{"id":31811,"date":"2019-10-31T21:43:17","date_gmt":"2019-10-31T18:43:17","guid":{"rendered":"https:\/\/prohoster.info\/blog\/network-tools-ili-s-chego-nachat-pentesteru\/"},"modified":"2019-10-31T21:43:17","modified_gmt":"2019-10-31T18:43:17","slug":"network-tools-ili-s-chego-nachat-pentesteru","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/network-tools-ili-s-chego-nachat-pentesteru","title":{"rendered":"Network tools, v\u00f5i kuidas alustada pentrikseriga?","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Algaja pentestija t\u00f6\u00f6riistakomplekt: esitame l\u00fchikese \u00fclevaate peamistest t\u00f6\u00f6riistadest, mis on vajalikud sisev\u00f5rgu pentestimiseks. Need t\u00f6\u00f6riistad on juba laialdaselt kasutusel, seega on kasulik teada nende v\u00f5imalusi ja osata neid t\u00e4ielikult kasutada. <\/p>\n<p><img decoding=\"async\" alt=\"Network tools, v\u00f5i kuidas alustada pentrikseriga?\" src=\"\/wp-content\/uploads\/2019\/04\/a6846992cd5eb7769c87bbfb5aaaabbc.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<h2>Sisu:<\/h2>\n<p><\/p>\n<ul>\n<li> <noindex><a rel=\"nofollow\" href=\"#Nmap\">Nmap<\/a><\/noindex><\/li>\n<li> <noindex><a rel=\"nofollow\" href=\"#Zmap\">Zmap<\/a><\/noindex><\/li>\n<li> <noindex><a rel=\"nofollow\" href=\"#Masscan\">Masscan<\/a><\/noindex><\/li>\n<li> <noindex><a rel=\"nofollow\" href=\"#Nessus\">Nessus<\/a><\/noindex><\/li>\n<li> <noindex><a rel=\"nofollow\" href=\"#Net-Creds\">Net-Creds<\/a><\/noindex><\/li>\n<li> <noindex><a rel=\"nofollow\" href=\"#network-miner\">network-miner<\/a><\/noindex><\/li>\n<li> <noindex><a rel=\"nofollow\" href=\"#mitm6\">mitm6<\/a><\/noindex><\/li>\n<li> <noindex><a rel=\"nofollow\" href=\"#Responder\">Responder<\/a><\/noindex><\/li>\n<li> <noindex><a rel=\"nofollow\" href=\"#Evil_Foca\">Evil_Foca<\/a><\/noindex><\/li>\n<li> <noindex><a rel=\"nofollow\" href=\"#Bettercap\">Bettercap<\/a><\/noindex><\/li>\n<li> <noindex><a rel=\"nofollow\" href=\"#gateway_finder\">gateway_finder<\/a><\/noindex><\/li>\n<li> <noindex><a rel=\"nofollow\" href=\"#mitmproxy\">mitmproxy<\/a><\/noindex><\/li>\n<li> <noindex><a rel=\"nofollow\" href=\"#SIET\">SIET<\/a><\/noindex><\/li>\n<li> <noindex><a rel=\"nofollow\" href=\"#yersinia\">yersinia<\/a><\/noindex><\/li>\n<li> <noindex><a rel=\"nofollow\" href=\"#proxychains\">proxychains<\/a><\/noindex><\/li>\n<\/ul>\n<p><\/p>\n<h2><noindex><a rel=\"nofollow\" name=\"Nmap\"><\/a><\/noindex>Nmap<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/nmap.org\/\">Nmap<\/a><\/noindex> \u2013 avatud l\u00e4htekoodiga t\u00f6\u00f6riist v\u00f5rkude skaneerimiseks, on \u00fcks populaarsemaid t\u00f6\u00f6riistu k\u00fcberkaitsjate ja s\u00fcsteemihaldurite seas. Seda kasutatakse peamiselt portide skaneerimiseks, kuid lisaks on see varustatud hulga kasulike funktsioonidega, mist\u00f5ttu teeb Nmap-ist <b>super-t\u00f6\u00f6riista<\/b> v\u00f5rkude uurimiseks.<\/p>\n<p>Lisaks avatud\/suletud portide kontrollimisele saab Nmap identifitseerida teenuse, mis kuulab avatud porti, ja selle versiooni, ning m\u00f5nikord aitab ka tuvastada operatsioonis\u00fcsteemi. NMap toetab skaneerimiseks skripte (NSE - Nmap Scripting Engine). Skriptide abil on v\u00f5imalik kontrollida haavatavusi erinevates teenustes (kui loomulikult on nende kohta olemas skript, v\u00f5i saab alati kirjutada oma). <\/p>\n<p>Seega v\u00f5imaldab Nmap koostada p\u00f5hjaliku v\u00f5rgu kaardi, saada maksimaalset teavet v\u00f5rgu hostides k\u00e4ivitunud teenuste kohta ning ennetavalt kontrollida m\u00f5ningaid haavatavusi. Nmap-il on ka paindlikud skaneerimise seadistused, skaneerimise kiiruse, voogude arvu, skaneerimiste r\u00fchmade arvu jne seadistamine.<br \/>\nSobib v\u00e4ikev\u00f5rkude skaneerimiseks ning on asendamatu \u00fcksikute hostide t\u00e4ppskaneerimisel.