{"id":34646,"date":"2019-10-31T21:59:35","date_gmt":"2019-10-31T18:59:35","guid":{"rendered":"https:\/\/prohoster.info\/blog\/web-tools-ili-s-chego-nachat-pentesteru\/"},"modified":"2019-10-31T21:59:35","modified_gmt":"2019-10-31T18:59:35","slug":"web-tools-ili-s-chego-nachat-pentesteru","status":"publish","type":"post","link":"https:\/\/prohoster.info\/lv\/blog\/administrirovanie\/web-tools-ili-s-chego-nachat-pentesteru","title":{"rendered":"Web r\u012bki, vai no k\u0101 s\u0101kt pentesterim?","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/dsec\/blog\/447882\/\">Turpin\u0101m<\/a><\/noindex> st\u0101st\u012bt par noder\u012bgiem r\u012bkiem pen-test\u0113t\u0101jiem. Jaunaj\u0101 rakst\u0101 m\u0113s apl\u016bkosim r\u012bkus, kas paredz\u0113ti t\u012bmek\u013ca lietojumprogrammu dro\u0161\u012bbas anal\u012bzei.<\/p>\n<p>M\u016bsu kol\u0113\u0123is <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/users\/belove\/\" class=\"user_link\">BeLove<\/a><\/noindex> jau veica l\u012bdz\u012bgu <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/post\/125317\/\">apkopo\u0161anu<\/a><\/noindex> apm\u0113ram pirms septi\u0146iem gadiem. Interesanti apskat\u012bt, kuri r\u012bki ir saglab\u0101ju\u0161i un nostiprin\u0101ju\u0161i savas poz\u012bcijas, bet kuri ir atk\u0101pu\u0161ies otraj\u0101 pl\u0101n\u0101 un \u0161obr\u012bd tiek izmantoti retos gad\u012bjumos.<br \/>\n<img decoding=\"async\" alt=\"Web r\u012bki, vai no k\u0101 s\u0101kt pentesterim?\" src=\"\/wp-content\/uploads\/2019\/05\/a6d02b9593ebdbe1b11ccc38e6357b2f.gif\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><br \/>\nJ\u0101atz\u012bm\u0113, ka \u0161eit ietilpst ar\u012b Burp Suite, bet par to un t\u0101 noder\u012bgajiem papla\u0161in\u0101jumiem b\u016bs atsevi\u0161\u0137s raksts.<\/p>\n<h2>Saturs:<\/h2>\n<p><\/p>\n<ul>\n<li> <noindex><a rel=\"nofollow\" href=\"#Amass\">Amass<\/a><\/noindex><\/li>\n<li> <noindex><a rel=\"nofollow\" href=\"#Altdns\">Altdns<\/a><\/noindex><\/li>\n<li> <noindex><a rel=\"nofollow\" href=\"#aquatone\">aquatone<\/a><\/noindex><\/li>\n<li> <noindex><a rel=\"nofollow\" href=\"#MassDNS\">MassDNS<\/a><\/noindex><\/li>\n<li> <noindex><a rel=\"nofollow\" href=\"#nsec3map\">nsec3map<\/a><\/noindex><\/li>\n<li> <noindex><a rel=\"nofollow\" href=\"#Acunetix\">Acunetix<\/a><\/noindex><\/li>\n<li> <noindex><a rel=\"nofollow\" href=\"#Dirsearch\">Dirsearch<\/a><\/noindex><\/li>\n<li> <noindex><a rel=\"nofollow\" href=\"#wfuzz\">wfuzz<\/a><\/noindex><\/li>\n<li> <noindex><a rel=\"nofollow\" href=\"#ffuf\">ffuf<\/a><\/noindex><\/li>\n<li> <noindex><a rel=\"nofollow\" href=\"#gobuster\">gobuster<\/a><\/noindex><\/li>\n<li> <noindex><a rel=\"nofollow\" href=\"#Arjun\">Arjun<\/a><\/noindex><\/li>\n<li> <noindex><a rel=\"nofollow\" href=\"#LinkFinder\">LinkFinder<\/a><\/noindex><\/li>\n<li> <noindex><a rel=\"nofollow\" href=\"#JSParser\">JSParser<\/a><\/noindex><\/li>\n<li> <noindex><a rel=\"nofollow\" href=\"#sqlmap\">sqlmap<\/a><\/noindex><\/li>\n<li> <noindex><a rel=\"nofollow\" href=\"#NoSQLMap\">NoSQLMap<\/a><\/noindex><\/li>\n<li> <noindex><a rel=\"nofollow\" href=\"#oxml_xxe\">oxml_xxe<\/a><\/noindex><\/li>\n<li> <noindex><a rel=\"nofollow\" href=\"#tplmap\">tplmap<\/a><\/noindex><\/li>\n<li> <noindex><a rel=\"nofollow\" href=\"#CeWL\">CeWL<\/a><\/noindex><\/li>\n<li> <noindex><a rel=\"nofollow\" href=\"#Weakpass\">Weakpass<\/a><\/noindex><\/li>\n<li> <noindex><a rel=\"nofollow\" href=\"#AEM_hacker\">AEM_hacker<\/a><\/noindex><\/li>\n<li> <noindex><a rel=\"nofollow\" href=\"#JoomScan\">JoomScan<\/a><\/noindex><\/li>\n<li> <noindex><a rel=\"nofollow\" href=\"#WPScan\">WPScan<\/a><\/noindex><\/li>\n<\/ul>\n<p><\/p>\n<h2><noindex><a rel=\"nofollow\" name=\"Amass\"><\/a><\/noindex>Amass<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/OWASP\/Amass\">Amass<\/a><\/noindex> \u2014 r\u012bks Go valod\u0101 DNS apak\u0161dom\u0113nu mekl\u0113\u0161anai un \u0123ener\u0113\u0161anai, k\u0101 ar\u012b \u0101r\u0113j\u0101s t\u012bkla kartes sast\u0101d\u012b\u0161anai. Amass ir OWASP projekts, izveidots, lai par\u0101d\u012btu, k\u0101 organiz\u0101cijas izskat\u0101s internet\u0101 no tre\u0161o personu skatupunkta. Amass ieg\u016bst apak\u0161dom\u0113nu nosaukumus, izmantojot da\u017e\u0101das metodes, r\u012bk\u0101 tiek izmantota gan rekurs\u012bv\u0101 apak\u0161dom\u0113nu mekl\u0113\u0161ana, gan mekl\u0113\u0161ana atkl\u0101tajos avotos.<\/p>\n<p>Lai atkl\u0101tu savstarp\u0113ji saist\u012btus t\u012bkla segmentus un autonomo sist\u0113mu numurus, Amass izmanto IP adreses, ko t\u0101 ir ieguvusi darba procesa laik\u0101. Visa atrast\u0101 inform\u0101cija tiek izmantota t\u012bkla kartes izveidei.<\/p>\n<h4>Priek\u0161roc\u012bbas:<\/h4>\n<p><\/p>\n<ul>\n<li>Inform\u0101cijas v\u0101k\u0161anas metodes ietver:<br \/>\n * DNS \u2014 apak\u0161dom\u0113nu mekl\u0113\u0161ana p\u0113c v\u0101rdn\u012bcas, bruteforce apak\u0161dom\u0113nu mekl\u0113\u0161ana, \u201cgudra\u201d apak\u0161dom\u0113nu mekl\u0113\u0161ana, izmantojot atrastos apak\u0161dom\u0113nus, atpaka\u013c DNS vaic\u0101jumi un DNS serveru mekl\u0113\u0161ana, uz kuriem var veikt zonas p\u0101rneses piepras\u012bjumus (AXFR); <\/p>\n<p>* Mekl\u0113\u0161ana atkl\u0101tajos avotos \u2014 Ask, Baidu, Bing, CommonCrawl, DNSDB, DNSDumpster, DNSTable, Dogpile, Exalead, FindSubdomains, Google, IPv4Info, Netcraft, PTRArchive, Riddler, SiteDossier, ThreatCrowd, VirusTotal, Yahoo;<\/p>\n<p>* TLS sertifik\u0101tu datu b\u0101zes mekl\u0113\u0161ana \u2014 Censys, CertDB, CertSpotter, Crtsh, Entrust;<\/p>\n<p>* Mekl\u0113\u0161ana izmantojot mekl\u0113t\u0101jprogrammu API \u2014 BinaryEdge, BufferOver, CIRCL, HackerTarget, PassiveTotal, Robtex, SecurityTrails, Shodan, Twitter, Umbrella, URLScan;<\/p>\n<p>* Mekl\u0113\u0161ana interneta m\u0101jas arh\u012bvos: ArchiveIt, ArchiveToday, Arquivo, LoCArchive, OpenUKArchive, UKGovArchive, Wayback;<\/li>\n<li>Integr\u0101cija ar Maltego; <\/li>\n<li>Nodro\u0161ina vispiln\u012bg\u0101ko DNS apak\u0161dom\u0113nu mekl\u0113\u0161anas risin\u0101jumu.