{"id":31811,"date":"2019-10-31T21:43:17","date_gmt":"2019-10-31T18:43:17","guid":{"rendered":"https:\/\/prohoster.info\/blog\/network-tools-ili-s-chego-nachat-pentesteru\/"},"modified":"2019-10-31T21:43:17","modified_gmt":"2019-10-31T18:43:17","slug":"network-tools-ili-s-chego-nachat-pentesteru","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/network-tools-ili-s-chego-nachat-pentesteru","title":{"rendered":"Instrumente de re\u021bea, sau cu ce s\u0103 \u00eencepi ca tester de penetrare?","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Toolkit pentru testerii de penetrare \u00eencep\u0103tori: s\u0103 prezent\u0103m un rezumat al principalelor instrumente care vor fi utile \u00een timpul testelor de penetrare a re\u021belei interne. Aceste instrumente sunt deja utilizate activ de un num\u0103r mare de speciali\u0219ti, a\u0219a c\u0103 a fi informat despre capacit\u0103\u021bile lor \u0219i a st\u0103p\u00e2ni utilizarea lor va fi util pentru fiecare. <\/p>\n<p><img decoding=\"async\" alt=\"Instrumente de re\u021bea, sau cu ce s\u0103 \u00eencepi ca tester de penetrare?\" src=\"\/wp-content\/uploads\/2019\/04\/a6846992cd5eb7769c87bbfb5aaaabbc.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<h2>Cuprins:<\/h2>\n<p><\/p>\n<ul>\n<li> <noindex><a rel=\"nofollow\" href=\"#Nmap\">Nmap<\/a><\/noindex><\/li>\n<li> <noindex><a rel=\"nofollow\" href=\"#Zmap\">Zmap<\/a><\/noindex><\/li>\n<li> <noindex><a rel=\"nofollow\" href=\"#Masscan\">Masscan<\/a><\/noindex><\/li>\n<li> <noindex><a rel=\"nofollow\" href=\"#Nessus\">Nessus<\/a><\/noindex><\/li>\n<li> <noindex><a rel=\"nofollow\" href=\"#Net-Creds\">Net-Creds<\/a><\/noindex><\/li>\n<li> <noindex><a rel=\"nofollow\" href=\"#network-miner\">network-miner<\/a><\/noindex><\/li>\n<li> <noindex><a rel=\"nofollow\" href=\"#mitm6\">mitm6<\/a><\/noindex><\/li>\n<li> <noindex><a rel=\"nofollow\" href=\"#Responder\">Responder<\/a><\/noindex><\/li>\n<li> <noindex><a rel=\"nofollow\" href=\"#Evil_Foca\">Evil_Foca<\/a><\/noindex><\/li>\n<li> <noindex><a rel=\"nofollow\" href=\"#Bettercap\">Bettercap<\/a><\/noindex><\/li>\n<li> <noindex><a rel=\"nofollow\" href=\"#gateway_finder\">gateway_finder<\/a><\/noindex><\/li>\n<li> <noindex><a rel=\"nofollow\" href=\"#mitmproxy\">mitmproxy<\/a><\/noindex><\/li>\n<li> <noindex><a rel=\"nofollow\" href=\"#SIET\">SIET<\/a><\/noindex><\/li>\n<li> <noindex><a rel=\"nofollow\" href=\"#yersinia\">yersinia<\/a><\/noindex><\/li>\n<li> <noindex><a rel=\"nofollow\" href=\"#proxychains\">proxychains<\/a><\/noindex><\/li>\n<\/ul>\n<p><\/p>\n<h2><noindex><a rel=\"nofollow\" name=\"Nmap\"><\/a><\/noindex>Nmap<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/nmap.org\/\">Nmap<\/a><\/noindex> \u2013 utilitar open-source pentru scanarea re\u021belelor, este unul dintre cele mai populare instrumente folosite de exper\u021bi \u00een securitate \u0219i administratori de sistem. Este folosit \u00een primul r\u00e2nd pentru scanarea porturilor, dar, pe l\u00e2ng\u0103 acest lucru, are o mare varietate de func\u021bii utile, ceea ce face ca Nmap <b>s\u0103 fie un \u201esuper-combinator\u201d<\/b> pentru cercetarea re\u021belelor.