<\/p>\n<h4>Plussid:<\/h4>\n<ul>\n<li>T\u00f6\u00f6tleb kiiresti v\u00e4ikese arvu hostidega;<\/li>\n<li>Seadistuste paindlikkus - v\u00f5imalus kombineerida valikuid nii, et saada maksimaalselt informatiivseid andmeid m\u00f5istlikus ajas; <\/li>\n<li>Paralleelsed skaneeringud - sihthostide nimekiri jagatakse r\u00fchmadesse, seej\u00e4rel skaneeritakse iga r\u00fchm j\u00e4rjestikku, r\u00fchmas kasutatakse paralleelselt skaneerimist. Samuti on r\u00fchmitamine v\u00e4ike puudus (vt allpool);<\/li>\n<li>Eelseadistatud skriptide kogumid erinevate \u00fclesannete jaoks - ei pea kulutama palju aega konkreetsete skriptide otsimisele, piisab, kui m\u00e4\u00e4rata skriptigrupp;<\/li>\n<li>Tulemuste esitamine - 5 erinevat formaati, sealhulgas XML, mis v\u00f5ib olla imporditud teistesse t\u00f6\u00f6riistadesse;<\/li>\n<\/ul>\n<p><\/p>\n<h4>Miinused:<\/h4>\n<p><\/p>\n<ul>\n<li>Hostide r\u00fchma skaneerimine - teave m\u00f5ne hosti kohta ei ole saadaval, kuni kogu r\u00fchma skaneerimine on l\u00f5petatud. Selle saab lahendada, m\u00e4\u00e4rates optsioonides maksimaalse r\u00fchma suuruse ja maksimaalse ajavahemiku, mille jooksul oodatakse vastust p\u00e4ringule, enne kui katse l\u00f5petatakse v\u00f5i tehakse uus katse;<\/li>\n<li>Nmap saadab sihtporti SYN-pakette ja ootab vastuspaketti v\u00f5i ajastu t\u00f5rke sel juhul, kui vastust pole. See m\u00f5jutab skaneerija \u00fcldist j\u00f5udlust v\u00f5rreldes as\u00fcnkroonsete skaneerijatega (n\u00e4iteks zmap v\u00f5i masscan);<\/li>\n<li>Suure v\u00f5rgu skaneerimisel, kasutades kiirus- ja paralleelsuslippe (&#8212;min-rate, &#8212;min-parallelism), v\u00f5ivad tulemused anda vale-negatiivseid tulemusi, j\u00e4ttes avatud pordid hostist avastamata. Nende valikute kasutamisel tuleks olla ettevaatlik, kuna k\u00f5rge paketim\u00e4\u00e4r v\u00f5ib p\u00f5hjustada tahtmatut DoS-i. <\/li>\n<\/ul>\n<p>\n<img decoding=\"async\" alt=\"Network tools, v\u00f5i kuidas alustada pentrikseriga?\" src=\"\/wp-content\/uploads\/2019\/04\/189c9a5145449871571ad11d8b0be9c2.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h2><noindex><a rel=\"nofollow\" name=\"Zmap\"><\/a><\/noindex>Zmap<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/zmap\/zmap\">Zmap<\/a><\/noindex> (\u00e4rge segage ZenMap-iga) - samuti avatud l\u00e4htekoodiga skaneerija, mis loodi kiiremana alternatiivina Nmap-ile.<\/p>\n<p>Erinevalt nmap-ist - Zmap ei oota SYN-paketi vastust, vaid j\u00e4tkab skaneerimist, oodates samal ajal vastuseid k\u00f5ikidelt hostidelt, seega ei hooli ta \u00fchenduse olekust. Kui vastus SYN-paketile j\u00f5uab, m\u00f5istab Zmap paketi sisu p\u00f5hjal, milline port ja millisel hostil oli avatud. Lisaks saadab Zmap skaneeritavale pordile ainult \u00fche SYN-paketi. Samuti on v\u00f5imalik kasutada PF_RING'i suurte v\u00f5rkude kiireks skaneerimiseks, kui juhuslikult on sul 10-gigabitine liides ja \u00fchilduv v\u00f5rgukaart.<\/p>\n<h4>Plussid:<\/h4>\n<p><\/p>\n<ul>\n<li>Skaneerimise kiirus;<\/li>\n<li>Zmap genereerib Etherneti raame, m\u00f6\u00f6da s\u00fcsteemset TCP\/IP steki;<\/li>\n<li>PF_RING'i kasutamise v\u00f5imalus;<\/li>\n<li>ZMap juhuslikustab sihtm\u00e4rke, et koormust \u00fchtlaselt jagada skaneeritaval poolel;<\/li>\n<li>V\u00f5imalus integreeruda ZGrab'iga (t\u00f6\u00f6riist teenuste teabe kogumiseks rakendustasandil L7).<\/li>\n<\/ul>\n<p><\/p>\n<h4>Miinused:<\/h4>\n<p><\/p>\n<ul>\n<li>V\u00f5ib tekitada v\u00f5rgu seadmete teenuse t\u00f5rke, n\u00e4iteks takistada vahepeatuste marsruutereid, hoolimata jaotatud koormusest, kuna k\u00f5ik paketid l\u00e4bivad \u00fche marsruuteri.<\/li>\n<\/ul>\n<p>\n<img decoding=\"async\" alt=\"Network tools, v\u00f5i kuidas alustada pentrikseriga?\" src=\"\/wp-content\/uploads\/2019\/04\/474b04785f27540510421d4fb715d4b4.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h2><noindex><a rel=\"nofollow\" name=\"Masscan\"><\/a><\/noindex>Masscan<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/robertdavidgraham\/masscan\">Masscan<\/a><\/noindex> \u2014 \u00fcllatavalt on see ka avatud l\u00e4htekoodiga skanner, mis loodi \u00fche eesm\u00e4rgiga \u2013 skaneerida Internetti veelgi kiiremini (v\u00e4hem kui 6 minutiga kiirusel ~10 miljonit paketti\/s). Tegelikult t\u00f6\u00f6tab see peaaegu samamoodi nagu Zmap, kuid veel kiiremini.<\/p>\n<h4>Plussid:<\/h4>\n<p><\/p>\n<ul>\n<li>S\u00fcntaks on sarnane Nmapiga ning programm toetab ka m\u00f5ningaid Nmapiga \u00fchilduvaid v\u00f5imalusi;<\/li>\n<li>T\u00f6\u00f6tamise kiirus \u2013 \u00fcks kiiremaid as\u00fcnkroonseid skannereid.<\/li>\n<li>Paindlik skaneerimismehhanism \u2013 katkestatud skaneerimise j\u00e4tkamine, koormuse jaotamine mitme seadme vahel (nagu Zmapis).<\/li>\n<\/ul>\n<p><\/p>\n<h4>Miinused:<\/h4>\n<p><\/p>\n<ul>\n<li>Samamoodi nagu Zmapiga on koormus ise v\u00f5rgule \u00e4\u00e4rmiselt k\u00f5rge, mis v\u00f5ib p\u00f5hjustada DoS;<\/li>\n<li>Vaikimisi ei ole v\u00f5imalik skaneerida rakendustasandi L7-l;<\/li>\n<\/ul>\n<p>\n<img decoding=\"async\" alt=\"Network tools, v\u00f5i kuidas alustada pentrikseriga?