom\u011b toho disponuje obrovsk\u00fdm mno\u017estv\u00edm u\u017eite\u010dn\u00fdch funkc\u00ed, co\u017e vlastn\u011b \u010din\u00ed Nmap <b>super-kombin\u00e9zou<\/b> pro zkoum\u00e1n\u00ed s\u00edt\u00ed.<\/p>\n<p>Krom\u011b kontroly otev\u0159en\u00fdch\/zav\u0159en\u00fdch port\u016f dok\u00e1\u017ee Nmap identifikovat slu\u017ebu, kter\u00e1 naslouch\u00e1 na otev\u0159en\u00e9m portu, a jej\u00ed verzi, a n\u011bkdy pom\u00e1h\u00e1 ur\u010dit opera\u010dn\u00ed syst\u00e9m. Nmap podporuje skripty pro skenov\u00e1n\u00ed (NSE \u2014 Nmap Scripting Engine). Pomoc\u00ed skript\u016f je mo\u017en\u00e9 zkontrolovat zranitelnosti r\u016fzn\u00fdch slu\u017eeb (pokud tedy existuje skript pro n\u011b, p\u0159\u00edpadn\u011b je mo\u017en\u00e9 v\u017edy napsat vlastn\u00ed) nebo zkou\u0161et slab\u00e1 hesla pro r\u016fzn\u00e9 slu\u017eby. <\/p>\n<p>T\u00edmto zp\u016fsobem Nmap umo\u017e\u0148uje vytvo\u0159it podrobnou mapu s\u00edt\u011b, z\u00edskat maximum informac\u00ed o spu\u0161t\u011bn\u00fdch slu\u017eb\u00e1ch na hostech v s\u00edti, a tak\u00e9 preventivn\u011b zkontrolovat n\u011bkter\u00e9 zranitelnosti. Nmap tak\u00e9 nab\u00edz\u00ed flexibiln\u00ed mo\u017enosti skenov\u00e1n\u00ed, je mo\u017en\u00e9 nastavit rychlost skenov\u00e1n\u00ed, po\u010det vl\u00e1ken, mno\u017estv\u00ed skupin pro skenov\u00e1n\u00ed atd.<br \/>\nJe vhodn\u00fd pro skenov\u00e1n\u00ed mal\u00fdch s\u00edt\u00ed a nepostradateln\u00fd pro c\u00edlen\u00e9 skenov\u00e1n\u00ed jednotliv\u00fdch host\u016f.<\/p>\n<h4>Plusy:<\/h4>\n<ul>\n<li>Rychle pracuje s mal\u00fdm rozsahem host\u016f;<\/li>\n<li>Flexibilita nastaven\u00ed \u2014 mo\u017enosti lze kombinovat tak, aby bylo mo\u017en\u00e9 z\u00edskat maxim\u00e1ln\u011b informativn\u00ed data za p\u0159ijateln\u00fd \u010das; <\/li>\n<li>Paraleln\u00ed skenov\u00e1n\u00ed \u2014 seznam c\u00edlov\u00fdch host\u016f se d\u011bl\u00ed do skupin a pot\u00e9 je ka\u017ed\u00e1 skupina postupn\u011b skenov\u00e1na, p\u0159i\u010dem\u017e uvnit\u0159 skupiny se pou\u017e\u00edv\u00e1 paraleln\u00ed skenov\u00e1n\u00ed. Rozd\u011blen\u00ed do skupin je tak\u00e9 drobnou nev\u00fdhodou (viz n\u00ed\u017ee);<\/li>\n<li>P\u0159eddefinovan\u00e9 sady skript\u016f pro r\u016fzn\u00e9 \u00fakoly \u2014 nen\u00ed t\u0159eba tr\u00e1vit hodn\u011b \u010dasu vyb\u00edr\u00e1n\u00edm konkr\u00e9tn\u00edch skript\u016f, ale m\u016f\u017eete uv\u00e9st skupiny skript\u016f;<\/li>\n<li>V\u00fdstup v\u00fdsledk\u016f \u2014 5 r\u016fzn\u00fdch form\u00e1t\u016f, v\u010detn\u011b XML, kter\u00e9 m\u016f\u017ee b\u00fdt importov\u00e1no do jin\u00fdch n\u00e1stroj\u016f;<\/li>\n<\/ul>\n<p><\/p>\n<h4>Nev\u00fdhody:<\/h4>\n<p><\/p>\n<ul>\n<li>Skenov\u00e1n\u00ed skupiny hostitel\u016f - informace o jak\u00e9mkoli hostiteli nen\u00ed dostupn\u00e1, dokud neskon\u010d\u00ed skenov\u00e1n\u00ed cel\u00e9 skupiny. To se \u0159e\u0161\u00ed nastaven\u00edm v mo\u017enostech maxim\u00e1ln\u00ed velikosti skupiny a maxim\u00e1ln\u00edho \u010dasov\u00e9ho intervalu, b\u011bhem kter\u00e9ho bude \u010dek\u00e1no na odpov\u011b\u010f na po\u017eadavek, ne\u017e budou pokusy p\u0159eru\u0161eny nebo u\u010din\u011bny dal\u0161\u00ed;<\/li>\n<li>P\u0159i skenov\u00e1n\u00ed Nmap odes\u00edl\u00e1 SYN pakety na c\u00edlov\u00fd port a \u010dek\u00e1 na jak\u00fdkoliv odpov\u011bdn\u00ed paket nebo uplynut\u00ed \u010dasov\u00e9ho limitu, pokud nen\u00ed odpov\u011b\u010f. To m\u00e1 negativn\u00ed dopad na v\u00fdkon skeneru jako celku, ve srovn\u00e1n\u00ed s asynchronn\u00edmi skenery (nap\u0159\u00edklad zmap nebo masscan);<\/li>\n<li>P\u0159i skenov\u00e1n\u00ed velk\u00fdch s\u00edt\u00ed s vyu\u017eit\u00edm vlajek pro urychlen\u00ed skenov\u00e1n\u00ed (\u2014min-rate, \u2014min-parallelism) lze z\u00edskat fale\u0161n\u011b negativn\u00ed v\u00fdsledky, p\u0159i\u010dem\u017e se p\u0159ehl\u00e9dnou otev\u0159en\u00e9 porty na hostiteli. Tak\u00e9 je t\u0159eba tyto mo\u017enosti pou\u017e\u00edvat opatrn\u011b, proto\u017ee vysok\u00fd packet-rate m\u016f\u017ee v\u00e9st k ne\u00famysln\u00e9mu DoS. <\/li>\n<\/ul>\n<p>\n<img decoding=\"async\" alt=\"N\u00e1stroje pro s\u00ed\u0165, nebo jak za\u010d\u00edt pentester?\" src=\"\/wp-content\/uploads\/2019\/04\/189c9a5145449871571ad11d8b0be9c2.