<\/p>\n<p>Pe l\u00e2ng\u0103 verificarea porturilor deschise\/\u00eenchise, Nmap poate identifica serviciul care ascult\u0103 pe un port deschis \u0219i versiunea acestuia, \u0219i uneori ajut\u0103 la determinarea sistemului de operare. Nmap suport\u0103 scripturi pentru scanare (NSE \u2014 Nmap Scripting Engine). Cu ajutorul scripturilor, este posibil s\u0103 verifica\u021bi vulnerabilit\u0103\u021bile pentru diferite servicii (dac\u0103, desigur, exist\u0103 un script pentru acestea sau se poate \u00eentotdeauna scrie unul personalizat) sau s\u0103 sparge\u021bi parolele pentru diferite servicii. <\/p>\n<p>Astfel, Nmap permite crearea unei h\u0103r\u021bi detaliate a re\u021belei, ob\u021bin\u00e2nd maximum de informa\u021bii despre serviciile care ruleaz\u0103 pe gazde \u00een re\u021bea, precum \u0219i s\u0103 verifice preventiv anumite vulnerabilit\u0103\u021bi. Nmap are, de asemenea, set\u0103ri flexibile de scanare, permi\u021b\u00e2nd configurarea vitezei de scanare, a num\u0103rului de threade, a num\u0103rului de grupuri de scanare etc.<br \/>\nEste convenabil pentru scanarea re\u021belelor mici \u0219i indispensabil pentru scanarea punctual\u0103 a unor gazde individuale.<\/p>\n<h4>Pro:<\/h4>\n<ul>\n<li>Func\u021bioneaz\u0103 rapid cu un num\u0103r mic de gazde;<\/li>\n<li>Flexibilitatea set\u0103rilor - se pot combina op\u021biuni astfel \u00eenc\u00e2t s\u0103 ob\u021bine\u021bi cele mai informative date \u00eentr-un timp rezonabil; <\/li>\n<li>Scanare paralel\u0103 - lista gazdelor \u021bint\u0103 este \u00eemp\u0103r\u021bit\u0103 \u00een grupuri, iar apoi fiecare grup este scanat succesiv, \u00een interiorul unei grupuri se utilizeaz\u0103 scanarea paralel\u0103. De asemenea, divizarea \u00een grupuri este un mic dezavantaj (vezi mai jos);<\/li>\n<li>Seturi de scripturi predefinite pentru diferite sarcini - nu trebuie s\u0103 pierde\u021bi mult timp c\u0103ut\u00e2nd scripturi specifice, ci pute\u021bi indica grupurile de scripturi;<\/li>\n<li>Output of results \u2014 5 different formats, including XML, which can be imported into other tools;<\/li>\n<\/ul>\n<p><\/p>\n<h4>Dezavantaje:<\/h4>\n<p><\/p>\n<ul>\n<li>Scanning a group of hosts \u2014 information about any host is not available until the scanning of the entire group is complete. This is addressed by setting the maximum group size and the maximum time interval in the options to wait for a response to the request before stopping attempts or making another;<\/li>\n<li>During scanning, Nmap sends SYN packets to the target port and waits for any response packet or a timeout if there is no response. This negatively affects the performance of the scanner as a whole, compared to asynchronous scanners (e.g., zmap or masscan);<\/li>\n<li>Atunci c\u00e2nd scana\u021bi re\u021bele mari folosind flag-uri pentru a accelera scanarea (\u00e2\u20ac\u201cmin-rate, \u00e2\u20ac\u201cmin-parallelism), pot ap\u0103rea rezultate false-negative, omisi\u00e2nd porturi deschise pe gazd\u0103. De asemenea, aceste op\u021biuni ar trebui utilizate cu precau\u021bie, av\u00e2nd \u00een vedere c\u0103 o rat\u0103 mare de pachete poate duce la un atac DoS neinten\u021bionat. <\/li>\n<\/ul>\n<p>\n<img decoding=\"async\" alt=\"Instrumente de re\u021bea, sau cu ce s\u0103 \u00eencepi ca tester de penetrare?