{"id":34725,"date":"2019-10-31T22:00:00","date_gmt":"2019-10-31T19:00:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/pishem-reverse-socks5-proxy-na-powershell-chast-1\/"},"modified":"2019-10-31T22:00:00","modified_gmt":"2019-10-31T19:00:00","slug":"pishem-reverse-socks5-proxy-na-powershell-chast-1","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/pishem-reverse-socks5-proxy-na-powershell-chast-1","title":{"rendered":"P\u00ed\u0161eme Reverse socks5 proxy na PowerShell. \u010c\u00e1st 1","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>P\u0159\u00edb\u011bh o v\u00fdzkumu a v\u00fdvoji ve t\u0159ech \u010d\u00e1stech. \u010c\u00e1st 1 \u2014 v\u00fdzkumn\u00e1.<br \/>\nP\u00edsmen je mnoho \u2014 u\u017eitku je\u0161t\u011b v\u00edce.<\/p>\n<h3>Formulace \u00fakolu<\/h3>\n<p>\nB\u011bhem prov\u00e1d\u011bn\u00ed penetra\u010dn\u00edch test\u016f a RedTeam kampan\u00ed se v\u017edy neda\u0159\u00ed vyu\u017e\u00edt standardn\u00ed prost\u0159edky Z\u00e1kazn\u00edk\u016f, jako jsou VPN, RDP, Citrix atd., jako\u017eto zaji\u0161t\u011bn\u00ed p\u0159\u00edstupu do intern\u00ed s\u00edt\u011b. N\u011bkde standardn\u00ed VPN pracuje s v\u00edcefaktorovou autentizac\u00ed a jako druh\u00fd faktor se pou\u017e\u00edv\u00e1 hardwarov\u00fd token, jinde je monitorov\u00e1no velmi p\u0159\u00edsn\u011b a n\u00e1\u0161 vstup p\u0159es VPN se okam\u017eit\u011b st\u00e1v\u00e1 viditeln\u00fdm, jak se \u0159\u00edk\u00e1 \u2014 se v\u0161emi d\u016fsledky, a jinde takov\u00e1 m\u00e9dia jednodu\u0161e nejsou. <\/p>\n<p>V takov\u00fdch p\u0159\u00edpadech je st\u00e1le nutn\u00e9 vytv\u00e1\u0159et tzv. \u201ezp\u011btn\u00e9 tunely\u201c \u2014 spojen\u00ed z intern\u00ed s\u00edt\u011b k extern\u00edmu zdroji nebo serveru, kter\u00fd m\u00e1me pod kontrolou. V r\u00e1mci takov\u00e9ho tunelu ji\u017e m\u016f\u017eeme pracovat s intern\u00edmi zdroji Z\u00e1kazn\u00edk\u016f.<\/p>\n<p>Existuje n\u011bkolik variant takov\u00fdch zp\u011btn\u00fdch tunel\u016f. Nejzn\u00e1m\u011bj\u0161\u00ed z nich je samoz\u0159ejm\u011b Meterpreter. Tak\u00e9 velk\u00fdm z\u00e1jmem v hackerick\u00fdch kruz\u00edch se t\u011b\u0161\u00ed SSH tunely s reverzn\u00edm port forwardingem. Pro prov\u00e1d\u011bn\u00ed zp\u011btn\u00e9ho tunelov\u00e1n\u00ed existuje mnoho prost\u0159edk\u016f a mnoh\u00e9 z nich jsou dob\u0159e prozkoum\u00e1ny a pops\u00e1ny.<br \/>\nSamoz\u0159ejm\u011b, v\u00fdvoj\u00e1\u0159i ochrann\u00fdch \u0159e\u0161en\u00ed nez\u016fst\u00e1vaj\u00ed pozadu a aktivn\u011b detekuj\u00ed podobn\u00e9 akce.<br \/>\nNap\u0159\u00edklad, MSF sezen\u00ed jsou \u00fasp\u011b\u0161n\u011b detekov\u00e1na modern\u00edmi IPS od Cisco nebo Positive Tech, a zp\u011btn\u00fd SSH tunel lze detekovat prakticky jak\u00fdmkoli norm\u00e1ln\u00edm firewallem.<\/p>\n<p>Proto, abychom z\u016fstali nepozorov\u00e1ni v dobr\u00e9 RedTeam kampani \u2014 mus\u00edme budovat zp\u011btn\u00fd tunel netradi\u010dn\u00edmi prost\u0159edky a co nejv\u00edce se p\u0159izp\u016fsobit skute\u010dn\u00e9mu provozu s\u00edt\u011b.<\/p>\n<p>Zkusme naj\u00edt nebo vymyslet n\u011bco podobn\u00e9ho.