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h2><noindex><a rel=\"nofollow\" name=\"Zmap\"><\/a><\/noindex>Zmap<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/zmap\/zmap\">Zmap<\/a><\/noindex> (nem\u011bjte to na mysli se ZenMap) - je tak\u00e9 skener s otev\u0159en\u00fdm zdrojov\u00fdm k\u00f3dem, byl vytvo\u0159en jako rychlej\u0161\u00ed alternativa k Nmap.<\/p>\n<p>Na rozd\u00edl od nmap - Zmap p\u0159i odes\u00edl\u00e1n\u00ed SYN paket\u016f ne\u010dek\u00e1 na n\u00e1vrat odpov\u011bdi, ale pokra\u010duje ve skenov\u00e1n\u00ed a z\u00e1rove\u0148 \u010dek\u00e1 na odpov\u011bdi od v\u0161ech hostitel\u016f, t\u00edm p\u00e1dem ve skute\u010dnosti nepodporuje stav p\u0159ipojen\u00ed. Kdy\u017e odpov\u011b\u010f na SYN paket p\u0159ijde, Zmap podle obsahu paketu pochop\u00ed, kter\u00fd port a na kter\u00e9m hostiteli byl otev\u0159en. Krom\u011b toho Zmap odes\u00edl\u00e1 pouze jeden SYN paket na skenovan\u00fd port. Existuje tak\u00e9 mo\u017enost vyu\u017eit\u00ed PF_RING pro rychl\u00e9 skenov\u00e1n\u00ed velk\u00fdch s\u00edt\u00ed, pokud m\u00e1te po ruce 10gigabitov\u00fd rozhran\u00ed a kompatibiln\u00ed s\u00ed\u0165ovou kartu.<\/p>\n<h4>Plusy:<\/h4>\n<p><\/p>\n<ul>\n<li>Rychlost skenov\u00e1n\u00ed;<\/li>\n<li>Zmap generuje Ethernetov\u00e9 r\u00e1mce mimo syst\u00e9mov\u00fd TCP\/IP z\u00e1sobn\u00edk;<\/li>\n<li>Mo\u017enost pou\u017eit\u00ed PF_RING;<\/li>\n<li>ZMap randomizuje c\u00edle pro rovnom\u011brn\u00e9 rozlo\u017een\u00ed zat\u00ed\u017een\u00ed na skenovan\u00e9 stran\u011b;<\/li>\n<li>Mo\u017enost integrace se ZGrab (n\u00e1stroj pro sb\u011br informac\u00ed o slu\u017eb\u00e1ch na aplika\u010dn\u00ed \u00farovni L7).<\/li>\n<\/ul>\n<p><\/p>\n<h4>Nev\u00fdhody:<\/h4>\n<p><\/p>\n<ul>\n<li>M\u016f\u017ee zp\u016fsobit selh\u00e1n\u00ed s\u00ed\u0165ov\u00e9ho za\u0159\u00edzen\u00ed, nap\u0159\u00edklad po\u0161kodit prost\u0159edn\u00ed sm\u011brova\u010de, a to i p\u0159es rozlo\u017een\u00e9 zat\u00ed\u017een\u00ed, proto\u017ee v\u0161echny pakety budou proch\u00e1zet p\u0159es jeden sm\u011brova\u010d.<\/li>\n<\/ul>\n<p>\n<img decoding=\"async\" alt=\"N\u00e1stroje pro s\u00ed\u0165, nebo jak za\u010d\u00edt pentester?\" src=\"\/wp-content\/uploads\/2019\/04\/474b04785f27540510421d4fb715d4b4.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h2><noindex><a rel=\"nofollow\" name=\"Masscan\"><\/a><\/noindex>Masscan<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/robertdavidgraham\/masscan\">Masscan<\/a><\/noindex> \u2014 \u00fa\u017easn\u011b, ale tak\u00e9 skener s otev\u0159en\u00fdm zdrojov\u00fdm k\u00f3dem, kter\u00fd byl vytvo\u0159en s jedn\u00edm c\u00edlem \u2014 skenovat Internet je\u0161t\u011b rychleji (m\u00e9n\u011b ne\u017e 6 minut p\u0159i rychlosti ~10 milion\u016f paket\u016f\/s). V podstat\u011b funguje t\u00e9m\u011b\u0159 stejn\u011b jako Zmap, jen je\u0161t\u011b rychleji.<\/p>\n<h4>Plusy:<\/h4>\n<p><\/p>\n<ul>\n<li>Syntaxe je podobn\u00e1 jako u Nmap, a program podporuje n\u011bkter\u00e9 kompatibiln\u00ed mo\u017enosti Nmap;<\/li>\n<li>Rychlost pr\u00e1ce \u2014 jeden z nejrychlej\u0161\u00edch asynchronn\u00edch skener\u016f.<\/li>\n<li>Flexibiln\u00ed mechanismus skenov\u00e1n\u00ed \u2014 obnoven\u00ed p\u0159eru\u0161en\u00e9ho skenov\u00e1n\u00ed, rozlo\u017een\u00ed z\u00e1t\u011b\u017ee na n\u011bkolik za\u0159\u00edzen\u00ed (tak jako v Zmap).<\/li>\n<\/ul>\n<p><\/p>\n<h4>Nev\u00fdhody:<\/h4>\n<p><\/p>\n<ul>\n<li>Stejn\u011b jako s Zmap je z\u00e1t\u011b\u017e na s\u00ed\u0165 extr\u00e9mn\u011b vysok\u00e1, co\u017e m\u016f\u017ee v\u00e9st k DoS;<\/li>\n<li>Ve v\u00fdchoz\u00edm nastaven\u00ed neexistuje mo\u017enost skenovat na aplika\u010dn\u00ed \u00farovni L7;<\/li>\n<\/ul>\n<p>\n<img decoding=\"async\" alt=\"N\u00e1stroje pro s\u00ed\u0165, nebo jak za\u010d\u00edt pentester?\" src=\"\/wp-content\/uploads\/2019\/04\/cc919cc2dfd848594f4d8d6a35f9c1cf.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h2><noindex><a rel=\"nofollow\" name=\"Nessus\"><\/a><\/noindex>Nessus<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/www.tenable.com\/products\/nessus\/nessus-professional\">Nessus<\/a><\/noindex> \u2014 skener pro automatizaci kontroly a odhalov\u00e1n\u00ed zn\u00e1m\u00fdch zranitelnost\u00ed v syst\u00e9mu. Zdrojov\u00fd k\u00f3d je uzav\u0159en, existuje bezplatn\u00e1 verze Nessus Home, kter\u00e1 umo\u017e\u0148uje skenovat a\u017e 16 IP adres stejnou rychlost\u00ed a podrobnost\u00ed anal\u00fdzy jako v placen\u00e9 verzi.