\" src=\"\/wp-content\/uploads\/2019\/04\/189c9a5145449871571ad11d8b0be9c2.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h2><noindex><a rel=\"nofollow\" name=\"Zmap\"><\/a><\/noindex>Zmap<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/zmap\/zmap\">Zmap<\/a><\/noindex> (not to be confused with ZenMap) \u2014 also an open-source scanner, created as a faster alternative to Nmap.<\/p>\n<p>Unlike nmap \u2014 Zmap does not wait for a response when sending SYN packets, but continues scanning while simultaneously waiting for responses from all hosts, thus it does not maintain a connection state. When a response to a SYN packet arrives, Zmap determines based on the packet content which port and which host was opened. Also, Zmap sends only one SYN packet to the scanned port. Moreover, there is the possibility of using PF_RING for faster scanning of large networks, if you happen to have a 10-gigabit interface and a compatible network card at hand.<\/p>\n<h4>Pro:<\/h4>\n<p><\/p>\n<ul>\n<li>Scanning speed;<\/li>\n<li>Zmap generates Ethernet frames bypassing the system TCP\/IP stack;<\/li>\n<li>Ability to use PF_RING;<\/li>\n<li>ZMap randomizes targets for even load distribution on the scanned side;<\/li>\n<li>Ability to integrate with ZGrab (a tool for gathering information about services at the application level L7).<\/li>\n<\/ul>\n<p><\/p>\n<h4>Dezavantaje:<\/h4>\n<p><\/p>\n<ul>\n<li>May cause denial of service to network equipment, for example, disabling intermediate routers, despite the distributed load, as all packets will pass through one router.<\/li>\n<\/ul>\n<p>\n<img decoding=\"async\" alt=\"Instrumente de re\u021bea, sau cu ce s\u0103 \u00eencepi ca tester de penetrare?\" src=\"\/wp-content\/uploads\/2019\/04\/474b04785f27540510421d4fb715d4b4.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h2><noindex><a rel=\"nofollow\" name=\"Masscan\"><\/a><\/noindex>Masscan<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/robertdavidgraham\/masscan\">Masscan<\/a><\/noindex> \u2014 surprinz\u0103tor, dar este \u0219i un scanner cu surs\u0103 deschis\u0103, creat cu un singur scop - s\u0103 scaneze Internetul \u0219i mai repede (\u00een mai pu\u021bin de 6 minute cu o vitez\u0103 de ~10 milioane pachete\/s). Practic, func\u021bioneaz\u0103 aproape la fel ca Zmap, doar c\u0103 \u0219i mai rapid.<\/p>\n<h4>Pro:<\/h4>\n<p><\/p>\n<ul>\n<li>Sintaxa este similar\u0103 cu Nmap, iar programul suport\u0103 \u0219i unele op\u021biuni compatibile cu Nmap;<\/li>\n<li>Viteza de operare \u2014 unul dintre cei mai rapizi scannere asincrone.<\/li>\n<li>Mecanism flexibil de scanare \u2014 reluarea unei scan\u0103ri \u00eentrerupte, distribuirea sarcinii \u00eentre mai multe dispozitive (ca \u00een Zmap).<\/li>\n<\/ul>\n<p><\/p>\n<h4>Dezavantaje:<\/h4>\n<p><\/p>\n<ul>\n<li>Similar cu Zmap, sarcina pe re\u021bea este extrem de mare, ceea ce poate duce la DoS;<\/li>\n<li>Implicit, nu exist\u0103 op\u021biunea de a scana la nivel de aplica\u021bie L7;<\/li>\n<\/ul>\n<p>\n<img decoding=\"async\" alt=\"Instrumente de re\u021bea, sau cu ce s\u0103 \u00eencepi ca tester de penetrare?\" src=\"\/wp-content\/uploads\/2019\/04\/cc919cc2dfd848594f4d8d6a35f9c1cf.