<\/li>\n<\/ul>\n<p><\/p>\n<h4>M\u012bnusi:<\/h4>\n<p><\/p>\n<ul>\n<li>Esiet uzman\u012bgi ar amass.netdomains \u2014 tas m\u0113\u0123in\u0101s piek\u013c\u016bt katrai IP adresei identific\u0113taj\u0101 infrastrukt\u016br\u0101 un ieg\u016bt dom\u0113nu nosaukumus no atpaka\u013c DNS vaic\u0101jumiem un TLS sertifik\u0101tiem. \u0160\u012b ir \u00abska\u013c\u0101\u00bb tehnika, kas var atkl\u0101t j\u016bsu izp\u0113tes aktivit\u0101tes p\u0113t\u012btaj\u0101 organiz\u0101cij\u0101. <\/li>\n<li>Augsts atmi\u0146as pat\u0113ri\u0146\u0161, var pat\u0113r\u0113t l\u012bdz 2 GB RAM da\u017e\u0101d\u0101s konfigur\u0101cij\u0101s, kas ne\u013caus palaist \u0161o r\u012bku m\u0101ko\u0146os uz l\u0113ta VDS.<\/li>\n<\/ul>\n<p>\n<img decoding=\"async\" alt=\"Web r\u012bki, vai no k\u0101 s\u0101kt pentesterim?\" src=\"\/wp-content\/uploads\/2019\/05\/37e1dd6c273eaef2c7c979a57f98c0d9.gif\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h2><noindex><a rel=\"nofollow\" name=\"Altdns\"><\/a><\/noindex>Altdns<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/infosec-au\/altdns\">Altdns<\/a><\/noindex> \u2014 r\u012bks Python valod\u0101, kas paredz\u0113ts DNS apak\u0161dom\u0113nu \u0123ener\u0113\u0161anai. \u013cauj \u0123ener\u0113t daudzus apak\u0161dom\u0113nu variantus, izmantojot mut\u0101cijas un permut\u0101cijas. \u0160im nol\u016bkam tiek izmantoti v\u0101rdi, kas bie\u017ei sastopami apak\u0161dom\u0113nos (piem\u0113ram: test, dev, staging), visas mut\u0101cijas un permut\u0101cijas tiek piem\u0113rotas jau zin\u0101miem apak\u0161dom\u0113niem, kurus var ievad\u012bt Altdns. Rezult\u0101t\u0101 ieg\u016bst sarakstu ar apak\u0161dom\u0113nu vari\u0101cij\u0101m, kas var past\u0101v\u0113t, un \u0161o sarakstu v\u0113l\u0101k var izmantot DNS bruteforcing.<\/p>\n<h4>Priek\u0161roc\u012bbas:<\/h4>\n<p><\/p>\n<ul>\n<li>Labi str\u0101d\u0101 ar lieliem datu apjomiem.<\/li>\n<\/ul>\n<p><\/p>\n<h2><noindex><a rel=\"nofollow\" name=\"aquatone\"><\/a><\/noindex>aquatone<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/michenriksen\/aquatone\">aquatone<\/a><\/noindex> \u2014 agr\u0101k bija paz\u012bstams k\u0101 v\u0113l viens r\u012bks apak\u0161dom\u0113nu mekl\u0113\u0161anai, ta\u010du pats autors no t\u0101 atteic\u0101s par labu iepriek\u0161 min\u0113tajam Amass. Tagad aquatone ir p\u0101rrakst\u012bts Go valod\u0101 un vair\u0101k piel\u0101gots priek\u0161izl\u016bko\u0161anai t\u012bmek\u013ca vietn\u0113s. \u0160im nol\u016bkam aquatone p\u0101rl\u016bko nor\u0101d\u012btos dom\u0113nus un mekl\u0113 tajos t\u012bmek\u013ca vietnes da\u017e\u0101dos portos, p\u0113c tam sav\u0101c visu inform\u0101ciju par vietni un veic ekr\u0101nuz\u0146\u0113mumu. \u0112rti izmantojams \u0101trai priek\u0161izl\u016bko\u0161anai t\u012bmek\u013ca vietn\u0113s, p\u0113c kuras var izv\u0113l\u0113ties priorit\u0101r\u0101s m\u0113r\u0137us uzbrukumiem.<\/p>\n<h4>Priek\u0161roc\u012bbas:<\/h4>\n<p><\/p>\n<ul>\n<li>Rezult\u0101t\u0101 izveido failu un mapju grupu, kuru \u0113rti izmantot turpm\u0101kaj\u0101 darb\u0101 ar citiem r\u012bkiem:<br \/>\n * HTML zi\u0146ojums ar sav\u0101ktajiem ekr\u0101nuz\u0146\u0113mumiem un grup\u0113tu atbil\u017eu virsrakstu l\u012bdz\u012bb\u0101m;<\/p>\n<p>* fails ar visiem URL, kuros tika atrastas t\u012bmek\u013ca vietnes;<\/p>\n<p> * fails ar statistiku un lapas datiem;<\/p>\n<p>* mape ar failiem, kas satur atbil\u017eu virsrakstus no atrastajiem m\u0113r\u0137iem; <\/p>\n<p>* mape ar failiem, kas satur atbil\u017eu \u0137erme\u0146us no atrastajiem m\u0113r\u0137iem;<\/p>\n<p>* atrasto t\u012bmek\u013ca viet\u0146u ekr\u0101nuz\u0146\u0113mumi;<\/li>\n<li>Atbalsta darbu ar XML zi\u0146ojumiem no Nmap un Masscan;<\/li>\n<li>Izmanto headless Chrome\/Chromium ekr\u0101nuz\u0146\u0113mumu render\u0113\u0161anai. <\/li>\n<\/ul>\n<p><\/p>\n<h4>M\u012bnusi:<\/h4>\n<p><\/p>\n<ul>\n<li> Var piesaist\u012bt ievade atkl\u0101\u0161anas sist\u0113mas uzman\u012bbu, t\u0101p\u0113c prasa konfigur\u0101ciju.<\/li>\n<\/ul>\n<p>\nEkr\u0101nuz\u0146\u0113mums izveidots vienai no vec\u0101kaj\u0101m aquatone versij\u0101m (v0.5.0), kur\u0101 tika realiz\u0113ta DNS apak\u0161dom\u0113nu mekl\u0113\u0161ana. Vec\u0101kas versijas var atrast <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/michenriksen\/aquatone\/releases\">izlaidumu lap\u0101<\/a><\/noindex>.<br \/>\n<img decoding=\"async\" alt=\"Web r\u012bki, vai no k\u0101 s\u0101kt pentesterim?\" src=\"\/wp-content\/uploads\/2019\/05\/42cf06a7d2ea19f973f76dccd0442bb8.gif\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h2><noindex><a rel=\"nofollow\" name=\"MassDNS\"><\/a><\/noindex>MassDNS<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/blechschmidt\/massdns\">MassDNS<\/a><\/noindex> \u2014 v\u0113l viens r\u012bks DNS apak\u0161dom\u0113nu mekl\u0113\u0161anai. T\u0101 galven\u0101 at\u0161\u0137ir\u012bba ir t\u0101da, ka tas veic DNS piepras\u012bjumus tie\u0161i uz daudziem da\u017e\u0101diem DNS risin\u0101t\u0101jiem un to dara ar b\u016btisku \u0101trumu. <\/p>\n<h4>Priek\u0161roc\u012bbas:<\/h4>\n<p><\/p>\n<ul>\n<li>\u00c1trais \u2014 sp\u0113j\u012bgs iz\u0161\u0137irt vair\u0101k nek\u0101 350 t\u016bksto\u0161us nosaukumu sekund\u0113.