<\/p>\n<p>Schopen ur\u010dit zraniteln\u00e9 verze slu\u017eeb nebo server\u016f, odhalovat chyby v konfiguraci syst\u00e9mu, prov\u00e1d\u011bt bruteforce slovn\u00edkov\u00fdch hesel. M\u016f\u017ee b\u00fdt pou\u017eit k ur\u010den\u00ed spr\u00e1vnosti nastaven\u00ed slu\u017eeb (nap\u0159. po\u0161ta, aktualizace atd.), jako\u017e i p\u0159i p\u0159\u00edprav\u011b na audit PCI DSS. Krom\u011b toho lze do Nessusu p\u0159edat \u00fadaje pro hostitele (SSH nebo dom\u00e9nov\u00fd \u00fa\u010det v Active Directory) a skener z\u00edsk\u00e1 p\u0159\u00edstup k hostiteli a provede kontroly p\u0159\u00edmo na n\u011bm, tato mo\u017enost se naz\u00fdv\u00e1 credential scan. U\u017eite\u010dn\u00e9 pro firmy, kter\u00e9 prov\u00e1d\u011bj\u00ed audity sv\u00fdch s\u00edt\u00ed.<\/p>\n<h4>Plusy:<\/h4>\n<p><\/p>\n<ul>\n<li>Samostatn\u00e9 sc\u00e9n\u00e1\u0159e pro ka\u017edou zranitelnost, jejich\u017e datab\u00e1ze se neust\u00e1le aktualizuje;<\/li>\n<li>V\u00fdstup v\u00fdsledk\u016f \u2014 prost\u00fd text, XML, HTML a LaTeX;<\/li>\n<li>API Nessus \u2014 umo\u017e\u0148uje automatizovat procesy skenov\u00e1n\u00ed a z\u00edsk\u00e1v\u00e1n\u00ed v\u00fdsledk\u016f;<\/li>\n<li>Credential Scan, lze pou\u017e\u00edt u\u017eivatelsk\u00e9 \u00fadaje Windows nebo Linux pro kontrolu aktualizac\u00ed nebo jin\u00fdch zranitelnost\u00ed;<\/li>\n<li>Mo\u017enost ps\u00e1t vlastn\u00ed vestav\u011bn\u00e9 bezpe\u010dnostn\u00ed moduly \u2014 skener m\u00e1 sv\u016fj vlastn\u00ed skriptovac\u00ed jazyk NASL (Nessus Attack Scripting Language);<\/li>\n<li>Lze nastavit \u010das pro pravideln\u00e9 skenov\u00e1n\u00ed m\u00edstn\u00ed s\u00edt\u011b \u2014 d\u00edky tomu bude Sl slu\u017eba informa\u010dn\u00ed bezpe\u010dnosti informov\u00e1na o v\u0161ech zm\u011bn\u00e1ch v bezpe\u010dnostn\u00ed konfiguraci, v\u00fdskytu nov\u00fdch hostitel\u016f a pou\u017eit\u00ed slovn\u00edch hesel nebo hesel ve v\u00fdchoz\u00edm nastaven\u00ed.<\/li>\n<\/ul>\n<p><\/p>\n<h4>Nev\u00fdhody:<\/h4>\n<p><\/p>\n<ul>\n<li>M\u016f\u017ee doj\u00edt k poruch\u00e1m v pr\u00e1ci skenovan\u00fdch syst\u00e9m\u016f \u2014 s vypnutou mo\u017enost\u00ed bezpe\u010dnostn\u00edch kontrol je t\u0159eba pracovat opatrn\u011b;<\/li>\n<li>Verze povoluj\u00edc\u00ed komer\u010dn\u00ed pou\u017eit\u00ed nen\u00ed zdarma.<\/li>\n<\/ul>\n<p>\n<img decoding=\"async\" alt=\"N\u00e1stroje pro s\u00ed\u0165, nebo jak za\u010d\u00edt pentester?\" src=\"\/wp-content\/uploads\/2019\/04\/07117e6a14a384a1ce2d285a19ca08fb.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h2><noindex><a rel=\"nofollow\" name=\"Net-Creds\"><\/a><\/noindex>Net-Creds<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/DanMcInerney\/net-creds\">Net-Creds<\/a><\/noindex> \u2014 n\u00e1stroj v jazyce Python pro shroma\u017e\u010fov\u00e1n\u00ed hesel a hash\u016f, stejn\u011b jako dal\u0161\u00edch informac\u00ed, nap\u0159\u00edklad nav\u0161t\u00edven\u00fdch URL, sta\u017een\u00fdch soubor\u016f a dal\u0161\u00ed informace z provozu, jak v re\u00e1ln\u00e9m \u010dase p\u0159i prov\u00e1d\u011bn\u00ed \u00fatoku MiTM, tak z p\u0159edem ulo\u017een\u00fdch soubor\u016f PCAP. Je vhodn\u00fd pro rychlou a povrchn\u00ed anal\u00fdzu velk\u00fdch objem\u016f provozu, nap\u0159\u00edklad p\u0159i s\u00ed\u0165ov\u00fdch \u00fatoc\u00edch MiTM, kdy je \u010das omezen a ru\u010dn\u00ed anal\u00fdza pomoc\u00ed Wiresharku vy\u017eaduje spoustu \u010dasu.<\/p>\n<h4>Plusy:<\/h4>\n<p><\/p>\n<ul>\n<li>Identifikace slu\u017eeb je zalo\u017eena na anal\u00fdze paket\u016f nam\u00edsto ur\u010den\u00ed slu\u017eby podle \u010d\u00edsla pou\u017e\u00edvan\u00e9ho portu;<\/li>\n<li>Snadn\u00e9 pou\u017eit\u00ed;<\/li>\n<li>\u0160irok\u00fd rozsah extrahovan\u00fdch dat \u2014 v\u010detn\u011b p\u0159ihla\u0161ovac\u00edch \u00fadaj\u016f a hesel pro FTP, POP, IMAP, SMTP, protokoly NTLMv1\/v2, stejn\u011b jako informace z HTTP po\u017eadavk\u016f, nap\u0159\u00edklad p\u0159ihla\u0161ovac\u00ed formul\u00e1\u0159e a z\u00e1kladn\u00ed autentizaci;<\/li>\n<\/ul>\n<p><img decoding=\"async\" alt=\"N\u00e1stroje pro s\u00ed\u0165, nebo jak za\u010d\u00edt pentester?