<br \/>\n<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><br \/>\nNe\u017e n\u011bco vymysl\u00edme, je t\u0159eba pochopit, jak\u00e9ho v\u00fdsledku chceme dos\u00e1hnout, jak\u00e9 funkce by na\u0161e v\u00fdvoj m\u011bla vykon\u00e1vat. Jak\u00e9 budou po\u017eadavky na tunel, abychom mohli pracovat v re\u017eimu maxim\u00e1ln\u00ed diskr\u00e9tnosti?<\/p>\n<p>Je jasn\u00e9, \u017ee pro ka\u017ed\u00fd p\u0159\u00edpad se tyto po\u017eadavky mohou v\u00fdrazn\u011b li\u0161it, ale z praxe lze vy\u010dlenit hlavn\u00ed:<\/p>\n<ul>\n<li> pracovat na OS Windows 7-10. Proto\u017ee ve v\u011bt\u0161in\u011b firemn\u00edch s\u00edt\u00ed se pou\u017e\u00edv\u00e1 pr\u00e1v\u011b Windows;<\/li>\n<li> Klient se p\u0159ipojuje k serveru p\u0159es SSL, aby se vylou\u010dilo odposlouch\u00e1v\u00e1n\u00ed pomoc\u00ed IPS;<\/li>\n<li> P\u0159i p\u0159ipojen\u00ed by klient m\u011bl podporovat pr\u00e1ci p\u0159es proxy server s autorizac\u00ed, proto\u017ee ve mnoha firm\u00e1ch se p\u0159\u00edstup k internetu realizuje p\u0159es proxy. Ve skute\u010dnosti o tom m\u016f\u017ee klientsk\u00fd stroj ani nev\u011bd\u011bt, zat\u00edmco proxy se pou\u017e\u00edv\u00e1 v transparentn\u00edm re\u017eimu. Ale tuto funk\u010dnost mus\u00edme napl\u00e1novat;<\/li>\n<li> Klientsk\u00e1 \u010d\u00e1st by m\u011bla b\u00fdt stru\u010dn\u00e1 a p\u0159enositeln\u00e1;<br \/>\nJe jasn\u00e9, \u017ee pro pr\u00e1ci uvnit\u0159 s\u00edt\u011b objednatele lze na klientsk\u00e9m za\u0159\u00edzen\u00ed nainstalovat OpenVPN a vybudovat plnohodnotn\u00fd tunel k vlastn\u00edmu serveru (na\u0161t\u011bst\u00ed klienti openvpn um\u011bj\u00ed pracovat p\u0159es proxy). Ale, za prv\u00e9, nemus\u00edme b\u00fdt v\u017edy m\u00edstn\u00edmi administr\u00e1tory, a za druh\u00e9, to ud\u011bl\u00e1 tolik hluku, \u017ee slu\u0161n\u00fd SIEM nebo HIPS na n\u00e1s okam\u017eit\u011b \u201eza\u010dne tleskat\u201c. Ide\u00e1ln\u011b by n\u00e1\u0161 klient m\u011bl b\u00fdt takzvan\u00fdm inline n\u00e1strojem, jak jsou nap\u0159\u00edklad realizov\u00e1ny mnoh\u00e9 bash shelly, a m\u011bl by b\u00fdt spou\u0161t\u011bn p\u0159es p\u0159\u00edkazov\u00fd \u0159\u00e1dek, nap\u0159. p\u0159i vykon\u00e1v\u00e1n\u00ed p\u0159\u00edkaz\u016f z makra v aplikaci Word.<\/li>\n<li> N\u00e1\u0161 tunel by m\u011bl b\u00fdt v\u00edcerozm\u011brn\u00fd a podporovat mnoho sou\u010dasn\u00fdch p\u0159ipojen\u00ed;<\/li>\n<li> P\u0159ipojen\u00ed klient-server by m\u011blo m\u00edt n\u011bjakou autorizaci, aby se tunel vytv\u00e1\u0159el pouze pro na\u0161eho klienta, a ne pro v\u0161echny, kdo k n\u00e1m na server p\u0159ijdou na zadanou adresu a port. Ide\u00e1ln\u011b by pro \u201eextern\u00ed u\u017eivatele\u201c m\u011bla b\u00fdt otev\u0159ena landingov\u00e1 str\u00e1nka s ko\u010dkami nebo profesion\u00e1ln\u00edm t\u00e9matem spojen\u00fdm se zdrojovou dom\u00e9nou.