<\/li>\n<\/ul>\n<p><\/p>\n<h4>M\u012bnusi:<\/h4>\n<p><\/p>\n<ul>\n<li>MassDNS var rad\u012bt iev\u0113rojamu slodzi izmantotajiem DNS risin\u0101t\u0101jiem, kas var novest pie blo\u0137\u0113\u0161anas \u0161ajos serveros vai s\u016bdz\u012bb\u0101m j\u016bsu pakalpojumu sniedz\u0113jam. Turkl\u0101t tas rad\u012bs lielu slodzi uz\u0146\u0113muma DNS serveriem, ja t\u0101di ir un ja tie atbild par dom\u0113niem, kurus m\u0113\u0123in\u0101t risin\u0101t. <\/li>\n<li> Pa\u0161reiz\u0113jais risin\u0101t\u0101ju saraksts ir novecojis, ta\u010du, ja no\u0146em neakt\u012bvos DNS risin\u0101t\u0101jus un pievieno jaunus zin\u0101mos \u2014 viss b\u016bs labi.<\/li>\n<\/ul>\n<p>\n<img decoding=\"async\" alt=\"Web r\u012bki, vai no k\u0101 s\u0101kt pentesterim?\" src=\"\/wp-content\/uploads\/2019\/05\/a53181d6982b8d115ec5ece79fbca157.gif\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<i>Ekr\u0101nuz\u0146\u0113mums aquatone v0.5.0<\/i><\/p>\n<h2><noindex><a rel=\"nofollow\" name=\"nsec3map\"><\/a><\/noindex>nsec3map<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/anonion0\/nsec3map\">nsec3map<\/a><\/noindex> \u2014 r\u012bks uz Python, lai ieg\u016btu pilnu aizsarg\u0101to DNSSEC dom\u0113nu sarakstu.<\/p>\n<h4>Priek\u0161roc\u012bbas:<\/h4>\n<p><\/p>\n<ul>\n<li>\u0100tri atkl\u0101j hostus DNS zon\u0101s ar minim\u0101lo piepras\u012bjumu skaitu, ja zon\u0101 ir iesl\u0113gta DNSSEC atbalsts;<\/li>\n<li>Taj\u0101 ir iek\u013cauts spraudnis John the Ripper, ko var izmantot, lai uzlauztu ieg\u016btos NSEC3 hashus.<\/li>\n<\/ul>\n<p><\/p>\n<h4>M\u012bnusi:<\/h4>\n<p><\/p>\n<ul>\n<li>Daudzi DNS k\u013c\u016bdas tiek apstr\u0101d\u0101tas nepareizi;<\/li>\n<li>Nav autom\u0101tiskas NSEC ierakstu apstr\u0101des paraleliz\u0101cijas \u2014 n\u0101kas manu\u0101li dal\u012bt nosaukumu telpu;<\/li>\n<li>Augsts atmi\u0146as pat\u0113ri\u0146\u0161.<\/li>\n<\/ul>\n<p><\/p>\n<h2><noindex><a rel=\"nofollow\" name=\"Acunetix\"><\/a><\/noindex>Acunetix<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/www.acunetix.com\/\">Acunetix<\/a><\/noindex> \u2014 t\u012bmek\u013ca ievainojam\u012bbu skeneris, automatiz\u0113jot t\u012bmek\u013ca lietojumprogrammu dro\u0161\u012bbas p\u0101rbaudes procesu. P\u0101rbauda lietojumprogrammu pret SQL injekcij\u0101m, XSS, XXE, SSRF un daudz\u0101m cit\u0101m t\u012bmek\u013ca ievainojam\u012bb\u0101m. Tom\u0113r, t\u0101pat k\u0101 jebkur\u0161 cits t\u012bkls, daudzveid\u012bgu ievainojam\u012bbu skeneris neaizvieto pentesteri, jo sare\u017e\u0123\u012bt\u0101s ievainojam\u012bbu \u0137\u0113d\u0113s vai lo\u0123ikas ievainojam\u012bb\u0101s to neatrad\u012bs. Tom\u0113r tas aptver \u013coti daudz da\u017e\u0101du ievainojam\u012bbu, tostarp da\u017e\u0101das CVE, par kur\u0101m pentesteris var\u0113ja aizmirst, t\u0101p\u0113c tas ir \u013coti noder\u012bgs, lai atbr\u012bvotu no rut\u012bnas p\u0101rbaud\u0113m.<\/p>\n<h4>Priek\u0161roc\u012bbas:<\/h4>\n<p><\/p>\n<ul>\n<li>Zems viltus pozit\u012bvu skaits;<\/li>\n<li>Rezult\u0101tus var eksport\u0113t k\u0101 zi\u0146ojumus;<\/li>\n<li>Veic daudz p\u0101rbaudes uz da\u017e\u0101d\u0101m ievainojam\u012bb\u0101m;<\/li>\n<li>Paral\u0113la vair\u0101ku hostu sken\u0113\u0161ana. <\/li>\n<\/ul>\n<p><\/p>\n<h4>M\u012bnusi:<\/h4>\n<p><\/p>\n<ul>\n<li>Nav deduplic\u0113\u0161anas algoritma (funkcion\u0101li identiskas Acunetix lapas tiks uzskat\u012btas par at\u0161\u0137ir\u012bg\u0101m, jo uz t\u0101m ved da\u017e\u0101di URL), bet izstr\u0101d\u0101t\u0101ji pie t\u0101 str\u0101d\u0101;<\/li>\n<li>Nepiecie\u0161ama instal\u0113\u0161ana atsevi\u0161\u0137\u0101 t\u012bmek\u013ca server\u012b, kas apgr\u016btina klientu sist\u0113mu test\u0113\u0161anu ar VPN piesl\u0113gumiem un skenera izmanto\u0161anu izol\u0113t\u0101 lok\u0101laj\u0101 klienta t\u012bkla segment\u0101;<\/li>\n<li>Var \u201capklusin\u0101t\u201d p\u0113tniec\u012bbas pakalpojumu, piem\u0113ram, nos\u016btot kontaktformas raida p\u0101r\u0101k daudz uzbrukumu vektorus, t\u0101d\u0113j\u0101di iev\u0113rojami apgr\u016btinot uz\u0146\u0113m\u0113jdarb\u012bbas procesus;<\/li>\n<li>Ir ir \u012bpa\u0161um\u0101, t\u0101p\u0113c tas nav bezmaksas risin\u0101jums.<\/li>\n<\/ul>\n<p>\n<img decoding=\"async\" alt=\"Web r\u012bki, vai no k\u0101 s\u0101kt pentesterim?\" src=\"\/wp-content\/uploads\/2019\/05\/3756cfae6f3cbf221c42c8a439f6ee86.gif\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h2><noindex><a rel=\"nofollow\" name=\"Dirsearch\"><\/a><\/noindex>Dirsearch<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/maurosoria\/dirsearch\">Dirsearch<\/a><\/noindex> \u2014 Python r\u012bks direktoriju un failu bruteforce\u0161anai t\u012bmek\u013ca vietn\u0113s. <\/p>\n<h4>Priek\u0161roc\u012bbas:<\/h4>\n<p><\/p>\n<ul>\n<li>Var at\u0161\u0137irt \u012bstas \u201c200 OK\u201d lapas no \u201c200 OK\u201d lap\u0101m, kas satur tekstu \u201clapa nav atrasta\u201d;<\/li>\n<li>Tiek pieg\u0101d\u0101ts ar \u0113rtu v\u0101rdn\u012bcu, kurai ir labs l\u012bdzsvars starp izm\u0113ru un mekl\u0113\u0161anas efektivit\u0101ti. Satur standartce\u013cus, kas rakstur\u012bgi daudz\u0101m CMS un tehnolo\u0123iju stekiem;<\/li>\n<li>Sava v\u0101rdn\u012bcas form\u0101ts, kas \u013cauj sasniegt labu efektivit\u0101ti un elast\u012bbu failu un direktoriju p\u0101rvieto\u0161an\u0101;<\/li>\n<li>\u0112rta izvade \u2014 vienk\u0101r\u0161s teksts, JSON;<\/li>\n<li>Sp\u0113j veikt throttling \u2014 pauzi starp piepras\u012bjumiem, kas ir b\u016btiski jebkuram v\u0101jam pakalpojumam.