\" src=\"\/wp-content\/uploads\/2019\/04\/45048ea241e42fe7008bf5a8f81c2efe.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h2><noindex><a rel=\"nofollow\" name=\"network-miner\"><\/a><\/noindex>network-miner<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/www.netresec.com\/?page=networkminer\">network-miner<\/a><\/noindex> \u2014 analog Net-Creds z hlediska fungov\u00e1n\u00ed, av\u0161ak nab\u00edz\u00ed v\u011bt\u0161\u00ed funk\u010dnost, nap\u0159\u00edklad mo\u017enost extrakce soubor\u016f p\u0159ed\u00e1van\u00fdch pomoc\u00ed protokol\u016f SMB. Stejn\u011b jako Net-Creds, je pohodln\u00fd, kdy\u017e je t\u0159eba rychle analyzovat velk\u00fd objem provozu. Tak\u00e9 m\u00e1 u\u017eivatelsky p\u0159\u00edv\u011btiv\u00e9 grafick\u00e9 rozhran\u00ed.<\/p>\n<h4>Plusy:<\/h4>\n<p><\/p>\n<ul>\n<li>Grafick\u00e9 rozhran\u00ed;<\/li>\n<li>Vizualizace a klasifikace dat podle skupin \u2014 usnad\u0148uje anal\u00fdzu provozu a zrychluje ji.<\/li>\n<\/ul>\n<p><\/p>\n<h4>Nev\u00fdhody:<\/h4>\n<p><\/p>\n<ul>\n<li>U zku\u0161ebn\u00ed verze je n\u011bkter\u00e9 funkce omezeny.<\/li>\n<\/ul>\n<p>\n<img decoding=\"async\" alt=\"N\u00e1stroje pro s\u00ed\u0165, nebo jak za\u010d\u00edt pentester?\" src=\"\/wp-content\/uploads\/2019\/04\/4e3a8c72150e3e9a4aceeff0ac7bd5db.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h2><noindex><a rel=\"nofollow\" name=\"mitm6\"><\/a><\/noindex>mitm6<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/fox-it\/mitm6\">mitm6 <\/a><\/noindex> \u2014 n\u00e1stroj pro prov\u00e1d\u011bn\u00ed \u00fatok\u016f na IPv6 (SLAAC-attack). IPv6 je prioritou v syst\u00e9mu Windows (ve skute\u010dnosti i v ostatn\u00edch syst\u00e9mech) a v z\u00e1kladn\u00edm nastaven\u00ed je rozhran\u00ed IPv6 zapnuto, co\u017e umo\u017e\u0148uje \u00fato\u010dn\u00edkovi nastavit ob\u011bti sv\u016fj DNS server pomoc\u00ed paket\u016f Router Advertisement, po kter\u00fdch \u00fato\u010dn\u00edk z\u00edsk\u00e1 mo\u017enost podvrhnout DNS ob\u011bti. Vynikaj\u00edc\u00ed pro prov\u00e1d\u011bn\u00ed Relay \u00fatoku spole\u010dn\u011b s n\u00e1strojem ntlmrelayx, co\u017e umo\u017e\u0148uje \u00fasp\u011b\u0161n\u011b napadat Windows s\u00edt\u011b. <\/p>\n<h4>Plusy:<\/h4>\n<p><\/p>\n<ul>\n<li>Funguje skv\u011ble v mnoha s\u00edt\u00edch pr\u00e1v\u011b d\u00edky standardn\u00edm konfigurac\u00edm Windows hostitel\u016f a s\u00edt\u00ed;<\/li>\n<\/ul>\n<p><\/p>\n<h2><noindex><a rel=\"nofollow\" name=\"Responder\"><\/a><\/noindex>Responder<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/SpiderLabs\/Responder\">Responder<\/a><\/noindex> \u2014 n\u00e1stroj pro spoofing v\u00edce\u00fa\u010delov\u00fdch protokol\u016f pro \u0159e\u0161en\u00ed jmen (LLMNR, NetBIOS, MDNS). Nezbytn\u00fd n\u00e1stroj v s\u00edt\u00edch Active Directory. Krom\u011b spoofingu um\u00ed zachytit NTLM autentizaci, zahrnuje tak\u00e9 sadu n\u00e1stroj\u016f pro shroma\u017e\u010fov\u00e1n\u00ed informac\u00ed a prov\u00e1d\u011bn\u00ed \u00fatok\u016f NTLM-Relay. <\/p>\n<h4>Plusy:<\/h4>\n<p><\/p>\n<ul>\n<li> Ve v\u00fdchoz\u00edm nastaven\u00ed zved\u00e1 v\u00edce server\u016f s podporou NTLM autentizace: SMB, MSSQL, HTTP, HTTPS, LDAP, FTP, POP3, IMAP, SMTP;<\/li>\n<li>Umo\u017e\u0148uje p\u0159esm\u011brov\u00e1n\u00ed DNS v p\u0159\u00edpad\u011b MITM \u00fatok\u016f (ARP spoofing atd.); <\/li>\n<li>Fingerprint host\u016f, kter\u00e9 provedly broadcast dotaz;<\/li>\n<li>Analyzovat re\u017eim \u2014 pro pasivn\u00ed sledov\u00e1n\u00ed po\u017eadavk\u016f;<\/li>\n<li>Form\u00e1t zachycen\u00fdch hash\u016f p\u0159i NTLM autentizaci je kompatibiln\u00ed s John the Ripper a Hashcat.<\/li>\n<\/ul>\n<p><\/p>\n<h4>Nev\u00fdhody:<\/h4>\n<p><\/p>\n<ul>\n<li>P\u0159i spu\u0161t\u011bn\u00ed pod Windows je spou\u0161t\u011bn\u00ed portu 445 (SMB) spojeno s ur\u010dit\u00fdmi obt\u00ed\u017eemi (je t\u0159eba zastavit odpov\u00eddaj\u00edc\u00ed slu\u017eby a restartovat);<\/li>\n<\/ul>\n<p>\n<img decoding=\"async\" alt=\"N\u00e1stroje pro s\u00ed\u0165, nebo jak za\u010d\u00edt pentester?