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h2><noindex><a rel=\"nofollow\" name=\"Nessus\"><\/a><\/noindex>Nessus<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/www.tenable.com\/products\/nessus\/nessus-professional\">Nessus<\/a><\/noindex> \u2014 scanner pentru automatizarea verific\u0103rii \u0219i descoperirii vulnerabilit\u0103\u021bilor cunoscute \u00een sistem. Codul surs\u0103 este \u00eenchis, exist\u0103 o versiune gratuit\u0103 Nessus Home, care permite scanarea a p\u00e2n\u0103 la 16 adrese IP cu aceea\u0219i vitez\u0103 \u0219i analiz\u0103 detaliat\u0103 ca \u0219i \u00een versiunea pl\u0103tit\u0103.<\/p>\n<p>Poate identifica versiunile vulnerabile ale serviciilor sau serverelor, descoperi erori \u00een configura\u021bia sistemului, efectua atacuri de bruteforce asupra parolelor din dic\u021bionar. Poate fi utilizat pentru a verifica corectitudinea configur\u0103rilor serviciilor (po\u0219t\u0103, actualiz\u0103ri etc.), precum \u0219i \u00een preg\u0103tirea pentru auditul PCI DSS. \u00cen plus, \u00een Nessus pot fi transmise date de autentificare pentru gazd\u0103 (SSH sau cont de domeniu \u00een Active Directory) \u0219i scannerul va avea acces la gazd\u0103 \u0219i va efectua verific\u0103rile direct pe aceasta, aceast\u0103 op\u021biune se nume\u0219te scanare pe baz\u0103 de acreditive. Este convenabil pentru companiile care efectueaz\u0103 audite ale propriilor re\u021bele.<\/p>\n<h4>Pro:<\/h4>\n<p><\/p>\n<ul>\n<li>Scenarii separate pentru fiecare vulnerabilitate, baza acestora fiind actualizat\u0103 constant;<\/li>\n<li>Outputul rezultatelor \u2014 text simplu, XML, HTML \u0219i LaTeX;<\/li>\n<li>API Nessus \u2014 permite automatizarea proceselor de scanare \u0219i ob\u021binerea rezultatelor;<\/li>\n<li>Scanare pe baz\u0103 de acreditive, se pot utiliza date de autentificare Windows sau Linux pentru a verifica actualiz\u0103rile sau alte vulnerabilit\u0103\u021bi;<\/li>\n<li>Posibilitatea de a scrie module de securitate \u00eencorporate \u2014 scannerul dispune de un limbaj propriu de scripting NASL (Nessus Attack Scripting Language);<\/li>\n<li>Se poate seta un program pentru scanarea regulat\u0103 a re\u021belei locale \u2014 prin aceasta, Serviciul de Securitate a Informa\u021biei va fi la curent cu toate modific\u0103rile \u00een configura\u021bia de securitate, apari\u021bia de noi gazde \u0219i utilizarea parolelor din dic\u021bionar sau a parolelor implicite.<\/li>\n<\/ul>\n<p><\/p>\n<h4>Dezavantaje:<\/h4>\n<p><\/p>\n<ul>\n<li>Pot exista \u00eentreruperi \u00een func\u021bionarea sistemelor scanate - cu op\u021biunea de verificare sigur\u0103 dezactivat\u0103, trebuie lucrat cu aten\u021bie;<\/li>\n<li>Versiunea care permite utilizarea comercial\u0103 nu este gratuit\u0103.<\/li>\n<\/ul>\n<p>\n<img decoding=\"async\" alt=\"Instrumente de re\u021bea, sau cu ce s\u0103 \u00eencepi ca tester de penetrare?\" src=\"\/wp-content\/uploads\/2019\/04\/07117e6a14a384a1ce2d285a19ca08fb.