<\/li>\n<\/ul>\n<p><\/p>\n<h4>M\u012bnusi:<\/h4>\n<p><\/p>\n<ul>\n<li>Papla\u0161in\u0101jumus nepiecie\u0161ams nodot k\u0101 virkni, kas nav \u0113rti, ja j\u0101nodod daudzi papla\u0161in\u0101jumi vienlaikus;<\/li>\n<li>Lai izmantotu savu v\u0101rdn\u012bcu, to b\u016bs j\u0101sagatavo nedaudz l\u012bdz Dirsearch v\u0101rdn\u012bcu form\u0101tam, lai nodro\u0161in\u0101tu maksim\u0101lu efektivit\u0101ti.<\/li>\n<\/ul>\n<p>\n<img decoding=\"async\" alt=\"Web r\u012bki, vai no k\u0101 s\u0101kt pentesterim?\" src=\"\/wp-content\/uploads\/2019\/05\/00676a0d7916ecc4cc521a3a5e8607e5.gif\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h2><noindex><a rel=\"nofollow\" name=\"wfuzz\"><\/a><\/noindex>wfuzz<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/xmendez\/wfuzz\">wfuzz<\/a><\/noindex> \u2014 Python vebfazers. Iesp\u0113jams, viens no vislab\u0101k zin\u0101majiem t\u012bmek\u013ca fazeriem. Principi ir vienk\u0101r\u0161i: wfuzz \u013cauj faz\u0113t jebkuru vietu HTTP piepras\u012bjum\u0101, kas \u013cauj faz\u0113t GET\/POST parametrus, HTTP galvenes, tostarp s\u012bkdatnes un citus autentifik\u0101cijas galvenes. Taj\u0101 pa\u0161\u0101 laik\u0101 tas ir \u0113rti izmantot ar\u012b vienk\u0101r\u0161ai direktoriju un failu bruteforce\u0161anai, kam ir nepiecie\u0161ama laba v\u0101rdn\u012bca. Tam ir ar\u012b elast\u012bga filtru sist\u0113ma, kas \u013cauj filtr\u0113t atbildes no t\u012bmek\u013ca vietn\u0113m p\u0113c da\u017e\u0101diem parametriem, t\u0101d\u0113j\u0101di pan\u0101kot efekt\u012bvus rezult\u0101tus. <\/p>\n<h4>Priek\u0161roc\u012bbas:<\/h4>\n<p><\/p>\n<ul>\n<li>M\u016bsdien\u012bgs \u2014 modul\u0101ra strukt\u016bra, mont\u0101\u017ea aiz\u0146em tikai da\u017eas min\u016btes;<\/li>\n<li>\u0112rta filtru un fazzinga meh\u0101nika;<\/li>\n<li>Var faz\u0113t jebkuru HTTP metodi, k\u0101 ar\u012b jebkuru vietu HTTP piepras\u012bjum\u0101.<\/li>\n<\/ul>\n<p><\/p>\n<h4>M\u012bnusi:<\/h4>\n<p><\/p>\n<ul>\n<li>Izstr\u0101des stadij\u0101.<\/li>\n<\/ul>\n<p>\n<img decoding=\"async\" alt=\"Web r\u012bki, vai no k\u0101 s\u0101kt pentesterim?\" src=\"\/wp-content\/uploads\/2019\/05\/f3b2ae5036eb8b8032f16516e78c82d0.gif\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h2><noindex><a rel=\"nofollow\" name=\"ffuf\"><\/a><\/noindex>ffuf<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/ffuf\/ffuf\">ffuf<\/a><\/noindex> \u2014 veb fazers uz Go, izveidots, \u0146emot par paraugu wfuzz, \u013cauj bruteforce failus, direktorijas, URL ce\u013cus, GET\/POST parametru nosaukumus un v\u0113rt\u012bbas, HTTP galvenes, tostarp Host galveni, lai bruteforce virtu\u0101los saimniekus. At\u0161\u0137iras no sava br\u0101\u013ca wfuzz ar augst\u0101ku \u0101trumu un da\u017e\u0101m jaun\u0101m funkcij\u0101m, piem\u0113ram, atbalsta Dirsearch form\u0101ta v\u0101rdn\u012bcas.<\/p>\n<h4>Priek\u0161roc\u012bbas:<\/h4>\n<p><\/p>\n<ul>\n<li>Filtri ir l\u012bdz\u012bgi wfuzz filtriem, \u013cauj elast\u012bgi konfigur\u0113t bruteforce;<\/li>\n<li>At\u013cauj faz\u0113t HTTP galvenu v\u0113rt\u012bbas, POST piepras\u012bjumu datus un da\u017e\u0101das URL da\u013cas, tostarp GET parametru nosaukumus un v\u0113rt\u012bbas;<\/li>\n<li>Var nor\u0101d\u012bt jebkuru HTTP metodi.<\/li>\n<\/ul>\n<p><\/p>\n<h4>M\u012bnusi:<\/h4>\n<p><\/p>\n<ul>\n<li>Izstr\u0101des stadij\u0101.<\/li>\n<\/ul>\n<p>\n<img decoding=\"async\" alt=\"Web r\u012bki, vai no k\u0101 s\u0101kt pentesterim?\" src=\"\/wp-content\/uploads\/2019\/05\/f432340ca10a6d834d01be4577f65fe2.gif\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h2><noindex><a rel=\"nofollow\" name=\"gobuster\"><\/a><\/noindex>gobuster<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/OJ\/gobuster\">gobuster<\/a><\/noindex> \u2014 r\u012bks Go valod\u0101 izl\u016bko\u0161anai, kam ir divi darb\u012bbas re\u017e\u012bmi. Pirmais tiek izmantots, lai veiktu brut\u0101lo sp\u0113ku failu un direktoriju uzlau\u0161anai t\u012bmek\u013ca vietn\u0113, otrais \u2014 lai p\u0101rbaud\u012btu DNS apak\u0161dom\u0113nus. R\u012bks s\u0101kotn\u0113ji neatbalsta rekurs\u012bvu failu un direktoriju p\u0101rbaudi, kas, protams, taupa laiku, bet, no otras puses, katras jaunas gala punkta uzlau\u0161ana t\u012bmek\u013ca vietn\u0113 j\u0101s\u0101k atsevi\u0161\u0137i.<\/p>\n<h4>Priek\u0161roc\u012bbas:<\/h4>\n<p><\/p>\n<ul>\n<li>Augsta darb\u012bbas \u0101truma gan DNS apak\u0161dom\u0113nu p\u0101rbaudei, gan failu un direktoriju uzlau\u0161anai.<\/li>\n<\/ul>\n<p><\/p>\n<h4>M\u012bnusi:<\/h4>\n<p><\/p>\n<ul>\n<li>\u0160aj\u0101 versij\u0101 neatbalsta HTTP galvene iestat\u012b\u0161anu;<\/li>\n<li>Pa noklus\u0113jumu uzskata par der\u012bgiem tikai da\u017eus HTTP statuss kodus (200,204,301,302,307).<\/li>\n<\/ul>\n<p>\n<img decoding=\"async\" alt=\"Web r\u012bki, vai no k\u0101 s\u0101kt pentesterim?