\" src=\"\/wp-content\/uploads\/2019\/04\/ebe0c72c960bb3f6cfa6e6f34b5d2ec9.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<img decoding=\"async\" alt=\"N\u00e1stroje pro s\u00ed\u0165, nebo jak za\u010d\u00edt pentester?\" src=\"\/wp-content\/uploads\/2019\/04\/477fe7559f446176ae8c6fc3c351b769.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h2><noindex><a rel=\"nofollow\" name=\"Evil_Foca\"><\/a><\/noindex>Evil_Foca<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/ElevenPaths\/EvilFOCA\">Evil Foca<\/a><\/noindex> \u2014 n\u00e1stroj pro testov\u00e1n\u00ed r\u016fzn\u00fdch s\u00ed\u0165ov\u00fdch \u00fatok\u016f v s\u00edt\u00edch IPv4 a IPv6. Skenuje m\u00edstn\u00ed s\u00ed\u0165, identifikuje za\u0159\u00edzen\u00ed, sm\u011brova\u010de a jejich s\u00ed\u0165ov\u00e1 rozhran\u00ed, po \u010dem\u017e lze prov\u00e1d\u011bt r\u016fzn\u00e9 \u00fatoky na \u00fa\u010dastn\u00edky s\u00edt\u011b.<\/p>\n<h4>Plusy:<\/h4>\n<p><\/p>\n<ul>\n<li>Je vhodn\u00fd pro prov\u00e1d\u011bn\u00ed MITM \u00fatok\u016f (ARP spoofing, DHCP ACK injekce, SLAAC \u00fatok, DHCP spoofing);<\/li>\n<li>Lze prov\u00e1d\u011bt DoS \u00fatoky \u2014 s ARP spoofingem pro IPv4 s\u00edt\u011b, s SLAAC DoS v IPv6 s\u00edt\u00edch;<\/li>\n<li>Lze prov\u00e9st DNS hijacking;<\/li>\n<li>Jednoduch\u00e9 pou\u017eit\u00ed, u\u017eivatelsky p\u0159\u00edv\u011btiv\u00e9 grafick\u00e9 rozhran\u00ed.<\/li>\n<\/ul>\n<p><\/p>\n<h4>Nev\u00fdhody:<\/h4>\n<p><\/p>\n<ul>\n<li>Funguje pouze na Windows.<\/li>\n<\/ul>\n<p>\n<img decoding=\"async\" alt=\"N\u00e1stroje pro s\u00ed\u0165, nebo jak za\u010d\u00edt pentester?\" src=\"\/wp-content\/uploads\/2019\/04\/f9ae7134162a703ad6fd1bdc05667a95.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h2><noindex><a rel=\"nofollow\" name=\"Bettercap\"><\/a><\/noindex>Bettercap<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/bettercap\/bettercap\">Bettercap<\/a><\/noindex> \u2014 mocn\u00fd framework pro anal\u00fdzu a \u00fatoky na s\u00edt\u011b, p\u0159i\u010dem\u017e se jedn\u00e1 rovn\u011b\u017e o \u00fatoky na bezdr\u00e1tov\u00e9 s\u00edt\u011b, BLE (bluetooth low energy) a dokonce \u00fatoky MouseJack na bezdr\u00e1tov\u00e1 HID za\u0159\u00edzen\u00ed. Krom\u011b toho obsahuje funkcionalitu pro sb\u011br informac\u00ed z provozu (podobn\u011b jako net-creds). Celkov\u011b, \u0161v\u00fdcarsk\u00fd n\u016f\u017e (v\u0161e v jednom). Ned\u00e1vno se tak\u00e9 dostavil <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/bettercap\/hydra\">grafick\u00e9 webov\u00e9 rozhran\u00ed<\/a><\/noindex>.<\/p>\n<h4>Plusy:<\/h4>\n<p><\/p>\n<ul>\n<li>Sniffer \u00fadaj\u016f \u2014 lze zachyt\u00e1vat nav\u0161t\u00edven\u00e9 URL a HTTPS hostitele, HTTP autentizaci, \u00fadaje z mnoha r\u016fzn\u00fdch protokol\u016f;<\/li>\n<li>Mnoho vestav\u011bn\u00fdch MITM \u00fatok\u016f;<\/li>\n<li>Modul\u00e1rn\u00ed HTTP(S) pr\u016fhledn\u00fd proxy \u2014 lze \u0159\u00eddit provoz podle pot\u0159eb;<\/li>\n<li>Vestav\u011bn\u00fd HTTP server;<\/li>\n<li>Podpora caplet\u016f \u2014 soubor\u016f, kter\u00e9 umo\u017e\u0148uj\u00ed popsat slo\u017eit\u00e9 a automatizovan\u00e9 \u00fatoky skriptov\u00fdm jazykem.<\/li>\n<\/ul>\n<p><\/p>\n<h4>Nev\u00fdhody:<\/h4>\n<p><\/p>\n<ul>\n<li>N\u011bkter\u00e9 moduly \u2014 nap\u0159\u00edklad ble.enum \u2014 jsou \u010d\u00e1ste\u010dn\u011b nepodporov\u00e1ny v macOS a Windows, n\u011bkter\u00e9 jsou ur\u010deny pouze pro Linux \u2014 packet.proxy.<\/li>\n<\/ul>\n<p>\n<img decoding=\"async\" alt=\"N\u00e1stroje pro s\u00ed\u0165, nebo jak za\u010d\u00edt pentester?\" src=\"\/wp-content\/uploads\/2019\/04\/68f5b6ccd737b3fa0ee5235f31dde4d3.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h2><noindex><a rel=\"nofollow\" name=\"gateway_finder\"><\/a><\/noindex>gateway_finder<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/pentestmonkey\/gateway-finder\">gateway finder <\/a><\/noindex> \u2014 skript v Pythonu, kter\u00fd pom\u00e1h\u00e1 ur\u010dit mo\u017en\u00e9 gatewaye v s\u00edti. Je u\u017eite\u010dn\u00fd pro kontrolu segmentace nebo hled\u00e1n\u00ed hostitel\u016f, kte\u0159\u00ed mohou sm\u011brovat do po\u017eadovan\u00e9 pods\u00edt\u011b nebo na Internet. Vhodn\u00e9 pro intern\u00ed penetra\u010dn\u00ed testy, kdy je t\u0159eba rychle zkontrolovat existenci neautorizovan\u00fdch tras nebo tras k jin\u00fdm intern\u00edm lok\u00e1ln\u00edm s\u00edt\u00edm. <\/p>\n<h4>Plusy:<\/h4>\n<p><\/p>\n<ul>\n<li>Jednoduch\u00e9 pou\u017eit\u00ed a p\u0159izp\u016fsoben\u00ed.