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h2><noindex><a rel=\"nofollow\" name=\"Net-Creds\"><\/a><\/noindex>Net-Creds<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/DanMcInerney\/net-creds\">Net-Creds<\/a><\/noindex> \u2014 un instrument \u00een limbajul Python pentru colectarea parolelor \u0219i a hash-urilor, precum \u0219i a altor informa\u021bii, cum ar fi URL-urile vizitate, fi\u0219ierele desc\u0103rcate \u0219i alte informa\u021bii din trafic, at\u00e2t \u00een timp real \u00een timpul atacului MiTM, c\u00e2t \u0219i din fi\u0219ierele PCAP salvate anterior. Este potrivit pentru analizarea rapid\u0103 \u0219i de suprafa\u021b\u0103 a unor volume mari de trafic, de exemplu, \u00een caz de atacuri MiTM, c\u00e2nd timpul este limitat, iar analiza manual\u0103 cu ajutorul Wireshark necesit\u0103 mult timp.<\/p>\n<h4>Pro:<\/h4>\n<p><\/p>\n<ul>\n<li>Identificarea serviciilor se bazeaz\u0103 pe analiza pachetelor \u00een loc de determinarea serviciului \u00een func\u021bie de num\u0103rul portului utilizat;<\/li>\n<li>U\u0219or de utilizat;<\/li>\n<li>Gama larg\u0103 de date extrase - inclusiv utilizatori \u0219i parole pentru FTP, POP, IMAP, SMTP, protocoale NTLMv1\/v2, precum \u0219i informa\u021bii din cererile HTTP, cum ar fi formularele de login \u0219i autentificarea basic;<\/li>\n<\/ul>\n<p><img decoding=\"async\" alt=\"Instrumente de re\u021bea, sau cu ce s\u0103 \u00eencepi ca tester de penetrare?\" src=\"\/wp-content\/uploads\/2019\/04\/45048ea241e42fe7008bf5a8f81c2efe.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h2><noindex><a rel=\"nofollow\" name=\"network-miner\"><\/a><\/noindex>network-miner<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/www.netresec.com\/?page=networkminer\">network-miner<\/a><\/noindex> \u2014 analog cu Net-Creds prin principiul de func\u021bionare, dar are o funcionalitate mai mare, de exemplu, are capacitatea de a extrage fi\u0219iere transmise prin protocoalele SMB. La fel ca Net-Creds, este convenabil atunci c\u00e2nd trebuie s\u0103 analiza\u021bi rapid un volum mare de trafic. De asemenea, are o interfa\u021b\u0103 grafic\u0103 u\u0219or de utilizat.<\/p>\n<h4>Pro:<\/h4>\n<p><\/p>\n<ul>\n<li>Interfa\u021b\u0103 grafic\u0103;<\/li>\n<li>Vizualizarea \u0219i clasificarea datelor \u00een grupuri - simplific\u0103 analiza traficului \u0219i o face rapid\u0103.<\/li>\n<\/ul>\n<p><\/p>\n<h4>Dezavantaje:<\/h4>\n<p><\/p>\n<ul>\n<li>Versiunea demo are unele func\u021bionalit\u0103\u021bi limitate.<\/li>\n<\/ul>\n<p>\n<img decoding=\"async\" alt=\"Instrumente de re\u021bea, sau cu ce s\u0103 \u00eencepi ca tester de penetrare?\" src=\"\/wp-content\/uploads\/2019\/04\/4e3a8c72150e3e9a4aceeff0ac7bd5db.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h2><noindex><a rel=\"nofollow\" name=\"mitm6\"><\/a><\/noindex>mitm6<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/fox-it\/mitm6\">mitm6 <\/a><\/noindex> \u2014 un instrument pentru desf\u0103\u0219urarea atacurilor IPv6 (atacul SLAAC). IPv6 este prioritar \u00een sistemele de operare Windows (\u00een general, \u0219i \u00een celelalte sisteme de operare) \u0219i, \u00een configura\u021bia implicit\u0103, interfa\u021ba IPv6 este activat\u0103, permi\u021b\u00e2nd atacatorului s\u0103 stabileasc\u0103 serverul DNS al victimei, folosind pachete de Router Advertisement, dup\u0103 care atacatorul poate substitui DNS-ul victimei. Se potrive\u0219te perfect pentru desf\u0103\u0219urarea atacelor Relay \u00eempreun\u0103 cu utilitarul ntlmrelayx, permi\u021b\u00e2nd atacarea re\u021belelor