\" src=\"\/wp-content\/uploads\/2019\/04\/cc919cc2dfd848594f4d8d6a35f9c1cf.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h2><noindex><a rel=\"nofollow\" name=\"Nessus\"><\/a><\/noindex>Nessus<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/www.tenable.com\/products\/nessus\/nessus-professional\">Nessus<\/a><\/noindex> \u2014 skanner, et automatiseerida s\u00fcsteemi tuntud haavatavuste kontrollimist ja avastamist. Allikas on suletud, aga olemas on tasuta versioon Nessus Home, mis v\u00f5imaldab skaneerida kuni 16 IP-aadressi sama kiirusel ja detailse anal\u00fc\u00fcsi tasemel kui makstud versioon.<\/p>\n<p>Suudab tuvastada haavatavad teenuste v\u00f5i serverite versioonid, avastada s\u00fcsteemi konfiguratsioonivigu, teostada bruteforce'i s\u00f5naraamiparoolidele. Seda saab kasutada teenuste (nt e-post, uuendused jne) seadistuste \u00f5igsuse m\u00e4\u00e4ramiseks ning samuti PCI DSS auditi ettevalmistamiseks. Lisaks saab Nessusesse edastada hosti mandaati (SSH v\u00f5i domeeni kasutajakonto Active Directorys) ja skanner saab hostile ligip\u00e4\u00e4su ning viib l\u00e4bi kontrollid otse selle peal, seda v\u00f5imalust nimetatakse credential scan. Mugav ettev\u00f5tetele, kes viivad l\u00e4bi oma v\u00f5rkude auditeid.<\/p>\n<h4>Plussid:<\/h4>\n<p><\/p>\n<ul>\n<li>Iga haavatavuse jaoks eraldi stsenaariumid, mille andmebaasi pidevalt uuendatakse;<\/li>\n<li>Tulemuste v\u00e4ljund \u2013 lihttekst, XML, HTML ja LaTeX;<\/li>\n<li>Nessus API \u2013 v\u00f5imaldab automatiseerida skaneerimise ja tulemuste saamise protsesse;<\/li>\n<li>Credential Scan, saab kasutada Windowsi v\u00f5i Linuxi mandaate uuenduste v\u00f5i muude haavatavuste kontrollimiseks;<\/li>\n<li>V\u00f5imalus kirjutada oma sisseehitatud turvamooduleid \u2013 skanneris on oma skriptikeel NASL (Nessus Attack Scripting Language);<\/li>\n<li>Saab m\u00e4\u00e4rata regulaarse skaneerimise aja kohalikus v\u00f5rgus \u2013 t\u00e4nu sellele teab Infoturbe Teenistus k\u00f5iki muudatusi turvakonfiguratsioonis, uusi hoste ja s\u00f5naraamiparoolide v\u00f5i vaikimisi paroolide kasutamist.<\/li>\n<\/ul>\n<p><\/p>\n<h4>Miinused:<\/h4>\n<p><\/p>\n<ul>\n<li>Skaneeritavate s\u00fcsteemide t\u00f6\u00f6s v\u00f5ivad esineda katkestusi \u2013 v\u00e4lja l\u00fclitatud safe checks valikuga tuleb t\u00f6\u00f6tada ettevaatlikult;<\/li>\n<li>\u00c4riotstarbeline versioon ei ole tasuta.<\/li>\n<\/ul>\n<p>\n<img decoding=\"async\" alt=\"Network tools, v\u00f5i kuidas alustada pentrikseriga?\" src=\"\/wp-content\/uploads\/2019\/04\/07117e6a14a384a1ce2d285a19ca08fb.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h2><noindex><a rel=\"nofollow\" name=\"Net-Creds\"><\/a><\/noindex>Net-Creds<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/DanMcInerney\/net-creds\">Net-Creds<\/a><\/noindex> \u2014 Pythonis loodud t\u00f6\u00f6riist paroolide ja hash'ide kogumiseks, samuti muu teabe, n\u00e4iteks k\u00fclastatud URLide, allalaaditud failide ja muu teabe kogumiseks liikluses, nii reaalajas MiTM-i r\u00fcnnakute ajal kui ka eelnevalt salvestatud PCAP-failidest. Sobib suurte liiklusmahtude kiireks ja pinnapealseks anal\u00fc\u00fcsiks, n\u00e4iteks v\u00f5rgu MiTM-r\u00fcnnakute puhul, kus aeg on piiratud ja k\u00e4sitsi anal\u00fc\u00fcs Wiresharkiga v\u00f5tab palju aega.<\/p>\n<h4>Plussid:<\/h4>\n<p><\/p>\n<ul>\n<li>Teenuste tuvastamine p\u00f5hineb pakettide anal\u00fc\u00fcsil, mitte teenuse m\u00e4\u00e4ramisel kasutatava pordi numbri j\u00e4rgi;<\/li>\n<li>Lihtne kasutada;<\/li>\n<li>Lai andmete ekstraheerimise spekter \u2013 sealhulgas kasulikud ja paroolid FTP, POP, IMAP, SMTP, protokollid NTLMv1\/v2, samuti teave HTTP-p\u00e4ringutest, n\u00e4iteks login-formid ja basic auth;<\/li>\n<\/ul>\n<p><img decoding=\"async\" alt=\"Network tools, v\u00f5i kuidas alustada pentrikseriga?\" src=\"\/wp-content\/uploads\/2019\/04\/45048ea241e42fe7008bf5a8f81c2efe.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h2><noindex><a rel=\"nofollow\" name=\"network-miner\"><\/a><\/noindex>network-miner<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/www.netresec.com\/?page=networkminer\">network-miner<\/a><\/noindex> \u2014 Net-Credsi analoog t\u00f6\u00f6p\u00f5him\u00f5tte poolest, kuid suurema funktsionaalsusega, n\u00e4iteks failide ekstraheerimise v\u00f5imalus SMB protokolli kaudu. Nagu Net-Creds, on see mugav, kui tuleb kiiresti anal\u00fc\u00fcsida suurt liiklusmahtu. Samuti on selles mugav graafiline liides.