<br \/>\nNap\u0159\u00edklad, pokud objednatelem je zdravotnick\u00e1 organizace, pak by se spr\u00e1vci informa\u010dn\u00ed bezpe\u010dnosti, kter\u00fd se rozhodl zkontrolovat zdroj, na kter\u00fd se obracel zam\u011bstnanec kliniky, m\u011bla otev\u0159\u00edt str\u00e1nka s farmaceutick\u00fdmi produkty, Wikipedie s popisem diagn\u00f3zy nebo blog doktora Komarovsk\u00e9ho atd. <\/li>\n<\/ul>\n<p><\/p>\n<h3>Anal\u00fdza existuj\u00edc\u00edch n\u00e1stroj\u016f<\/h3>\n<p>\nNe\u017e vynalezneme sv\u016fj vlastn\u00ed bicykl \u2014 je t\u0159eba prov\u00e9st anal\u00fdzu existuj\u00edc\u00edch bicykl\u016f a pochopit, zda je to opravdu pot\u0159ebn\u00e9, a pravd\u011bpodobn\u011b jsme v t\u00e9to pot\u0159eb\u011b nebyli sami.<\/p>\n<p>Hled\u00e1n\u00ed na internetu (vypad\u00e1 to, \u017ee hled\u00e1me norm\u00e1ln\u011b) a tak\u00e9 vyhled\u00e1v\u00e1n\u00ed na GitHubu podle kl\u00ed\u010dov\u00fdch slov \u201ereverse socks\u201c nep\u0159ineslo p\u0159\u00edli\u0161 mnoho v\u00fdsledk\u016f. V\u011bt\u0161inou se v\u0161echno to\u010d\u00ed kolem vytv\u00e1\u0159en\u00ed ssh tunel\u016f s reverzn\u00edm port forwardingem a v\u0161eho, co s t\u00edm souvis\u00ed. Krom\u011b SSH tunel\u016f lze vyzdvihnout n\u011bkolik \u0159e\u0161en\u00ed:<\/p>\n<p><b><noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/klsecservices\/rpivot\">github.com\/klsecservices\/rpivot<\/a><\/noindex><\/b><br \/>\nStar\u0161\u00ed implementace reverzn\u00edho tunelu od kluk\u016f z Laborato\u0159e Kaspersky. Z n\u00e1zvu je jasn\u00e9, k \u010demu je tento skript ur\u010den. Implementov\u00e1no v Pythonu 2.7, tunel funguje v cleartext re\u017eimu (jak je dnes modern\u00ed \u0159\u00edkat \u2014 pozdrav RKN).<\/p>\n<p><b><noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/tonyseek\/rsocks\">github.com\/tonyseek\/rsocks<\/a><\/noindex><\/b><br \/>\nDal\u0161\u00ed implementace v Pythonu, tak\u00e9 v cleartextu, ale s v\u00edce funkcemi. Naps\u00e1no jako modul a existuje API pro integraci \u0159e\u0161en\u00ed do vlastn\u00edch projekt\u016f.<\/p>\n<p><b><noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/llkat\/rsockstun\">github.com\/llkat\/rsockstun<\/a><\/noindex><\/b><br \/>\n<b><noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/mis-team\/rsockstun\">github.com\/mis-team\/rsockstun<\/a><\/noindex><\/b><br \/>\nPrvn\u00ed odkaz \u2014 p\u016fvodn\u00ed verze implementace reverse socks v golangu (nen\u00ed podporov\u00e1na v\u00fdvoj\u00e1\u0159em).<br \/>\nDruh\u00fd odkaz \u2014 na\u0161e \u00faprava s dal\u0161\u00edmi funkcemi, tak\u00e9 v golangu. V na\u0161\u00ed verzi jsme implementovali SSL, pr\u00e1ci p\u0159es proxy s NTLM autorizac\u00ed, autorizaci na klientovi, vstupn\u00ed str\u00e1nku p\u0159i nespr\u00e1vn\u00e9m hesle (sp\u00ed\u0161e \u2014 p\u0159esm\u011brov\u00e1n\u00ed na vstupn\u00ed str\u00e1nku), v\u00edcerozm\u011brn\u00fd re\u017eim (tzn. tunel m\u016f\u017ee pou\u017e\u00edvat v\u00edce lid\u00ed najednou), syst\u00e9m pingov\u00e1n\u00ed klienta, aby se zjistilo, zda je \u017eiv\u00fd nebo ne.<\/p>\n<p><b><noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/jun7th\/tsocks\">github.com\/jun7th\/tsocks<\/a><\/noindex><\/b><br \/>\nImplementace reverzn\u00edch socks od na\u0161ich \u201e\u010d\u00ednsk\u00fdch p\u0159\u00e1tel\u201c v Pythonu. Tam je tak\u00e9 pro lenochy a \u201enesmrteln\u00e9\u201c ji\u017e hotov\u00fd bin\u00e1rn\u00ed soubor (exe), sestaven\u00fd \u010c\u00ed\u0148any a p\u0159ipraven\u00fd k pou\u017eit\u00ed. Tady v\u00ed jen \u010d\u00ednsk\u00fd b\u016fh, co v\u0161echno m\u016f\u017ee b\u00fdt v tomto bin\u00e1\u0159i, krom\u011b z\u00e1kladn\u00ed funkce, tak\u017ee pou\u017e\u00edvejte na vlastn\u00ed nebezpe\u010d\u00ed.