\" src=\"\/wp-content\/uploads\/2019\/05\/2ce6c6ae6bbd0d2dc851ed632b5bc309.gif\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h2><noindex><a rel=\"nofollow\" name=\"Arjun\"><\/a><\/noindex>Arjun<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/s0md3v\/Arjun\">Arjun<\/a><\/noindex> \u2014 r\u012bks, lai veiktu brut\u0101lo sp\u0113ku sl\u0113ptajiem HTTP parametriem GET\/POST parametros, k\u0101 ar\u012b JSON. Ieb\u016bv\u0113tais v\u0101rdn\u012bca satur 25 980 v\u0101rdus, kurus Ajrun p\u0101rbauda gandr\u012bz 30 sekund\u0113s. Pa\u0146\u0113miens ir t\u0101ds, ka Ajrun nep\u0101rbauda katru parametru atsevi\u0161\u0137i, bet p\u0101rbauda apm\u0113ram ~1000 parametrus vienlaic\u012bgi un skat\u0101s, vai atbilde ir main\u012bjusies. Ja atbilde ir main\u012bjusies, tad dal\u0101s \u0161\u0101du 1000 parametrus div\u0101s da\u013c\u0101s un p\u0101rbauda, kura no \u0161\u012bm da\u013c\u0101m ietekm\u0113 atbildi. T\u0101d\u0113j\u0101di, izmantojot viegli \u012bstenojamu bin\u0101ro mekl\u0113\u0161anu, tiek atrasts parametrs vai vair\u0101ki sl\u0113ptie parametri, kas ietekm\u0113ja atbildi un, l\u012bdz ar to, var past\u0101v\u0113t. <\/p>\n<h4>Priek\u0161roc\u012bbas:<\/h4>\n<p><\/p>\n<ul>\n<li>Augsts darb\u012bbas \u0101trums, pateicoties bin\u0101rajai mekl\u0113\u0161anai;<\/li>\n<li>Atbalsta GET\/POST parametrus, k\u0101 ar\u012b parametrus JSON form\u0101t\u0101;<\/li>\n<\/ul>\n<p>\nDarb\u012bbas princips l\u012bdz\u012bgs Burp Suite papla\u0161in\u0101jumam \u2014 <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/PortSwigger\/param-miner\"><b>param-miner<\/b><\/a><\/noindex>, kuram ar\u012b ir \u013coti laba sp\u0113ja mekl\u0113t sl\u0113ptos HTTP parametrus. S\u012bk\u0101k par to past\u0101st\u012bsim gaid\u0101maj\u0101 rakst\u0101 par Burp un t\u0101 papla\u0161in\u0101jumiem.<br \/>\n<img decoding=\"async\" alt=\"Web r\u012bki, vai no k\u0101 s\u0101kt pentesterim?\" src=\"\/wp-content\/uploads\/2019\/05\/9571552d9954c5d9902ab658ecb77bbb.gif\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h2><noindex><a rel=\"nofollow\" name=\"LinkFinder\"><\/a><\/noindex>LinkFinder<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/GerbenJavado\/LinkFinder\">LinkFinder<\/a><\/noindex> \u2014 Python skripts, lai mekl\u0113tu saites JavaScript failos. Noder\u012bgs sl\u0113pto vai aizmirsto gala punktu\/URL mekl\u0113\u0161anai t\u012bmek\u013ca lietojumprogramm\u0101.<\/p>\n<h4>Priek\u0161roc\u012bbas:<\/h4>\n<p><\/p>\n<ul>\n<li>\u0100trs;<\/li>\n<li>Ir speci\u0101ls Chrome papla\u0161in\u0101jums, kas balst\u012bts uz LinkFinder.<\/li>\n<\/ul>\n<p>.<\/p>\n<h4>M\u012bnusi:<\/h4>\n<p><\/p>\n<ul>\n<li>Nepatikamu rezult\u0101tu izk\u0101rtojums;<\/li>\n<li>Neanaliz\u0113 JavaScript dinamik\u0101;<\/li>\n<li>Sal\u012bdzino\u0161i vienk\u0101r\u0161a saites mekl\u0113\u0161anas lo\u0123ika \u2014 ja JavaScript ir jebk\u0101d\u0101 veid\u0101 obfusk\u0113ts vai saites s\u0101kotn\u0113ji nepast\u0101v un tiek \u0123ener\u0113tas dinamiski, tad nekas netiks atrasts. <\/li>\n<\/ul>\n<p>\n<img decoding=\"async\" alt=\"Web r\u012bki, vai no k\u0101 s\u0101kt pentesterim?\" src=\"\/wp-content\/uploads\/2019\/05\/4cbb12ad81b249cdb21a2f4861acc346.gif\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h2><noindex><a rel=\"nofollow\" name=\"JSParser\"><\/a><\/noindex>JSParser<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/nahamsec\/JSParser\">JSParser<\/a><\/noindex> \u2014 Python skripts, kas izmanto <noindex><a rel=\"nofollow\" href=\"https:\/\/www.tornadoweb.org\/en\/stable\/\">Tornado<\/a><\/noindex> un <noindex><a rel=\"nofollow\" href=\"https:\/\/beautifier.io\/\">JSBeautifier<\/a><\/noindex> lai analiz\u0113tu relat\u012bvos URL adreses no JavaScript failiem. \u013boti noder\u012bgs AJAX piepras\u012bjumu atkl\u0101\u0161anai un API meto\u017eu saraksta sast\u0101d\u012b\u0161anai, ar kur\u0101m lietojumprogramma mijiedarbojas. Efekt\u012bvi darbojas kop\u0101 ar LinkFinder. <\/p>\n<h4>Priek\u0161roc\u012bbas:<\/h4>\n<p><\/p>\n<ul>\n<li>\u0100tra JavaScript failu pars\u0113\u0161ana.<\/li>\n<\/ul>\n<p>\n<img decoding=\"async\" alt=\"Web r\u012bki, vai no k\u0101 s\u0101kt pentesterim?\" src=\"\/wp-content\/uploads\/2019\/05\/20812f77021319d9d1d7eafd5d394383.gif\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h2><noindex><a rel=\"nofollow\" name=\"sqlmap\"><\/a><\/noindex>sqlmap<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/sqlmapproject\/sqlmap\">sqlmap<\/a><\/noindex> \u2014 iesp\u0113jams, viens no vispaz\u012bstam\u0101kajiem r\u012bkiem t\u012bmek\u013ca lietojumprogrammu anal\u012bzei. Sqlmap automatiz\u0113 SQL ievad\u012b\u0161anas ievainojam\u012bbu mekl\u0113\u0161anu un ekspluat\u0101ciju, atbalsta vair\u0101kus SQL dialektus, un tam ir liels skaits da\u017e\u0101du tehniku, s\u0101kot no 'bulldozera' l\u012bdz pat sare\u017e\u0123\u012bt\u0101m laika balst\u012bt\u0101m SQL ievad\u012b\u0161anas vektoriem. Turkl\u0101t tam ir daudzas turpm\u0101kas ekspluat\u0101cijas tehnikas da\u017e\u0101d\u0101m datu b\u0101z\u0113m, t\u0101p\u0113c tas ir noder\u012bgs ne tikai k\u0101 SQL ievad\u012b\u0161anas skeneris, bet ar\u012b k\u0101 sp\u0113c\u012bgs r\u012bks, lai ekspluat\u0113tu jau atrastas SQL ievad\u012b\u0161anas ievainojam\u012bbas.