<\/p>\n<h4>Plussid:<\/h4>\n<p><\/p>\n<ul>\n<li>Graafiline liides;<\/li>\n<li>Andmete visualiseerimine ja klassifitseerimine r\u00fchmade kaupa \u2013 lihtsustab liikluse anal\u00fc\u00fcsimist ja muudab selle kiireks.<\/li>\n<\/ul>\n<p><\/p>\n<h4>Miinused:<\/h4>\n<p><\/p>\n<ul>\n<li>Tutvumisversioonil on teatud funktsionaalsus piiratud.<\/li>\n<\/ul>\n<p>\n<img decoding=\"async\" alt=\"Network tools, v\u00f5i kuidas alustada pentrikseriga?\" src=\"\/wp-content\/uploads\/2019\/04\/4e3a8c72150e3e9a4aceeff0ac7bd5db.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h2><noindex><a rel=\"nofollow\" name=\"mitm6\"><\/a><\/noindex>mitm6<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/fox-it\/mitm6\">mitm6 <\/a><\/noindex> \u2014 t\u00f6\u00f6riist IPv6 r\u00fcnnakute teostamiseks (SLAAC-attack). IPv6 on prioriteetne Windowsi operatsioonis\u00fcsteemis (ja ka teistes operatsioonis\u00fcsteemides), ning vaikimisi on IPv6-liides sisse l\u00fclitatud, mis v\u00f5imaldab r\u00fcndajal seadistada sihtm\u00e4rgiks oma DNS-serveri, kasutades Router Advertisement pakette, p\u00e4rast mida saab r\u00fcndaja asendada ohvri DNS-i. Sobib suurep\u00e4raselt Relay-r\u00fcnnaku l\u00e4biviimiseks koos t\u00f6\u00f6riistaga ntlmrelayx, mis v\u00f5imaldab edukalt r\u00fcnnata Windowsi v\u00f5rgustikke. <\/p>\n<h4>Plussid:<\/h4>\n<p><\/p>\n<ul>\n<li>T\u00f6\u00f6tab suurep\u00e4raselt paljudes v\u00f5rku just t\u00e4nu Windowsi hostide ja v\u00f5rkude standardkonfiguratsioonidele;<\/li>\n<\/ul>\n<p><\/p>\n<h2><noindex><a rel=\"nofollow\" name=\"Responder\"><\/a><\/noindex>Responder<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/SpiderLabs\/Responder\">Responder<\/a><\/noindex> \u2014 t\u00f6\u00f6riist nime resolutsiooni laiemate protokollide spofimiseks (LLMNR, NetBIOS, MDNS). H\u00e4davajalik t\u00f6\u00f6riist Active Directory v\u00f5rkudes. Lisaks spofimisele oskab see p\u00fc\u00fcda NTLM-autentimist, komplektis on ka t\u00f6\u00f6riistade kogum teabe kogumiseks ja NTLM-Relay r\u00fcnnakute teostamiseks. <\/p>\n<h4>Plussid:<\/h4>\n<p><\/p>\n<ul>\n<li> Vaikimisi t\u00f5stab see \u00fcles mitmeid \u0441\u0435\u0440\u0432\u0435\u0440e, mis toetavad NTLM-autentimist: SMB, MSSQL, HTTP, HTTPS, LDAP, FTP, POP3, IMAP, SMTP;<\/li>\n<li>V\u00f5imaldab asendada DNS MITM-r\u00fcnnakute korral (ARP-spoofing jne); <\/li>\n<li>Hostide s\u00f5rmej\u00e4lg, kes on teinud laialdase p\u00e4ringu;<\/li>\n<li>Anal\u00fc\u00fcsire\u017eiim \u2014 passiivseks vaatlemiseks p\u00e4ringute \u00fcle;<\/li>\n<li>NTLM-autentimise korral p\u00f5hij\u00e4tku v\u00f5rguhashide formaat on \u00fchilduv John the Ripperi ja Hashcat\u2019iga.<\/li>\n<\/ul>\n<p><\/p>\n<h4>Miinused:<\/h4>\n<p><\/p>\n<ul>\n<li>Windowsiga t\u00f6\u00f6tamisel on 445 port (SMB) sidumisega seotud teatavad raskused (vajalik on vastavate teenuste peatamine ja taask\u00e4ivitamine);<\/li>\n<\/ul>\n<p>\n<img decoding=\"async\" alt=\"Network tools, v\u00f5i kuidas alustada pentrikseriga?\" src=\"\/wp-content\/uploads\/2019\/04\/ebe0c72c960bb3f6cfa6e6f34b5d2ec9.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<img decoding=\"async\" alt=\"Network tools, v\u00f5i kuidas alustada pentrikseriga?\" src=\"\/wp-content\/uploads\/2019\/04\/477fe7559f446176ae8c6fc3c351b769.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h2><noindex><a rel=\"nofollow\" name=\"Evil_Foca\"><\/a><\/noindex>Evil_Foca<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/ElevenPaths\/EvilFOCA\">Evil Foca<\/a><\/noindex> \u2014 t\u00f6\u00f6riist erinevate v\u00f5rgu r\u00fcnnakute kontrollimiseks IPv4 ja IPv6 v\u00f5rku. Skaneerib kohalikku v\u00f5rku, tuvastades seadmeid, ruutereid ja nende v\u00f5rgu liidesi ning seej\u00e4rel saab teha erinevaid r\u00fcnnakuid v\u00f5rgu liikmete vastu.<\/p>\n<h4>Plussid:<\/h4>\n<p><\/p>\n<ul>\n<li>Mugav MITM-r\u00fcnnakute l\u00e4biviimiseks (ARP spoofing, DHCP ACK-injektsioonid, SLAAC r\u00fcnnak, DHCP-spoofing);<\/li>\n<li>Saab l\u00e4bi viia DoS-r\u00fcnnakuid \u2014 ARP-spoofinguga IPv4-v\u00f5rkudes, SLAAC DoS IPv6-v\u00f5rkudes;<\/li>\n<li>Saab teostada DNS hijackingut;<\/li>\n<li>Lihtne kasutada, mugav graafiline liides.