Sakin na'urar daukar hotan takardu ta hanyar sadarwa Nmap 7.80

Kusan shekara guda da rabi tun da saki na ƙarshe gabatar saki na cibiyar sadarwa tsaro na'urar daukar hotan takardu taswirar 7.80, tsara don gudanar da bincike na cibiyar sadarwa da gano ayyukan cibiyar sadarwa. Sashe hade Sabbin rubutun NSE 11 don samar da aiki da kai na ayyuka daban-daban tare da Nmap. An sabunta bayanan sa hannu don gano aikace-aikacen cibiyar sadarwa da tsarin aiki.

Kwanan nan, babban aikin ya mayar da hankali ga ingantawa da kuma daidaita ɗakin karatu npcap, wanda aka haɓaka don dandamali na Windows azaman maye gurbin WinPcap da amfani da API na zamani na Windows don tsara fakitin kama. An yi ƙananan haɓakawa da yawa ga Injin Rubutun Nmap (NSE) da ɗakunan karatu masu alaƙa. Nsock da Ncat sun kara da goyon baya ga soket tare da AF_VSOCK jawabi, yana gudana a saman virtio kuma ana amfani da su don sadarwa tsakanin injuna mai kama da hypervisor. Gano da aka aiwatar na sabis na adb (Android Debug Bridge), wanda aka kunna ta tsohuwa akan yawancin na'urorin hannu.

Sabbin rubutun NSE:

• watsa shirye-shirye-hidi-discoveryd - yana ƙayyade kasancewar na'urorin HID (na'urorin haɗin gwiwar ɗan adam) akan hanyar sadarwar gida ta hanyar aika buƙatun watsa shirye-shirye;
• watsa shirye-shirye-jenkins-discover - gano sabobin Jenkins akan hanyar sadarwar gida ta hanyar aika buƙatun watsa shirye-shirye;
• http-hp-ilo-info - yana dawo da bayanai daga sabar HP masu goyan bayan fasahar sarrafa nesa ILO;
• http-sap-netweaver-leak - yana gano kasancewar SAP Netweaver Portal tare da Sashin Gudanar da Ilimin da aka kunna, yana ba da damar shiga mara amfani;
• https-redirect - yana gano sabar HTTP da ke tura buƙatun zuwa HTTPS babu motsi lambobin tashar jiragen ruwa;
• lu-enum - yana ƙididdige tubalan ma'ana (LU, Raka'a Logical) na sabobin TN3270E;
• rdp-ntlm-info - yana dawo da bayanan yankin Windows daga ayyukan RDP;
• smb-vuln-webexec - yana duba shigar da sabis na WebExService (Cisco WebEx Meetings) da kasancewar rauni, ƙyale kisa code;
• smb-webexec-exploit - yana amfani da rauni a cikin WebExService don gudanar da lambar tare da gata na SYSTEM;
• ubiquiti-discovery - yana dawo da bayanai daga sabis na Gano Ubiquiti kuma yana taimakawa tantance lambar sigar;
• vulners - yana aika da tambayoyi zuwa ma'ajin bayanai Masu cin mutunci, don bincika rashin lahani dangane da sabis da sigar aikace-aikacen da aka ayyana lokacin da aka ƙaddamar da Nmap.

source: budenet.ru