<\/p>\n<h4>Priek\u0161roc\u012bbas:<\/h4>\n<p><\/p>\n<ul>\n<li>Liels daudzums da\u017e\u0101du tehniku un vektoru;<\/li>\n<li>Zems viltus pozit\u012bvo gad\u012bjumu skaits;<\/li>\n<li>Daudzas piel\u0101go\u0161anas iesp\u0113jas, da\u017e\u0101das tehnikas, m\u0113r\u0137datu b\u0101ze, tamper skripti WAF apiet\u0161anai;<\/li>\n<li>Iesp\u0113ja izveidot izvades datu dumpu;<\/li>\n<li>Daudzas da\u017e\u0101das ekspluat\u0101cijas iesp\u0113jas, piem\u0113ram, da\u017e\u0101m datu b\u0101z\u0113m \u2014 autom\u0101tiska failu aug\u0161upiel\u0101de\/lejam, iesp\u0113ja izpild\u012bt komandas (RCE) un citas;<\/li>\n<li>Atbalsta tie\u0161u savienojumu ar datu b\u0101zi, izmantojot uzbrukuma laik\u0101 ieg\u016bt\u0101s datus;<\/li>\n<li>Ievad\u0101 var dot tekstu failu ar Burp rezult\u0101tiem \u2014 nav nepiecie\u0161ams manu\u0101li izveidot visus komandrindas atrib\u016btus.<\/li>\n<\/ul>\n<p><\/p>\n<h4>M\u012bnusi:<\/h4>\n<p><\/p>\n<ul>\n<li>Gr\u016bti piel\u0101got, piem\u0113ram, uzrakst\u012bt savas p\u0101rbaudes, jo dokument\u0101cija ir ierobe\u017eota;<\/li>\n<li>Bez atbilsto\u0161\u0101m iestat\u012bjumiem veic nepiln\u012bgu p\u0101rbaudes komplektu, kas var maldin\u0101t.<\/li>\n<\/ul>\n<p>\n<img decoding=\"async\" alt=\"Web r\u012bki, vai no k\u0101 s\u0101kt pentesterim?\" src=\"\/wp-content\/uploads\/2019\/05\/f99ac42bd3139894668353924112d416.gif\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h2><noindex><a rel=\"nofollow\" name=\"NoSQLMap\"><\/a><\/noindex>NoSQLMap<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/codingo\/NoSQLMap\">NoSQLMap<\/a><\/noindex> \u2014 r\u012bks Python valod\u0101 automatiz\u0113tu NoSQL ievad\u012b\u0161anas mekl\u0113\u0161anu un ekspluat\u0101ciju. Ir \u0113rti izmantot ne tikai NoSQL datu b\u0101z\u0113s, bet ar\u012b tie\u0161i t\u012bmek\u013ca lietojumprogrammu auditos, kas izmanto NoSQL.<\/p>\n<h4>Priek\u0161roc\u012bbas:<\/h4>\n<p><\/p>\n<ul>\n<li>K\u0101 sqlmap, tas ne tikai atrod potenci\u0101lo ievainojam\u012bbu, bet ar\u012b p\u0101rbauda t\u0101s ekspluat\u0101cijas iesp\u0113jas MongoDB un CouchDB sasnieg\u0161anai.<\/li>\n<\/ul>\n<p><\/p>\n<h4>M\u012bnusi:<\/h4>\n<p><\/p>\n<ul>\n<li>Nepodr\u017e p\u0101rvalda NoSQL datu b\u0101zes Redis, Cassandra, \u0161aj\u0101 virzien\u0101 ir izstr\u0101de.<\/li>\n<\/ul>\n<h2><noindex><a rel=\"nofollow\" name=\"oxml_xxe\"><\/a><\/noindex>oxml_xxe<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/BuffaloWill\/oxml_xxe\">oxml_xxe<\/a><\/noindex> \u2014 r\u012bks XXE XML eksploit\u0101cijas iek\u013cau\u0161anai da\u017e\u0101dos failu veidos, kuros k\u0101d\u0101 veid\u0101 tiek izmantots XML form\u0101ts.<\/p>\n<h4>Priek\u0161roc\u012bbas:<\/h4>\n<p><\/p>\n<ul>\n<li>Atbalsta daudzus izplat\u012btus form\u0101tus, piem\u0113ram, DOCX, ODT, SVG, XML.<\/li>\n<\/ul>\n<p><\/p>\n<h4>M\u012bnusi:<\/h4>\n<p><\/p>\n<ul>\n<li>PDF, JPEG, GIF atbalsts nav piln\u012bb\u0101 ieviests;<\/li>\n<li>Izveido tikai vienu failu. \u0160\u012bs probl\u0113mas risin\u0101\u0161anai var izmantot r\u012bku <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/BuffaloWill\/oxml_xxe\">docem<\/a><\/noindex>, kas var izveidot daudz failu ar payloadiem da\u017e\u0101d\u0101s viet\u0101s. <\/li>\n<\/ul>\n<p>\nIepriek\u0161 min\u0113tie r\u012bki lieliski sp\u0113j veikt XXE test\u0113\u0161anu dokumentu aug\u0161upiel\u0101d\u0113\u0161anas gad\u012bjum\u0101, kuros ir XML. Ta\u010du neaizmirstiet, ka XML form\u0101tu apstr\u0101d\u0101t\u0101ji var par\u0101d\u012bties daudzos citos gad\u012bjumos, piem\u0113ram, XML var tikt izmantots k\u0101 datu form\u0101ts, nevis JSON.<\/p>\n<p>T\u0101p\u0113c m\u0113s iesak\u0101m piev\u0113rst uzman\u012bbu n\u0101kamajai repozitorijai, kas satur pla\u0161u da\u017e\u0101du payloadu kolekciju: <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/swisskyrepo\/PayloadsAllTheThings\">PayloadsAllTheThings<\/a><\/noindex>.<\/p>\n<h2><noindex><a rel=\"nofollow\" name=\"tplmap\"><\/a><\/noindex>tplmap<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/epinna\/tplmap\">tplmap<\/a><\/noindex> \u2014 r\u012bks Python valod\u0101 autom\u0101tiskai Server-Side Template Injection ievainojam\u012bbu atkl\u0101\u0161anai un izmanto\u0161anai, tam ir l\u012bdz\u012bgas iestat\u012b\u0161anas un karogus k\u0101 sqlmap. Tas izmanto vair\u0101kas da\u017e\u0101das tehnikas un vektorus, tostarp blind-injekcijas, un tam ir tehnolo\u0123ijas kodeka izpildei un failu aug\u0161upiel\u0101dei\/lejupl\u0101d\u0113\u0161anai. Turkl\u0101t tam ir tehnolo\u0123ijas desmitiem da\u017e\u0101du \u0161ablonu dzin\u0113ju un da\u017ei pa\u0146\u0113mieni kodeka injekciju mekl\u0113\u0161anai k\u0101 eval()-tipa Python, Ruby, PHP, JavaScript. Ja veiksm\u012bgi izmanto, tas atver interakt\u012bvo konsoli.<\/p>\n<h4>Priek\u0161roc\u012bbas:<\/h4>\n<p><\/p>\n<ul>\n<li>Liels daudzums da\u017e\u0101du tehniku un vektoru; <\/li>\n<li>Atbalsta vair\u0101kus \u0161ablonu rindu dzin\u0113jus;<\/li>\n<li>Daudz exploat\u0101cijas tehniku.<\/li>\n<\/ul>\n<p><\/p>\n<h2><noindex><a rel=\"nofollow\" name=\"CeWL\"><\/a><\/noindex>CeWL<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/digininja\/CeWL\">CeWL<\/a><\/noindex> \u2014 v\u0101rdn\u012bcu \u0123enerators Ruby valod\u0101, kas izveidots unik\u0101lu v\u0101rdu ieg\u016b\u0161anai no nor\u0101d\u012bt\u0101s t\u012bmek\u013ca vietnes, p\u0101rvietojas caur saites vietn\u0113 nor\u0101d\u012btaj\u0101 dzi\u013cum\u0101. Izveidot\u0101 v\u0101rdn\u012bca no unik\u0101liem v\u0101rdiem turpm\u0101k var tikt izmantota paroli uzlau\u0161anai pakalpojumos vai failu un katalogu bruteforc\u0113\u0161anai taj\u0101 pa\u0161\u0101 t\u012bmek\u013ca vietn\u0113, vai uzbrukumam ieg\u016btajiem hash kodus, izmantojot hashcat vai John the Ripper. Noder\u012bga potenci\u0101lo paroli \u201cm\u0113r\u0137u\u201d saraksta sast\u0101d\u012b\u0161anai.