<\/li>\n<\/ul>\n<p><\/p>\n<h4>Miinused:<\/h4>\n<p><\/p>\n<ul>\n<li>T\u00f6\u00f6tab ainult Windowsi all.<\/li>\n<\/ul>\n<p>\n<img decoding=\"async\" alt=\"Network tools, v\u00f5i kuidas alustada pentrikseriga?\" src=\"\/wp-content\/uploads\/2019\/04\/f9ae7134162a703ad6fd1bdc05667a95.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h2><noindex><a rel=\"nofollow\" name=\"Bettercap\"><\/a><\/noindex>Bettercap<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/bettercap\/bettercap\">Bettercap<\/a><\/noindex> \u2014 v\u00f5imas raamistik v\u00f5rkude anal\u00fc\u00fcsimiseks ja r\u00fcndamiseks, sealhulgas ka traadita v\u00f5rkude, BLE (Bluetooth madala energia) ja isegi MouseJack r\u00fcnnakute vastu traadita HID seadmetele. Lisaks sisaldab see funktsionaalsust teabe kogumiseks liiklusest (sarnane net-creds'iga). \u00dcldiselt \u0161veitsi armee nuga (all in one). Hiljuti on see saanud <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/bettercap\/hydra\">graafilise veebip\u00f5hise liidese<\/a><\/noindex>.<\/p>\n<h4>Plussid:<\/h4>\n<p><\/p>\n<ul>\n<li>Krediitkaardihaldur \u2014 saab j\u00e4lgida k\u00fclastatud URL-e ja HTTPS-host'e, HTTP-autentimist, kasutajat pidades mitmete erinevate protokollide kaudu;<\/li>\n<li>Palju sisseehitatud MITM-r\u00fcnnakute;<\/li>\n<li>Modulaarne HTTP(S) l\u00e4bilaskeproksi \u2014 liiklust saab juhtida vastavalt vajadusele;<\/li>\n<li>Sisseehitatud HTTP-server;<\/li>\n<li>Toetab caplette \u2014 faile, mis v\u00f5imaldavad keerukate ja automatiseeritud r\u00fcnnakute kirjeldamist skriptikeeles.<\/li>\n<\/ul>\n<p><\/p>\n<h4>Miinused:<\/h4>\n<p><\/p>\n<ul>\n<li>M\u00f5ned moodulid, n\u00e4iteks ble.enum, ei ole osaliselt macOS ja Windowsis toetatud, m\u00f5ned on m\u00f5eldud ainult Linuxile \u2014 packet.proxy.<\/li>\n<\/ul>\n<p>\n<img decoding=\"async\" alt=\"Network tools, v\u00f5i kuidas alustada pentrikseriga?\" src=\"\/wp-content\/uploads\/2019\/04\/68f5b6ccd737b3fa0ee5235f31dde4d3.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h2><noindex><a rel=\"nofollow\" name=\"gateway_finder\"><\/a><\/noindex>gateway_finder<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/pentestmonkey\/gateway-finder\">gateway finder <\/a><\/noindex> \u2014 Pythonis kirjutatud skript, mis aitab tuvastada v\u00f5imalikke gateway'e v\u00f5rgus. Mugav segmenteerimise kontrollimiseks v\u00f5i hostide otsimiseks, mis v\u00f5ivad suunata vajaliku alamv\u00f5rku v\u00f5i Internetti. Sobib sisemistele pentestidele, kui on vajalik kiiresti kontrollida, kas olemas on volitamata marsruutide v\u00f5i teiste sisemiste kohalike v\u00f5rkude marsruutide olemasolu. <\/p>\n<h4>Plussid:<\/h4>\n<p><\/p>\n<ul>\n<li>Lihtne kasutada ja kohandada.<\/li>\n<\/ul>\n<p><img decoding=\"async\" alt=\"Network tools, v\u00f5i kuidas alustada pentrikseriga?\" src=\"\/wp-content\/uploads\/2019\/04\/dee33c0d4426c3b98e89dd726c5b647c.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h2><noindex><a rel=\"nofollow\" name=\"mitmproxy\"><\/a><\/noindex>mitmproxy<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/mitmproxy\/mitmproxy\">mitmproxy<\/a><\/noindex> \u2014 avatud l\u00e4htekoodiga t\u00f6\u00f6riist SSL\/TLS kaitstud liikluse anal\u00fc\u00fcsimiseks. mitmproxy on mugav kaitstud liikluse haaramiseks ja muutmiseks, kindlasti teatud eeltingimustega; t\u00f6\u00f6riist ei vii l\u00e4bi r\u00fcnnakut SSL\/TLS dekodeerimisele. Kasutatakse, kui on vajalik haarata ja fikseerida muudatusi kaitstud liikluses, mis on kaitstud SSL\/TLS. Koosneb Mitmproxy'st \u2014 liikluse edastamiseks, mitmdump \u2014 sarnane tcpdumpile, kuid HTTP(S)-liiklusele, ja mitmweb \u2014 veebiliides Mitmproxy jaoks.<\/p>\n<h4>Plussid:<\/h4>\n<p><\/p>\n<ul>\n<li>T\u00f6\u00f6tleb erinevaid protokolle ja toetab erinevate formaatide muutmist, alates HTML-ist kuni Protobuf-ini;<\/li>\n<li>API Pythonile \u2014 v\u00f5imaldab kirjutada skripte erakorraliste \u00fclesannete jaoks;<\/li>\n<li>V\u00f5ib t\u00f6\u00f6tada l\u00e4bipaistva proksi re\u017eiimis liikluse haaramisega.<\/li>\n<\/ul>\n<p><\/p>\n<h4>Miinused:<\/h4>\n<p><\/p>\n<ul>\n<li>Dumpprogrammi formaat pole millegagi \u00fchilduv \u2014 raske kasutada grep\u2019i, tuleb kirjutada skripte;<\/li>\n<\/ul>\n<p>\n<img decoding=\"async\" alt=\"Network tools, v\u00f5i kuidas alustada pentrikseriga?