Windows. <\/p>\n<h4>Pro:<\/h4>\n<p><\/p>\n<ul>\n<li>Func\u021bioneaz\u0103 excelent \u00een multe re\u021bele datorit\u0103 configura\u021biilor standard ale gazdelor \u0219i re\u021belelor Windows;<\/li>\n<\/ul>\n<p><\/p>\n<h2><noindex><a rel=\"nofollow\" name=\"Responder\"><\/a><\/noindex>Responder<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/SpiderLabs\/Responder\">Responder<\/a><\/noindex> \u2014 un instrument pentru spoofing-ul protocoalelor de rezolvare a numelui prin broadcast (LLMNR, NetBIOS, MDNS). Un instrument indispensabil \u00een re\u021belele Active Directory. Pe l\u00e2ng\u0103 spoofing, poate intercepta autentific\u0103rile NTLM, inclusiv un set de instrumente pentru colectarea informa\u021biilor \u0219i desf\u0103\u0219urarea atacurilor NTLM-Relay. <\/p>\n<h4>Pro:<\/h4>\n<p><\/p>\n<ul>\n<li> Implicit ridic\u0103 numeroase servere cu suport pentru autentificarea NTLM: SMB, MSSQL, HTTP, HTTPS, LDAP, FTP, POP3, IMAP, SMTP;<\/li>\n<li>Permite \u00eenlocuirea DNS \u00een caz de atacuri MITM (ARP spoofing etc.); <\/li>\n<li>Fingerprint-ul gazdelor care au efectuat o solicitare de tip broadcast;<\/li>\n<li>Modul Analyze \u2014 pentru observa\u021bii pasive asupra solicit\u0103rilor;<\/li>\n<li>Formatul hash-urilor interceptate \u00een autentificarea NTLM este compatibil cu John the Ripper \u0219i Hashcat.<\/li>\n<\/ul>\n<p><\/p>\n<h4>Dezavantaje:<\/h4>\n<p><\/p>\n<ul>\n<li>La rularea pe Windows, legarea portului 445 (SMB) este asociat\u0103 cu anumite dificult\u0103\u021bi (este necesar\u0103 oprirea serviciilor corespunz\u0103toare \u0219i repornirea);<\/li>\n<\/ul>\n<p>\n<img decoding=\"async\" alt=\"Instrumente de re\u021bea, sau cu ce s\u0103 \u00eencepi ca tester de penetrare?\" src=\"\/wp-content\/uploads\/2019\/04\/ebe0c72c960bb3f6cfa6e6f34b5d2ec9.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<img decoding=\"async\" alt=\"Instrumente de re\u021bea, sau cu ce s\u0103 \u00eencepi ca tester de penetrare?\" src=\"\/wp-content\/uploads\/2019\/04\/477fe7559f446176ae8c6fc3c351b769.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h2><noindex><a rel=\"nofollow\" name=\"Evil_Foca\"><\/a><\/noindex>Evil_Foca<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/ElevenPaths\/EvilFOCA\">Evil Foca<\/a><\/noindex> \u2014 instrument pentru verificarea diferitelor atacuri de re\u021bea \u00een re\u021belele IPv4 \u0219i IPv6. Scaneaz\u0103 re\u021beaua local\u0103, identific\u00e2nd dispozitive, routere \u0219i interfe\u021bele lor de re\u021bea, dup\u0103 care pot fi efectuate diverse atacuri asupra participan\u021bilor la re\u021bea.<\/p>\n<h4>Pro:<\/h4>\n<p><\/p>\n<ul>\n<li>Util pentru realizarea atacurilor MITM (ARP spoofing, injec\u021bii DHCP ACK, atac SLAAC, spoofing DHCP);<\/li>\n<li>Se pot efectua atacuri DoS \u2014 cu ARP spoofing pentru re\u021bele IPv4, \u0219i SLAAC DoS \u00een re\u021belele IPv6;<\/li>\n<li>Se poate realiza DNS hijacking;<\/li>\n<li>U\u0219or de utilizat, cu o interfa\u021b\u0103 grafic\u0103 prietenoas\u0103.<\/li>\n<\/ul>\n<p><\/p>\n<h4>Dezavantaje:<\/h4>\n<p><\/p>\n<ul>\n<li>Func\u021bioneaz\u0103 doar pe Windows.<\/li>\n<\/ul>\n<p>\n<img decoding=\"async\" alt=\"Instrumente de re\u021bea, sau cu ce s\u0103 \u00eencepi ca tester de penetrare?