<\/p>\n<p><b><noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/securesocketfunneling\/ssf\">github.com\/securesocketfunneling\/ssf<\/a><\/noindex><\/b><br \/>\nDocela zaj\u00edmav\u00fd projekt v C++ pro implementaci reverzn\u00edch socks a nejen to. Krom\u011b reverzn\u00edho tunelu m\u016f\u017ee prov\u00e1d\u011bt port forwarding, vytv\u00e1\u0159en\u00ed p\u0159\u00edkazov\u00e9ho shellu atd.<\/p>\n<p><b>MSF meterpreter<\/b><br \/>\nTady jak se \u0159\u00edk\u00e1, bez koment\u00e1\u0159\u016f. V\u0161ichni vzd\u011blan\u00ed hacke\u0159i jsou s touto v\u011bc\u00ed dob\u0159e obezn\u00e1meni a ch\u00e1pou, jak snadno ji detekuj\u00ed ochrann\u00e9 prost\u0159edky.<\/p>\n<p>V\u0161echny v\u00fd\u0161e zm\u00edn\u011bn\u00e9 n\u00e1stroje funguj\u00ed na podobn\u00e9 technologii: na stroji uvnit\u0159 s\u00edt\u011b se spust\u00ed p\u0159edem p\u0159ipraven\u00fd spustiteln\u00fd bin\u00e1rn\u00ed modul, kter\u00fd vytvo\u0159\u00ed spojen\u00ed s extern\u00edm serverem. Na serveru se spust\u00ed SOCKS4\/5 server, kter\u00fd p\u0159ij\u00edm\u00e1 p\u0159ipojen\u00ed a p\u0159en\u00e1\u0161\u00ed je na klienta.<\/p>\n<p>Nev\u00fdhodou v\u0161ech v\u00fd\u0161e uveden\u00fdch n\u00e1stroj\u016f je, \u017ee bu\u010f je na klientsk\u00e9m stroji nutn\u00e9 m\u00edt nainstalovan\u00fd Python nebo Golang (jak \u010dasto jste potkali nainstalovan\u00fd Python na stroj\u00edch, nap\u0159\u00edklad \u0159editele spole\u010dnosti nebo kancel\u00e1\u0159sk\u00fdch pracovn\u00edk\u016f?), nebo je t\u0159eba na tuto ma\u0161inu p\u0159en\u00e1\u0161et p\u0159edem sestaven\u00fd bin\u00e1\u0159 (v podstat\u011b python a skript v jednom balen\u00ed) a tento bin\u00e1\u0159 tam spustit. A stahov\u00e1n\u00ed exe a jeho n\u00e1sledn\u00e9 spu\u0161t\u011bn\u00ed \u2014 to u\u017e je pro m\u00edstn\u00ed antivir nebo HIPS p\u011bkn\u00e1 signatura.<\/p>\n<p>Obecn\u011b vzato, z\u00e1v\u011br se nab\u00edzej\u00ed s\u00e1m \u2014 pot\u0159ebujeme \u0159e\u0161en\u00ed na PowerShell. Te\u010f n\u00e1s za\u010dnou bombardovat raj\u010daty \u2014 \u017ee PowerShell je u\u017e d\u00e1vno vy\u010dp\u011bl\u00fd, je sledov\u00e1n, blokov\u00e1n atd. atd. Ve skute\u010dnosti \u2014 rozhodn\u011b ne v\u0161ude. Odpov\u011bdn\u011b prohla\u0161ujeme. Mimochodem, existuje spousta zp\u016fsob\u016f, jak obej\u00edt blokace (tady op\u011bt modern\u00ed fr\u00e1ze o pozdravech RKN \ud83d\ude42), po\u010d\u00ednaje jednoduch\u00fdm p\u0159ejmenov\u00e1n\u00edm powershell.exe na cmdd.exe a kon\u010de powerdll a podobn\u011b.