\" src=\"\/wp-content\/uploads\/2019\/04\/2049cb5c62067cd65b07abdb1a2d40a5.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<img decoding=\"async\" alt=\"Network tools, v\u00f5i kuidas alustada pentrikseriga?\" src=\"\/wp-content\/uploads\/2019\/04\/a37457f2faafae55f333b4d6839d5254.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h2><noindex><a rel=\"nofollow\" name=\"SIET\"><\/a><\/noindex>SIET<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/Sab0tag3d\/SIET\">SIET<\/a><\/noindex> \u2014 t\u00f6\u00f6riist Cisco Smart Installi protokolli haavatavuste \u00e4rakasutamiseks. V\u00f5imalik on konfigureerimise saamine ja muutmine, samuti seadme kontrolli haaramine. Kui olete saanud Cisco seadme konfigureerimise, saate seda kontrollida <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/cisco-config-analysis-tool\/ccat\">CCAT<\/a><\/noindex>, see t\u00f6\u00f6riist on kasulik Cisco seadmete konfidentsiaalsuse anal\u00fc\u00fcsimiseks.<\/p>\n<h4>Plussid:<\/h4>\n<p>\nCisco Smart Installi protokolli kasutamine v\u00f5imaldab:<\/p>\n<ul>\n<li>Muuta kliendiseadme tftp-serveri aadressi, saates \u00fche moonutatud TCP paketti;<\/li>\n<li>Kopeerida seadme konfigureerimise faili;<\/li>\n<li>Asendada seadme konfigureerimine, lisades n\u00e4iteks uue kasutaja;<\/li>\n<li>Uuendada seadme iOSi versiooni;<\/li>\n<li>Teostada mis tahes k\u00e4su seadmes. See on uus funktsioon, mis t\u00f6\u00f6tab ainult versioonides 3.6.0E ja 15.2 (2) E iOS;<\/li>\n<\/ul>\n<p><\/p>\n<h4>Miinused:<\/h4>\n<p><\/p>\n<ul>\n<li>Toimib piiratud hulgaga Cisco seadmetest, samuti on vajalik \u201evalge\u201d ip, et saada seadme vastust v\u00f5i peab olema seadmega samas v\u00f5rgus;<\/li>\n<\/ul>\n<p>\n<img decoding=\"async\" alt=\"Network tools, v\u00f5i kuidas alustada pentrikseriga?\" src=\"\/wp-content\/uploads\/2019\/04\/643e5511c44940d1f9c313347c74029a.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h2><noindex><a rel=\"nofollow\" name=\"yersinia\"><\/a><\/noindex>yersinia<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/tomac\/yersinia\">yersinia<\/a><\/noindex> \u2014 raamistik L2 r\u00fcnnakuteks, loodud, et \u00e4ra kasutada mitmesuguseid L2 v\u00f5rgu protokollide turvaprobleeme.<\/p>\n<h4>Plussid:<\/h4>\n<p><\/p>\n<ul>\n<li>Lubab r\u00fcnnakud STP, CDP, DTP, DHCP, HSRP, VTP ja muude protokollide vastu.<\/li>\n<\/ul>\n<p><\/p>\n<h4>Miinused:<\/h4>\n<p><\/p>\n<ul>\n<li>Ei ole k\u00f5ige mugavam liides.<\/li>\n<\/ul>\n<p>\n<img decoding=\"async\" alt=\"Network tools, v\u00f5i kuidas alustada pentrikseriga?\" src=\"\/wp-content\/uploads\/2019\/04\/d0cb4b5fac1fc0e5c302ad133d5b4504.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h2><noindex><a rel=\"nofollow\" name=\"proxychains\"><\/a><\/noindex>proxychains<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/haad\/proxychains\">proxychains<\/a><\/noindex> \u2014 t\u00f6\u00f6riist, mis v\u00f5imaldab suunata rakenduste liikluse m\u00e4\u00e4ratud SOCKS-proksi kaudu.<\/p>\n<h4>Plussid:<\/h4>\n<p><\/p>\n<ul>\n<li>Aitab suunata teatud rakenduste liiklust, mis vaikimisi ei oska t\u00f6\u00f6tada proksiga;<\/li>\n<\/ul>\n<p>\n<img decoding=\"async\" alt=\"Network tools, v\u00f5i kuidas alustada pentrikseriga?\" src=\"\/wp-content\/uploads\/2019\/04\/d09dcdaf7429ea29ff70fb682e7cd590.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nSelles artiklis vaatleme l\u00fchidalt peamiste t\u00f6\u00f6riistade eeliseid ja puudusi sisev\u00f5rgu pentestimiseks. J\u00e4lgige meie uuendusi, plaanime jagada selliseid kogumikke ka edaspidi: veeb, andmebaasid, mobiilirakendused \u2014 kirjutame sellest kindlasti rohkem.<\/p>\n<p>Jagage oma lemmikutiliite kommentaarides!<br \/>\n<br \/>Allikas: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/dsec\/blog\/447882\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>Toolkit \u043d\u0430\u0447\u0438\u043d\u0430\u044e\u0449\u0435\u0433\u043e \u043f\u0435\u043d\u0442\u0435\u0441\u0442\u0435\u0440\u0430: \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u043c \u043a\u0440\u0430\u0442\u043a\u0438\u0439 \u0434\u0430\u0439\u0434\u0436\u0435\u0441\u0442 \u0433\u043b\u0430\u0432\u043d\u044b\u0445 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u0440\u0438\u0433\u043e\u0434\u044f\u0442\u0441\u044f \u043f\u0440\u0438 \u043f\u0435\u043d\u0442\u0435\u0441\u0442\u0435 