<\/p>\n<h4>Priek\u0161roc\u012bbas:<\/h4>\n<p><\/p>\n<ul>\n<li>Viegli lietot.<\/li>\n<\/ul>\n<p><\/p>\n<h4>M\u012bnusi:<\/h4>\n<p><\/p>\n<ul>\n<li>J\u0101b\u016bt uzman\u012bgam ar mekl\u0113\u0161anas dzi\u013cumu, lai nepieskartu lieku dom\u0113nu.<\/li>\n<\/ul>\n<p><\/p>\n<h2><noindex><a rel=\"nofollow\" name=\"Weakpass\"><\/a><\/noindex>Weakpass<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/weakpass.com\">Weakpass<\/a><\/noindex> \u2014 pakalpojums, kas satur daudzas v\u0101rdn\u012bcas ar unik\u0101l\u0101m parol\u0113m. \u013boti noder\u012bgs da\u017e\u0101d\u0101m uzdevumiem, kas saist\u012bti ar parol\u0113m, s\u0101kot no vienk\u0101r\u0161as tie\u0161saistes kontu bruteforces m\u0113r\u0137a pakalpojumos, l\u012bdz pat ofline bruteforce ieg\u016btajiem hash kodus, izmantojot <noindex><a rel=\"nofollow\" href=\"https:\/\/hashcat.net\/hashcat\/\">hashcat<\/a><\/noindex> vai <noindex><a rel=\"nofollow\" href=\"https:\/\/www.openwall.com\/john\/\">John The Ripper<\/a><\/noindex>. Aptuveni 8 miljardu parol\u0113m, kuru garums ir no 4 l\u012bdz 25 simboliem. <\/p>\n<h4>Priek\u0161roc\u012bbas:<\/h4>\n<p><\/p>\n<ul>\n<li>Satur gan specifiskas v\u0101rdn\u012bcas, gan v\u0101rdn\u012bcas ar bie\u017e\u0101k sastopam\u0101m parol\u0113m \u2014 var izv\u0113l\u0113ties konkr\u0113tu v\u0101rdn\u012bcu atbilsto\u0161i sav\u0101m vajadz\u012bb\u0101m;<\/li>\n<li>V\u0101rdn\u012bcas tiek regul\u0101ri atjaunin\u0101tas un papildin\u0101tas ar jaun\u0101m parol\u0113m.<\/li>\n<li>V\u0101rdn\u012bcas ir sak\u0101rtotas p\u0113c efektivit\u0101tes. Var izv\u0113l\u0113ties variantu k\u0101 \u0101trai tie\u0161saistes brut\u0101lai uzbruk\u0161anai, t\u0101 ar\u012b r\u016bp\u012bgai paroli mekl\u0113\u0161anai no apjom\u012bg\u0101m v\u0101rdn\u012bc\u0101m ar jaun\u0101kajiem nopl\u016b\u017eu datiem;<\/li>\n<li>Ir kalkulators, kas r\u0101da laiku, k\u0101ds nepiecie\u0161ams paroli brut\u0101lai uzbruk\u0161anai j\u016bsu aparat\u016br\u0101.<\/li>\n<\/ul>\n<p>\n<img decoding=\"async\" alt=\"Web r\u012bki, vai no k\u0101 s\u0101kt pentesterim?\" src=\"\/wp-content\/uploads\/2019\/05\/1e9daeca2b42b5ba4dd7750bee2ef36c.gif\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nAtsevi\u0161\u0137\u0101 grup\u0101 m\u0113s v\u0113l\u0113tos izcelt CMS p\u0101rbaudes r\u012bkus: WPScan, JoomScan un AEM hacker. <\/p>\n<h2><noindex><a rel=\"nofollow\" name=\"AEM_hacker\"><\/a><\/noindex>AEM_hacker<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/0ang3el\/aem-hacker\">AEM hacker<\/a><\/noindex> \u2014 r\u012bks, lai identific\u0113tu ievainojam\u012bbas Adobe Experience Manager (AEM) lietojumprogramm\u0101s. <\/p>\n<h4>Priek\u0161roc\u012bbas:<\/h4>\n<p><\/p>\n<ul>\n<li>Var identific\u0113t AEM lietojumprogrammas no URL saraksta, ko tas sa\u0146em k\u0101 ievadi;<\/li>\n<li>Ietver skriptus, lai ieg\u016btu RCE, izmantojot JSP \u0161elfu aug\u0161upiel\u0101di vai izmantojot SSRF.<\/li>\n<\/ul>\n<p><\/p>\n<h2><noindex><a rel=\"nofollow\" name=\"JoomScan\"><\/a><\/noindex>JoomScan<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/rezasp\/joomscan\">JoomScan<\/a><\/noindex> \u2014 Perl r\u012bks, lai automatiz\u0113tu ievainojam\u012bbu atkl\u0101\u0161anu Joomla CMS izvieto\u0161anas laik\u0101. <\/p>\n<h4>Priek\u0161roc\u012bbas:<\/h4>\n<p><\/p>\n<ul>\n<li>Sp\u0113j noteikt konfigur\u0101cijas tr\u016bkumus un administratoru iestat\u012bjumu probl\u0113mas;<\/li>\n<li>Uzskaita Joomla versijas un ar t\u0101m saist\u012bt\u0101s ievainojam\u012bbas, l\u012bdz\u012bgi k\u0101 atsevi\u0161\u0137iem komponentiem;<\/li>\n<li>Ietver vair\u0101k nek\u0101 1000 exploitus Joomla komponentiem;<\/li>\n<li>Izv\u0113r\u0161 gal\u012bg\u0101s atskaites teksta un HTML form\u0101.<\/li>\n<\/ul>\n<p>\n<img decoding=\"async\" alt=\"Web r\u012bki, vai no k\u0101 s\u0101kt pentesterim?\" src=\"\/wp-content\/uploads\/2019\/05\/2f9561213895d338f8e88127bf02c3e6.gif\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h2><noindex><a rel=\"nofollow\" name=\"WPScan\"><\/a><\/noindex>WPScan<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/wpscanteam\/wpscan\">WPScan<\/a><\/noindex> \u2014 r\u012bks t\u012bmek\u013ca viet\u0146u sken\u0113\u0161anai WordPress, tai ir ievainojam\u012bbas gan pa\u0161am WordPress dzin\u0113jam, gan da\u017eiem spraud\u0146iem.<\/p>\n<h4>Priek\u0161roc\u012bbas:<\/h4>\n<p><\/p>\n<ul>\n<li>Sp\u0113j uzskait\u012bt ne tikai nedro\u0161os WordPress spraud\u0146us un t\u0113mas, bet ar\u012b ieg\u016bt lietot\u0101ju sarakstu un TimThumb failus;<\/li>\n<li>Var veikt brut\u0101l\u0101s uzbrukumus uz WordPress vietn\u0113m.<\/li>\n<\/ul>\n<p><\/p>\n<h4>M\u012bnusi:<\/h4>\n<p><\/p>\n<ul>\n<li>Bez atbilsto\u0161\u0101m iestat\u012bjumiem veic nepiln\u012bgu p\u0101rbaudes komplektu, kas var maldin\u0101t.<\/li>\n<\/ul>\n<p>\n<img decoding=\"async\" alt=\"Web r\u012bki, vai no k\u0101 s\u0101kt pentesterim?\" src=\"\/wp-content\/uploads\/2019\/05\/eb391071eb62381da16c425d95e7cec5.gif\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nKopum\u0101 da\u017e\u0101di cilv\u0113ki dod priek\u0161roku da\u017e\u0101diem r\u012bkiem: visi tie ir labv\u0113l\u012bgi sav\u0101 veid\u0101, un tas, kas pat\u012bk vienai personai, var piln\u012bgi neder\u0113t citai. Ja dom\u0101jat, ka m\u0113s nepamatoti esam izlaidusi labu util\u012btu \u2014 rakstiet par to koment\u0101ros!