<\/p>\n<h3>Za\u010d\u00edn\u00e1me vym\u00fd\u0161let<\/h3>\n<p>\nJe pochopiteln\u00e9, \u017ee nejprve se pod\u00edv\u00e1me na Google a\u2026 nenajdeme v\u016fbec nic na toto t\u00e9ma (pokud n\u011bkdo na\u0161el \u2014 po\u0161lete odkazy do koment\u00e1\u0159\u016f). Existuje jen <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/p3nt4\/Invoke-SocksProxy\">implementace<\/a><\/noindex> Socks5 na PowerShell, ale to je b\u011b\u017en\u00fd \"p\u0159\u00edm\u00fd\" socks, kter\u00fd m\u00e1 \u0159adu sv\u00fdch nev\u00fdhod (o nich si promluv\u00edme pozd\u011bji). Samoz\u0159ejm\u011b, \u017ee ho m\u016f\u017eeme jednoduch\u00fdm pohybem ruky p\u0159etvo\u0159it na reverzn\u00ed, ale to bude jen jednovl\u00e1knov\u00fd socks, co\u017e pro n\u00e1s nen\u00ed p\u0159esn\u011b to, co pot\u0159ebujeme.<\/p>\n<p>Tak\u017ee jsme nic hotov\u00e9ho nena\u0161li, a proto si budeme muset vymyslet vlastn\u00ed kolo. Z\u00e1klad na\u0161eho kola vezmeme <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/mis-team\/rsockstun\">na\u0161\u00ed vyvinut\u00e9<\/a><\/noindex> reverzn\u00ed socks na Golangu, a klienta k n\u011bmu realizujeme na PowerShell.<\/p>\n<p><b>RSocksTun<\/b><br \/>\nJak vlastn\u011b funguje rsockstun?<\/p>\n<p>Z\u00e1kladn\u00ed funkcionalita RsocksTun (d\u00e1le v textu \u2014 rs) spo\u010d\u00edv\u00e1 ve dvou softwarov\u00fdch komponent\u00e1ch \u2014 Yamux a Socks5 server. Socks5 server je b\u011b\u017en\u00fd lok\u00e1ln\u00ed socks5, kter\u00fd b\u011b\u017e\u00ed na klientovi. A multiplexov\u00e1n\u00ed spojen\u00ed k n\u011bmu (pamatujete na v\u00edcero vl\u00e1ken?) je zaji\u0161t\u011bno pomoc\u00ed yamux (<noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/hashicorp\/yamux\/\">je\u0161t\u011b jeden multiplexer<\/a><\/noindex>). Tato architektura umo\u017e\u0148uje spou\u0161t\u011bt v\u00edce klientsk\u00fdch socks5 server\u016f a sm\u011brovat extern\u00ed p\u0159ipojen\u00ed k nim, proch\u00e1zej\u00edc\u00edm p\u0159es jedno jedin\u011bTCP spojen\u00ed (skoro jako v meterpreteru) od klienta k serveru, \u010d\u00edm\u017e implementuje v\u00edcetrup\u00fd re\u017eim, bez kter\u00e9ho bychom prost\u011b nemohli \u0159\u00e1dn\u011b pracovat v intern\u00ed s\u00edti.<\/p>\n<p>Podstata fungov\u00e1n\u00ed yamuxu spo\u010d\u00edv\u00e1 v tom, \u017ee zav\u00e1d\u00ed dodate\u010dnou s\u00ed\u0165ovou \u00farove\u0148 stream\u016f, realizovanou ve form\u011b 12-bajtov\u00e9 hlavi\u010dky pro ka\u017ed\u00fd paket. (Zde z\u00e1m\u011brn\u011b pou\u017e\u00edv\u00e1me slovo \u201estream\u201c, nikoli tok, abychom nepletli \u010dten\u00e1\u0159e s programov\u00fdm tokem \u201ethread\u201c \u2014 tuto definici budeme tak\u00e9 pou\u017e\u00edvat v tomto \u010dl\u00e1nku). Uvnit\u0159 yamux hlavi\u010dky se nach\u00e1zej\u00ed \u010d\u00edslo streamu, p\u0159\u00edznaky pro zah\u00e1jen\u00ed\/ukon\u010den\u00ed streamu, po\u010det p\u0159en\u00e1\u0161en\u00fdch byt\u016f a velikost p\u0159enosov\u00e9ho okna.<\/p>\n<p><img decoding=\"async\" alt=\"P\u00ed\u0161eme Reverse socks5 proxy na PowerShell. \u010c\u00e1st 1\" src=\"\/wp-content\/uploads\/2019\/05\/3a1bc23bdc90176f7cd37f112a8a1a6c.