<\/li>\n<\/ul>\n<p><img decoding=\"async\" alt=\"N\u00e1stroje pro s\u00ed\u0165, nebo jak za\u010d\u00edt pentester?\" src=\"\/wp-content\/uploads\/2019\/04\/dee33c0d4426c3b98e89dd726c5b647c.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h2><noindex><a rel=\"nofollow\" name=\"mitmproxy\"><\/a><\/noindex>mitmproxy<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/mitmproxy\/mitmproxy\">mitmproxy<\/a><\/noindex> \u2014 open-source n\u00e1stroj pro anal\u00fdzu provozu zabezpe\u010den\u00e9ho pomoc\u00ed SSL\/TLS. mitmproxy je vhodn\u00fd pro zachyt\u00e1v\u00e1n\u00ed a modifikaci zabezpe\u010den\u00e9ho provozu, samoz\u0159ejm\u011b s ur\u010dit\u00fdmi omezen\u00edmi; n\u00e1stroj neprov\u00e1d\u00ed \u00fatoky na de\u0161ifrov\u00e1n\u00ed SSL\/TLS. Pou\u017e\u00edv\u00e1 se, kdy\u017e je t\u0159eba zachytit a zaznamenat zm\u011bny v provozu chr\u00e1n\u011bn\u00e9m SSL\/TLS. Skl\u00e1d\u00e1 se z Mitmproxy \u2014 pro proxy provoz, mitmdump \u2014 podobn\u00fd tcpdump, ale pro HTTP(S) provoz, a mitmweb \u2014 webov\u00e9ho rozhran\u00ed pro Mitmproxy.<\/p>\n<h4>Plusy:<\/h4>\n<p><\/p>\n<ul>\n<li>Pracuje s r\u016fzn\u00fdmi protokoly a tak\u00e9 podporuje modifikaci r\u016fzn\u00fdch form\u00e1t\u016f, od HTML po Protobuf;<\/li>\n<li>API pro Python \u2014 umo\u017e\u0148uje ps\u00e1t skripty pro nestandardn\u00ed \u00fakoly;<\/li>\n<li>M\u016f\u017ee pracovat v re\u017eimu transparentn\u00edho proxy se zachyt\u00e1v\u00e1n\u00edm provozu.<\/li>\n<\/ul>\n<p><\/p>\n<h4>Nev\u00fdhody:<\/h4>\n<p><\/p>\n<ul>\n<li>Form\u00e1t dumpu nen\u00ed kompatibiln\u00ed s ni\u010d\u00edm \u2014 obt\u00ed\u017en\u00e9 pou\u017e\u00edt grep, je t\u0159eba ps\u00e1t skripty;<\/li>\n<\/ul>\n<p>\n<img decoding=\"async\" alt=\"N\u00e1stroje pro s\u00ed\u0165, nebo jak za\u010d\u00edt pentester?\" src=\"\/wp-content\/uploads\/2019\/04\/2049cb5c62067cd65b07abdb1a2d40a5.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<img decoding=\"async\" alt=\"N\u00e1stroje pro s\u00ed\u0165, nebo jak za\u010d\u00edt pentester?\" src=\"\/wp-content\/uploads\/2019\/04\/a37457f2faafae55f333b4d6839d5254.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h2><noindex><a rel=\"nofollow\" name=\"SIET\"><\/a><\/noindex>SIET<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/Sab0tag3d\/SIET\">SIET<\/a><\/noindex> \u2014 n\u00e1stroj pro vyu\u017eit\u00ed mo\u017enost\u00ed protokolu Cisco Smart Install. Mo\u017en\u00e9 z\u00edsk\u00e1n\u00ed a modifikace konfigurace, stejn\u011b jako p\u0159evzet\u00ed kontroly nad za\u0159\u00edzen\u00edm Cisco. Pokud se v\u00e1m poda\u0159ilo z\u00edskat konfiguraci za\u0159\u00edzen\u00ed Cisco, m\u016f\u017eete ji zkontrolovat pomoc\u00ed <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/cisco-config-analysis-tool\/ccat\">CCAT<\/a><\/noindex>, tento n\u00e1stroj je u\u017eite\u010dn\u00fd pro anal\u00fdzu bezpe\u010dnosti konfigurace za\u0159\u00edzen\u00ed Cisco.<\/p>\n<h4>Plusy:<\/h4>\n<p>\nPou\u017eit\u00ed protokolu Cisco Smart Install umo\u017e\u0148uje:<\/p>\n<ul>\n<li>Zm\u011bnit adresu tftp-serveru na klientsk\u00e9m za\u0159\u00edzen\u00ed zasl\u00e1n\u00edm jednoho po\u0161kozen\u00e9ho paketu TCP;<\/li>\n<li>Zkop\u00edrovat konfigura\u010dn\u00ed soubor za\u0159\u00edzen\u00ed;<\/li>\n<li>Nahradit konfiguraci za\u0159\u00edzen\u00ed, nap\u0159\u00edklad p\u0159id\u00e1n\u00edm nov\u00e9ho u\u017eivatele;<\/li>\n<li>Aktualizovat obraz iOS na za\u0159\u00edzen\u00ed;<\/li>\n<li>Prove\u010fte libovolnou sadu p\u0159\u00edkaz\u016f na za\u0159\u00edzen\u00ed. Toto je nov\u00e1 funkce, kter\u00e1 funguje pouze ve verz\u00edch 3.6.0E a 15.2 (2) E iOS;<\/li>\n<\/ul>\n<p><\/p>\n<h4>Nev\u00fdhody:<\/h4>\n<p><\/p>\n<ul>\n<li>Pracuje s omezen\u00fdm po\u010dtem za\u0159\u00edzen\u00ed Cisco, tak\u00e9 je pot\u0159eba \u201cb\u00edl\u00e1\u201d ip pro z\u00edsk\u00e1n\u00ed odpov\u011bdi od za\u0159\u00edzen\u00ed, nebo je t\u0159eba b\u00fdt se za\u0159\u00edzen\u00edm ve stejn\u00e9 s\u00edti;<\/li>\n<\/ul>\n<p>\n<img decoding=\"async\" alt=\"N\u00e1stroje pro s\u00ed\u0165, nebo jak za\u010d\u00edt pentester?