<br \/>\n<br \/>Avots: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/dsec\/blog\/452836\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u043c \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u044b\u0432\u0430\u0442\u044c \u043e \u043f\u043e\u043b\u0435\u0437\u043d\u044b\u0445 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0445 \u0434\u043b\u044f \u043f\u0435\u043d\u0442\u0435\u0441\u0442\u0435\u0440\u0430. \u0412 \u043d\u043e\u0432\u043e\u0439 \u0441\u0442\u0430\u0442\u044c\u0435 \u043c\u044b \u0440\u0430\u0441\u0441\u043c\u043e\u0442\u0440\u0438\u043c \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u044b \u0434\u043b\u044f \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u043e\u0441\u0442\u0438 \u0432\u0435\u0431-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439. \u041d\u0430\u0448 \u043a\u043e\u043b\u043b\u0435\u0433\u0430 BeLove \u0443\u0436\u0435 \u0434\u0435\u043b\u0430\u043b \u043f\u043e\u0434\u043e\u0431\u043d\u0443\u044e \u043f\u043e\u0434\u0431\u043e\u0440\u043a\u0443 \u043e\u043a\u043e\u043b\u043e \u0441\u0435\u043c\u0438 \u043b\u0435\u0442 \u043d\u0430\u0437\u0430\u0434. \u0418\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u043e \u0432\u0437\u0433\u043b\u044f\u043d\u0443\u0442\u044c, \u043a\u0430\u043a\u0438\u0435 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u044b \u0441\u043e\u0445\u0440\u0430\u043d\u0438\u043b\u0438 \u0438 \u0443\u043a\u0440\u0435\u043f\u0438\u043b\u0438 \u0441\u0432\u043e\u0438 \u043f\u043e\u0437\u0438\u0446\u0438\u0438, \u0430 \u043a\u0430\u043a\u0438\u0435 \u043e\u0442\u043e\u0448\u043b\u0438 \u043d\u0430 \u0437\u0430\u0434\u043d\u0438\u0439 \u043f\u043b\u0430\u043d \u0438 \u0441\u0435\u0439\u0447\u0430\u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0440\u0435\u0434\u043a\u043e. \u041e\u0442\u043c\u0435\u0442\u0438\u043c, \u0447\u0442\u043e \u0441\u044e\u0434\u0430 \u0436\u0435 \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0441\u044f \u0438 Burp Suite, [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":26108,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-34646","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.5 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u043c \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u044b\u0432\u0430\u0442\u044c \u043e \u043f\u043e\u043b\u0435\u0437\u043d\u044b\u0445 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0445 \u0434\u043b\u044f \u043f\u0435\u043d\u0442\u0435\u0441\u0442\u0435\u0440\u0430.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/lv\/blog\/administrirovanie\/web-tools-ili-s-chego-nachat-pentesteru\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.5\" \/>\n\t\t<meta property=\"og:locale\" content=\"lv_LV\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47Web tools, \u0438\u043b\u0438 \u0441 \u0447\u0435\u0433\u043e \u043d\u0430\u0447\u0430\u0442\u044c \u043f\u0435\u043d\u0442\u0435\u0441\u0442\u0435\u0440\u0443? | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u043c \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u044b\u0432\u0430\u0442\u044c \u043e \u043f\u043e\u043b\u0435\u0437\u043d\u044b\u0445 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0445 \u0434\u043b\u044f \u043f\u0435\u043d\u0442\u0435\u0441\u0442\u0435\u0440\u0430.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/lv\/blog\/administrirovanie\/web-tools-ili-s-chego-nachat-pentesteru\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T18:59:35+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2019-10-31T18:59:35+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47T\u012bmek\u013ca r\u012bki, vai no k\u0101 s\u0101kt pen-test\u0113t\u0101jam? | ProHoster","description":"Turpin\u0101m st\u0101st\u012bt par noder\u012bgiem r\u012bkiem pen-test\u0113t\u0101jiem.","canonical_url":"https:\/\/prohoster.info\/lv\/blog\/administrirovanie\/web-tools-ili-s-chego-nachat-pentesteru","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"lv_LV","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Web tools, \u0438\u043b\u0438 \u0441 \u0447\u0435\u0433\u043e \u043d\u0430\u0447\u0430\u0442\u044c \u043f\u0435\u043d\u0442\u0435\u0441\u0442\u0435\u0440\u0443? | ProHoster","og:description":"\u041f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u043c \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u044b\u0432\u0430\u0442\u044c \u043e \u043f\u043e\u043b\u0435\u0437\u043d\u044b\u0445 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0445 \u0434\u043b\u044f \u043f\u0435\u043d\u0442\u0435\u0441\u0442\u0435\u0440\u0430.","og:url":"https:\/\/prohoster.info\/lv\/blog\/administrirovanie\/web-tools-ili-s-chego-nachat-pentesteru","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:59:35+00:00","article:modified_time":"2019-10-31T18:59:35+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"34646","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 20:04:30","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 02:17:23","updated":"2026-01-21 20:04:30","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/posts\/34646","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/comments?post=34646"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/posts\/34646\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/media\/26108"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/media?parent=34646"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/categories?post=34646"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/tags?post=34646"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}