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nKrom\u011b zah\u00e1jen\u00ed\/ukon\u010den\u00ed streamu yamux implementuje mechanismus keepalive, kter\u00fd umo\u017e\u0148uje sledovat funk\u010dnost zaveden\u00e9ho komunika\u010dn\u00edho kan\u00e1lu. Fungov\u00e1n\u00ed mechanismu keepalive zpr\u00e1v je nastaveno p\u0159i vytv\u00e1\u0159en\u00ed Yamux relace. V podstat\u011b tam jsou pouze dv\u011b nastaven\u00ed: povolit\/zak\u00e1zat a frekvence odes\u00edl\u00e1n\u00ed paket\u016f v sekund\u00e1ch. Keepalive zpr\u00e1vy m\u016f\u017ee pos\u00edlat jak yamux server, tak yamux klient. Po p\u0159ijet\u00ed keepalive zpr\u00e1vy je vzd\u00e1len\u00e1 strana povinna na ni odpov\u011bd\u011bt odesl\u00e1n\u00edm zpr\u00e1vy se stejn\u00fdm identifik\u00e1torem (v podstat\u011b \u010d\u00edslem), kter\u00fd p\u0159ijala. Obecn\u011b plat\u00ed, \u017ee keepalive je to sam\u00e9 co ping, pouze pro yamux.<\/p>\n<p>Podrobn\u011b ve\u0161ker\u00e1 technika fungov\u00e1n\u00ed multiplexoru: typy paket\u016f, p\u0159\u00edznaky zah\u00e1jen\u00ed a ukon\u010den\u00ed p\u0159ipojen\u00ed, mechanismus p\u0159enosu dat je pops\u00e1na v <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/hashicorp\/yamux\/blob\/master\/spec.md\">specifikaci<\/a><\/noindex> pro yamux. <\/p>\n<h3>Z\u00e1v\u011br prvn\u00ed \u010d\u00e1sti<\/h3>\n<p>\nTak\u017ee v prvn\u00ed \u010d\u00e1sti \u010dl\u00e1nku jsme se sezn\u00e1mili s n\u011bkter\u00fdmi n\u00e1stroji pro organizaci zp\u011btn\u00fdch tunel\u016f, pod\u00edvali jsme se na jejich v\u00fdhody a nev\u00fdhody, prozkoumali mechanismus fungov\u00e1n\u00ed multiplexoru Yamux a popsali z\u00e1kladn\u00ed po\u017eadavky na nov\u011b vytv\u00e1\u0159en\u00fd powershell modul. V dal\u0161\u00ed \u010d\u00e1sti se pust\u00edme do v\u00fdvoje samotn\u00e9ho modulu, prakticky od nuly. Pokra\u010dov\u00e1n\u00ed p\u0159\u00ed\u0161t\u011b. Neodch\u00e1zejte \ud83d\ude42<br \/>\n<br \/>Zdroj: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/post\/453870\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0418\u0441\u0442\u043e\u0440\u0438\u044f \u043e\u0431 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0438 \u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0432 3-\u0445 \u0447\u0430\u0441\u0442\u044f\u0445. \u0427\u0430\u0441\u0442\u044c 1 \u2014 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0430\u044f. \u0411\u0443\u043a\u043e\u0432 \u043c\u043d\u043e\u0433\u043e \u2014 \u043f\u043e\u043b\u044c\u0437\u044b \u0435\u0449\u0435 \u0431\u043e\u043b\u044c\u0448\u0435. \u041f\u043e\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 \u0437\u0430\u0434\u0430\u0447\u0438 \u0412 \u0445\u043e\u0434\u0435 \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043f\u0435\u043d\u0442\u0435\u0441\u0442\u043e\u0432 \u0438 RedTeam \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0439 \u043d\u0435 \u0432\u0441\u0435\u0433\u0434\u0430 \u0443\u0434\u0430\u0435\u0442\u0441\u044f \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0448\u0442\u0430\u0442\u043d\u044b\u043c\u0438 \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430\u043c\u0438 \u0417\u0430\u043a\u0430\u0437\u0447\u0438\u043a\u043e\u0432, \u0442\u0430\u043a\u0438\u043c\u0438 \u043a\u0430\u043a VPN, RDP, Citrix \u0438 \u0442.