\" src=\"\/wp-content\/uploads\/2019\/04\/643e5511c44940d1f9c313347c74029a.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h2><noindex><a rel=\"nofollow\" name=\"yersinia\"><\/a><\/noindex>yersinia<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/tomac\/yersinia\">yersinia<\/a><\/noindex> \u2014 r\u00e1mec pro \u00fatoky L2, vytvo\u0159en\u00fd k exploataci bezpe\u010dnostn\u00edch nedostatk\u016f v r\u016fzn\u00fdch s\u00ed\u0165ov\u00fdch protokolech L2.<\/p>\n<h4>Plusy:<\/h4>\n<p><\/p>\n<ul>\n<li>Umo\u017e\u0148uje prov\u00e1d\u011bt \u00fatoky na protokoly STP, CDP, DTP, DHCP, HSRP, VTP a dal\u0161\u00ed.<\/li>\n<\/ul>\n<p><\/p>\n<h4>Nev\u00fdhody:<\/h4>\n<p><\/p>\n<ul>\n<li>Nen\u00ed to nejpohodln\u011bj\u0161\u00ed rozhran\u00ed.<\/li>\n<\/ul>\n<p>\n<img decoding=\"async\" alt=\"N\u00e1stroje pro s\u00ed\u0165, nebo jak za\u010d\u00edt pentester?\" src=\"\/wp-content\/uploads\/2019\/04\/d0cb4b5fac1fc0e5c302ad133d5b4504.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h2><noindex><a rel=\"nofollow\" name=\"proxychains\"><\/a><\/noindex>proxychains<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/haad\/proxychains\">proxychains<\/a><\/noindex> \u2014 n\u00e1stroj, kter\u00fd umo\u017e\u0148uje p\u0159esm\u011brovat provoz aplikace p\u0159es zadan\u00fd SOCKS proxy.<\/p>\n<h4>Plusy:<\/h4>\n<p><\/p>\n<ul>\n<li>Pom\u00e1h\u00e1 p\u0159esm\u011brovat provoz n\u011bkter\u00fdch aplikac\u00ed, kter\u00e9 ve v\u00fdchoz\u00edm nastaven\u00ed neum\u011bj\u00ed pracovat s proxy;<\/li>\n<\/ul>\n<p>\n<img decoding=\"async\" alt=\"N\u00e1stroje pro s\u00ed\u0165, nebo jak za\u010d\u00edt pentester?\" src=\"\/wp-content\/uploads\/2019\/04\/d09dcdaf7429ea29ff70fb682e7cd590.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nV tomto \u010dl\u00e1nku se stru\u010dn\u011b pod\u00edv\u00e1me na v\u00fdhody a nev\u00fdhody hlavn\u00edch n\u00e1stroj\u016f pro penetra\u010dn\u00ed testov\u00e1n\u00ed vnit\u0159n\u00ed s\u00edt\u011b. Sledujte na\u0161e aktualizace, pl\u00e1nujeme publikovat dal\u0161\u00ed podobn\u00e9 v\u00fdb\u011bry: Web, datab\u00e1ze, mobiln\u00ed aplikace - o tom tak\u00e9 ur\u010dit\u011b nap\u00ed\u0161eme.<\/p>\n<p>Sd\u00edlejte sv\u00e9 obl\u00edben\u00e9 utilitky v koment\u00e1\u0159\u00edch!<br \/>\n<br \/>Zdroj: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/dsec\/blog\/447882\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>Toolkit \u043d\u0430\u0447\u0438\u043d\u0430\u044e\u0449\u0435\u0433\u043e \u043f\u0435\u043d\u0442\u0435\u0441\u0442\u0435\u0440\u0430: \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u043c \u043a\u0440\u0430\u0442\u043a\u0438\u0439 \u0434\u0430\u0439\u0434\u0436\u0435\u0441\u0442 \u0433\u043b\u0430\u0432\u043d\u044b\u0445 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u0440\u0438\u0433\u043e\u0434\u044f\u0442\u0441\u044f \u043f\u0440\u0438 \u043f\u0435\u043d\u0442\u0435\u0441\u0442\u0435 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0439 \u0441\u0435\u0442\u0438. \u042d\u0442\u0438 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u044b \u0443\u0436\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0448\u0438\u0440\u043e\u043a\u0438\u043c \u043a\u0440\u0443\u0433\u043e\u043c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u043e\u0432, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u0437\u043d\u0430\u0442\u044c \u043e\u0431 \u0438\u0445 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044f\u0445 \u0438 \u0432\u043b\u0430\u0434\u0435\u0442\u044c \u0432 \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0441\u0442\u0432\u0435 \u0431\u0443\u0434\u0435\u0442 \u043f\u043e\u043b\u0435\u0437\u043d\u043e \u043a\u0430\u0436\u0434\u043e\u043c\u0443. \u0421\u043e\u0434\u0435\u0440\u0436\u0430\u043d\u0438\u0435: Nmap Zmap Masscan Nessus Net-Creds network-miner mitm6 Responder Evil_Foca Bettercap gateway_finder mitmproxy SIET yersinia proxychains Nmap Nmap \u2013 opensource \u0443\u0442\u0438\u043b\u0438\u0442\u0430 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":23689,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-31811","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.4 - aioseo.com -->\n\t<meta name=\"description\" content=\"Toolkit \u043d\u0430\u0447\u0438\u043d\u0430\u044e\u0449\u0435\u0433\u043e \u043f\u0435\u043d\u0442\u0435\u0441\u0442\u0435\u0440\u0430: \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u043c \u043a\u0440\u0430\u0442\u043a\u0438\u0439 \u0434\u0430\u0439\u0434\u0436\u0435\u0441\u0442 \u0433\u043b\u0430\u0432\u043d\u044b\u0445 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u0440\u0438\u0433\u043e\u0434\u044f\u0442\u0441\u044f \u043f\u0440\u0438 \u043f\u0435\u043d\u0442\u0435\u0441\u0442\u0435 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0439 \u0441\u0435\u0442\u0438.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/network-tools-ili-s-chego-nachat-pentesteru\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.4\" \/>\n\t\t<meta property=\"og:locale\" content=\"cs_CZ\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47Network tools, \u0438\u043b\u0438 \u0441 \u0447\u0435\u0433\u043e \u043d\u0430\u0447\u0430\u0442\u044c \u043f\u0435\u043d\u0442\u0435\u0441\u0442\u0435\u0440\u0443? | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"Toolkit \u043d\u0430\u0447\u0438\u043d\u0430\u044e\u0449\u0435\u0433\u043e \u043f\u0435\u043d\u0442\u0435\u0441\u0442\u0435\u0440\u0430: \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u043c \u043a\u0440\u0430\u0442\u043a\u0438\u0439 \u0434\u0430\u0439\u0434\u0436\u0435\u0441\u0442 \u0433\u043b\u0430\u0432\u043d\u044b\u0445 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u0440\u0438\u0433\u043e\u0434\u044f\u0442\u0441\u044f \u043f\u0440\u0438 \u043f\u0435\u043d\u0442\u0435\u0441\u0442\u0435 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0439 \u0441\u0435\u0442\u0438.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/network-tools-ili-s-chego-nachat-pentesteru\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T18:43:17+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2019-10-31T18:43:17+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Network tools, nebo jak za\u010d\u00edt s penetra\u010dn\u00edm testov\u00e1n\u00edm? | ProHoster","description":"Toolkit za\u010d\u00ednaj\u00edc\u00edho penetra\u010dn\u00edho testera: p\u0159edstavujeme stru\u010dn\u00fd p\u0159ehled hlavn\u00edch n\u00e1stroj\u016f, kter\u00e9 se budou hodit p\u0159i penetra\u010dn\u00edm testov\u00e1n\u00ed vnit\u0159n\u00ed s\u00edt\u011b.","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/network-tools-ili-s-chego-nachat-pentesteru","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Network tools, \u0438\u043b\u0438 \u0441 \u0447\u0435\u0433\u043e \u043d\u0430\u0447\u0430\u0442\u044c \u043f\u0435\u043d\u0442\u0435\u0441\u0442\u0435\u0440\u0443? | ProHoster","og:description":"Toolkit \u043d\u0430\u0447\u0438\u043d\u0430\u044e\u0449\u0435\u0433\u043e \u043f\u0435\u043d\u0442\u0435\u0441\u0442\u0435\u0440\u0430: \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u043c \u043a\u0440\u0430\u0442\u043a\u0438\u0439 \u0434\u0430\u0439\u0434\u0436\u0435\u0441\u0442 \u0433\u043b\u0430\u0432\u043d\u044b\u0445 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u0440\u0438\u0433\u043e\u0434\u044f\u0442\u0441\u044f \u043f\u0440\u0438 \u043f\u0435\u043d\u0442\u0435\u0441\u0442\u0435 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0439 \u0441\u0435\u0442\u0438.","og:url":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/network-tools-ili-s-chego-nachat-pentesteru","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:43:17+00:00","article:modified_time":"2019-10-31T18:43:17+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"31811","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 07:57:22","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 03:10:46","updated":"2026-01-21 07:57:22","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/31811","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=31811"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/31811\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media\/23689"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=31811"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=31811"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=31811"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}