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0439 \u0441\u0435\u0442\u0438. \u042d\u0442\u0438 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u044b \u0443\u0436\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0448\u0438\u0440\u043e\u043a\u0438\u043c \u043a\u0440\u0443\u0433\u043e\u043c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u043e\u0432, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u0437\u043d\u0430\u0442\u044c \u043e\u0431 \u0438\u0445 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044f\u0445 \u0438 \u0432\u043b\u0430\u0434\u0435\u0442\u044c \u0432 \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0441\u0442\u0432\u0435 \u0431\u0443\u0434\u0435\u0442 \u043f\u043e\u043b\u0435\u0437\u043d\u043e \u043a\u0430\u0436\u0434\u043e\u043c\u0443. \u0421\u043e\u0434\u0435\u0440\u0436\u0430\u043d\u0438\u0435: Nmap Zmap Masscan Nessus Net-Creds network-miner mitm6 Responder Evil_Foca Bettercap gateway_finder mitmproxy SIET yersinia proxychains Nmap Nmap \u2013 opensource \u0443\u0442\u0438\u043b\u0438\u0442\u0430 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":23689,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-31811","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.0.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"Toolkit \u043d\u0430\u0447\u0438\u043d\u0430\u044e\u0449\u0435\u0433\u043e \u043f\u0435\u043d\u0442\u0435\u0441\u0442\u0435\u0440\u0430: \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u043c \u043a\u0440\u0430\u0442\u043a\u0438\u0439 \u0434\u0430\u0439\u0434\u0436\u0435\u0441\u0442 \u0433\u043b\u0430\u0432\u043d\u044b\u0445 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u0440\u0438\u0433\u043e\u0434\u044f\u0442\u0441\u044f \u043f\u0440\u0438 \u043f\u0435\u043d\u0442\u0435\u0441\u0442\u0435 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0439 \u0441\u0435\u0442\u0438. \u042d\u0442\u0438 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u044b \u0443\u0436\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0448\u0438\u0440\u043e\u043a\u0438\u043c \u043a\u0440\u0443\u0433\u043e\u043c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u043e\u0432, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u0437\u043d\u0430\u0442\u044c \u043e\u0431 \u0438\u0445 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044f\u0445 \u0438 \u0432\u043b\u0430\u0434\u0435\u0442\u044c \u0432 \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0441\u0442\u0432\u0435 \u0431\u0443\u0434\u0435\u0442 \u043f\u043e\u043b\u0435\u0437\u043d\u043e \u043a\u0430\u0436\u0434\u043e\u043c\u0443. \u0421\u043e\u0434\u0435\u0440\u0436\u0430\u043d\u0438\u0435: Nmap Zmap Masscan Nessus Net-Creds network-miner mitm6 Responder Evil_Foca Bettercap gateway_finder mitmproxy SIET yersinia proxychains Nmap Nmap \u2013 opensource \u0443\u0442\u0438\u043b\u0438\u0442\u0430\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/network-tools-ili-s-chego-nachat-pentesteru\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.0.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"et_EE\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47Network tools, \u0438\u043b\u0438 \u0441 \u0447\u0435\u0433\u043e \u043d\u0430\u0447\u0430\u0442\u044c \u043f\u0435\u043d\u0442\u0435\u0441\u0442\u0435\u0440\u0443? | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"Toolkit \u043d\u0430\u0447\u0438\u043d\u0430\u044e\u0449\u0435\u0433\u043e \u043f\u0435\u043d\u0442\u0435\u0441\u0442\u0435\u0440\u0430: \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u043c \u043a\u0440\u0430\u0442\u043a\u0438\u0439 \u0434\u0430\u0439\u0434\u0436\u0435\u0441\u0442 \u0433\u043b\u0430\u0432\u043d\u044b\u0445 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u0440\u0438\u0433\u043e\u0434\u044f\u0442\u0441\u044f \u043f\u0440\u0438 \u043f\u0435\u043d\u0442\u0435\u0441\u0442\u0435 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0439 \u0441\u0435\u0442\u0438. \u042d\u0442\u0438 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u044b \u0443\u0436\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0448\u0438\u0440\u043e\u043a\u0438\u043c \u043a\u0440\u0443\u0433\u043e\u043c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u043e\u0432, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u0437\u043d\u0430\u0442\u044c \u043e\u0431 \u0438\u0445 