\u0434. \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0437\u0430\u043a\u0440\u0435\u043f\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0437\u0430\u0445\u043e\u0434\u0430 \u0432\u043e \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u044e\u044e \u0441\u0435\u0442\u044c. \u0413\u0434\u0435-\u0442\u043e \u0448\u0442\u0430\u0442\u043d\u044b\u0439 VPN \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u043f\u043e MFA [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":26164,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-34725","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0418\u0441\u0442\u043e\u0440\u0438\u044f \u043e\u0431 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0438 \u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0432 3-\u0445 \u0447\u0430\u0441\u0442\u044f\u0445.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/pishem-reverse-socks5-proxy-na-powershell-chast-1\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"cs_CZ\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u041f\u0438\u0448\u0435\u043c Reverse socks5 proxy \u043d\u0430 powershell.\u0427\u0430\u0441\u0442\u044c 1 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0418\u0441\u0442\u043e\u0440\u0438\u044f \u043e\u0431 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0438 \u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0432 3-\u0445 \u0447\u0430\u0441\u0442\u044f\u0445.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/pishem-reverse-socks5-proxy-na-powershell-chast-1\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T19:00:00+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2019-10-31T19:00:00+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47P\u00ed\u0161eme Reverzn\u00ed socks5 proxy na powershell. \u010c\u00e1st 1 | ProHoster","description":"P\u0159\u00edb\u011bh o v\u00fdzkumu a v\u00fdvoji ve 3 \u010d\u00e1stech.","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/pishem-reverse-socks5-proxy-na-powershell-chast-1","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041f\u0438\u0448\u0435\u043c Reverse socks5 proxy \u043d\u0430 powershell.\u0427\u0430\u0441\u0442\u044c 1 | ProHoster","og:description":"\u0418\u0441\u0442\u043e\u0440\u0438\u044f \u043e\u0431 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0438 \u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0432 3-\u0445 \u0447\u0430\u0441\u0442\u044f\u0445.","og:url":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/pishem-reverse-socks5-proxy-na-powershell-chast-1","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:00:00+00:00","article:modified_time":"2019-10-31T19:00:00+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"34725","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 20:23:33","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 02:16:32","updated":"2026-01-21 20:23:33","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/34725","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=34725"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/34725\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media\/26164"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=34725"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=34725"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=34725"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}