\" src=\"\/wp-content\/uploads\/2019\/04\/f9ae7134162a703ad6fd1bdc05667a95.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h2><noindex><a rel=\"nofollow\" name=\"Bettercap\"><\/a><\/noindex>Bettercap<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/bettercap\/bettercap\">Bettercap<\/a><\/noindex> \u2014 un framework puternic pentru analiza \u0219i atacul re\u021belelor, inclusiv atacuri asupra re\u021belelor wireless, BLE (Bluetooth low energy) \u0219i chiar atacuri MouseJack asupra dispozitivelor HID wireless. De asemenea, con\u021bine func\u021bionalitate pentru colectarea de informa\u021bii din trafic (similar cu net-creds). \u00cen general, un cu\u021bit elve\u021bian (all in one). Recent, are \u0219i <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/bettercap\/hydra\">o interfa\u021b\u0103 web grafic\u0103<\/a><\/noindex>.<\/p>\n<h4>Pro:<\/h4>\n<p><\/p>\n<ul>\n<li>Sniffer de creden\u021biale \u2014 poate intercepta URL-uri vizitate \u0219i gazde HTTPS, autentificare HTTP, creden\u021biale prin diferite protocoale;<\/li>\n<li>Multe atacuri MITM integrate;<\/li>\n<li>Proxy modular HTTP(S) transparent \u2014 se poate gestiona traficul \u00een func\u021bie de nevoi;<\/li>\n<li>Server HTTP \u00eencorporat;<\/li>\n<li>Suport pentru caplets \u2014 fi\u0219iere care permit descrierea unor atacuri complexe \u0219i automatizate \u00een limbaj de script.<\/li>\n<\/ul>\n<p><\/p>\n<h4>Dezavantaje:<\/h4>\n<p><\/p>\n<ul>\n<li>Unele module \u2014 de exemplu, ble.enum \u2014 nu sunt complet suportate pe macOS \u0219i Windows, unele fiind dedicate doar pentru Linux \u2014 packet.proxy.<\/li>\n<\/ul>\n<p>\n<img decoding=\"async\" alt=\"Instrumente de re\u021bea, sau cu ce s\u0103 \u00eencepi ca tester de penetrare?\" src=\"\/wp-content\/uploads\/2019\/04\/68f5b6ccd737b3fa0ee5235f31dde4d3.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h2><noindex><a rel=\"nofollow\" name=\"gateway_finder\"><\/a><\/noindex>gateway_finder<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/pentestmonkey\/gateway-finder\">gateway finder <\/a><\/noindex> \u2014 script Python care ajut\u0103 la identificarea posibilelor gateway-uri \u00een re\u021bea. Util pentru verificarea segment\u0103rii sau c\u0103utarea gazdelor care pot ruteze c\u0103tre subre\u021bea necesar\u0103 sau Internet. Potrivit pentru pentest-uri interne, c\u00e2nd trebuie s\u0103 verifica\u021bi rapid existen\u021ba rutelor neautorizate sau a rutelor c\u0103tre alte re\u021bele locale interne. <\/p>\n<h4>Pro:<\/h4>\n<p><\/p>\n<ul>\n<li>U\u0219or de utilizat \u0219i personalizat.<\/li>\n<\/ul>\n<p><img decoding=\"async\" alt=\"Instrumente de re\u021bea, sau cu ce s\u0103 \u00eencepi ca tester de penetrare?\" src=\"\/wp-content\/uploads\/2019\/04\/dee33c0d4426c3b98e89dd726c5b647c.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h2><noindex><a rel=\"nofollow\" name=\"mitmproxy\"><\/a><\/noindex>mitmproxy<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/mitmproxy\/mitmproxy\">mitmproxy<\/a><\/noindex> \u2014 un instrument open-source pentru analiza traficului protejat prin SSL\/TLS. mitmproxy este util pentru interceptarea \u0219i modificarea traficului securizat, desigur, cu anumite limit\u0103ri; instrumentul nu efectueaz\u0103 atacuri de decriptare SSL\/TLS. Este folosit atunci c\u00e2nd trebuie s\u0103 intercepta\u021bi \u0219i s\u0103 \u00eenregistra\u021bi modific\u0103rile \u00een traficul protejat prin SSL\/TLS. Este compus din Mitmproxy \u2014 pentru proxy-ul traficului, mitmdump \u2014 similar cu tcpdump, dar pentru traficul HTTP(S), \u0219i mitmweb \u2014 o interfa\u021b\u0103 web pentru Mitmproxy.