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044f\u0445 \u0438 \u0432\u043b\u0430\u0434\u0435\u0442\u044c \u0432 \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0441\u0442\u0432\u0435 \u0431\u0443\u0434\u0435\u0442 \u043f\u043e\u043b\u0435\u0437\u043d\u043e \u043a\u0430\u0436\u0434\u043e\u043c\u0443. \u0421\u043e\u0434\u0435\u0440\u0436\u0430\u043d\u0438\u0435: Nmap Zmap Masscan Nessus Net-Creds network-miner mitm6 Responder Evil_Foca Bettercap gateway_finder mitmproxy SIET yersinia proxychains Nmap Nmap \u2013 opensource \u0443\u0442\u0438\u043b\u0438\u0442\u0430\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/network-tools-ili-s-chego-nachat-pentesteru\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T18:43:17+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2019-10-31T18:43:17+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47V\u00f5rgu t\u00f6\u00f6riistad, v\u00f5i kust alustada pentestijana? | ProHoster","description":"Algaja pentestija t\u00f6\u00f6riistakomplekt: tutvustame l\u00fchikest kokkuv\u00f5tet peamistest t\u00f6\u00f6riistadest, mis on kasulikud sisev\u00f5rgu pentestimisel. Need t\u00f6\u00f6riistad on juba laialdaselt kasutusel arvukate spetsialistide seas, seet\u00f5ttu on oluline nende v\u00f5imalustest teadlik olla ja neid h\u00e4sti hallata. Sisu: Nmap Zmap Masscan Nessus Net-Creds network-miner mitm6 Responder Evil_Foca Bettercap gateway_finder mitmproxy SIET yersinia proxychains Nmap Nmap \u2013 avatud l\u00e4htekoodiga utiliit","canonical_url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/network-tools-ili-s-chego-nachat-pentesteru","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Network tools, \u0438\u043b\u0438 \u0441 \u0447\u0435\u0433\u043e \u043d\u0430\u0447\u0430\u0442\u044c \u043f\u0435\u043d\u0442\u0435\u0441\u0442\u0435\u0440\u0443? | ProHoster","og:description":"Toolkit \u043d\u0430\u0447\u0438\u043d\u0430\u044e\u0449\u0435\u0433\u043e \u043f\u0435\u043d\u0442\u0435\u0441\u0442\u0435\u0440\u0430: \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u043c \u043a\u0440\u0430\u0442\u043a\u0438\u0439 \u0434\u0430\u0439\u0434\u0436\u0435\u0441\u0442 \u0433\u043b\u0430\u0432\u043d\u044b\u0445 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u0440\u0438\u0433\u043e\u0434\u044f\u0442\u0441\u044f \u043f\u0440\u0438 \u043f\u0435\u043d\u0442\u0435\u0441\u0442\u0435 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0439 \u0441\u0435\u0442\u0438. \u042d\u0442\u0438 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u044b \u0443\u0436\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0448\u0438\u0440\u043e\u043a\u0438\u043c \u043a\u0440\u0443\u0433\u043e\u043c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u043e\u0432, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u0437\u043d\u0430\u0442\u044c \u043e\u0431 \u0438\u0445 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044f\u0445 \u0438 \u0432\u043b\u0430\u0434\u0435\u0442\u044c \u0432 \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0441\u0442\u0432\u0435 \u0431\u0443\u0434\u0435\u0442 \u043f\u043e\u043b\u0435\u0437\u043d\u043e \u043a\u0430\u0436\u0434\u043e\u043c\u0443. \u0421\u043e\u0434\u0435\u0440\u0436\u0430\u043d\u0438\u0435: Nmap Zmap Masscan Nessus Net-Creds network-miner mitm6 Responder Evil_Foca Bettercap gateway_finder mitmproxy SIET yersinia proxychains Nmap Nmap \u2013 opensource \u0443\u0442\u0438\u043b\u0438\u0442\u0430","og:url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/network-tools-ili-s-chego-nachat-pentesteru","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:43:17+00:00","article:modified_time":"2019-10-31T18:43:17+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"31811","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 07:57:22","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 03:10:46","updated":"2026-01-21 07:57:22","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/31811","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=31811"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/31811\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media\/23689"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=31811"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=31811"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=31811"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}