<\/p>\n<h4>Pro:<\/h4>\n<p><\/p>\n<ul>\n<li>Func\u021bioneaz\u0103 cu diverse protocoale \u0219i suport\u0103 modificarea diferitelor formate, de la HTML la Protobuf;<\/li>\n<li>API pentru Python \u2014 permite scrierea de scripturi pentru sarcini neobi\u0219nuite;<\/li>\n<li>Poate func\u021biona \u00een modul proxy transparent cu interceptarea traficului.<\/li>\n<\/ul>\n<p><\/p>\n<h4>Dezavantaje:<\/h4>\n<p><\/p>\n<ul>\n<li>Formatul dump-ului nu este compatibil cu nimic \u2014 greu de utilizat grep, trebuie s\u0103 scrii scripturi;<\/li>\n<\/ul>\n<p>\n<img decoding=\"async\" alt=\"Instrumente de re\u021bea, sau cu ce s\u0103 \u00eencepi ca tester de penetrare?\" src=\"\/wp-content\/uploads\/2019\/04\/2049cb5c62067cd65b07abdb1a2d40a5.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<img decoding=\"async\" alt=\"Instrumente de re\u021bea, sau cu ce s\u0103 \u00eencepi ca tester de penetrare?\" src=\"\/wp-content\/uploads\/2019\/04\/a37457f2faafae55f333b4d6839d5254.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h2><noindex><a rel=\"nofollow\" name=\"SIET\"><\/a><\/noindex>SIET<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/Sab0tag3d\/SIET\">SIET<\/a><\/noindex> \u2014 un instrument pentru exploatarea capabilit\u0103\u021bilor protocolului Cisco Smart Install. Este posibil\u0103 ob\u021binerea \u0219i modificarea configura\u021biei, precum \u0219i capturarea controlului asupra dispozitivului Cisco. Dac\u0103 a\u021bi reu\u0219it s\u0103 ob\u021bine\u021bi configurarea dispozitivului Cisco, o pute\u021bi verifica folosind <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/cisco-config-analysis-tool\/ccat\">CCAT<\/a><\/noindex>, acest instrument este util pentru analiza securit\u0103\u021bii configura\u021biei dispozitivelor Cisco.<\/p>\n<h4>Pro:<\/h4>\n<p>\nUtilizarea protocolului Cisco Smart Install permite:<\/p>\n<ul>\n<li>Modificarea adresei serverului tftp pe dispozitivul client, trimi\u021b\u00e2nd un pachet TCP distorsionat;<\/li>\n<li>Copierea fi\u0219ierului de configurare al dispozitivului;<\/li>\n<li>\u00cenlocuirea configura\u021biei dispozitivului, de exemplu, ad\u0103ug\u00e2nd un nou utilizator;<\/li>\n<li>Actualizarea imaginii iOS pe dispozitiv;<\/li>\n<li>Executarea unui set arbitrar de comenzi pe dispozitiv. Aceasta este o nou\u0103 func\u021bie, care func\u021bioneaz\u0103 doar \u00een versiunile 3.6.0E \u0219i 15.2 (2) E iOS;<\/li>\n<\/ul>\n<p><\/p>\n<h4>Dezavantaje:<\/h4>\n<p><\/p>\n<ul>\n<li>Func\u021bioneaz\u0103 cu un set limitat de dispozitive Cisco, de asemenea, este nevoie de un IP \u201ealb\u201d pentru a ob\u021bine un r\u0103spuns de la dispozitiv, sau este necesar s\u0103 te afli \u00een aceea\u0219i re\u021bea cu dispozitivul;<\/li>\n<\/ul>\n<p>\n<img decoding=\"async\" alt=\"Instrumente de re\u021bea, sau cu ce s\u0103 \u00eencepi ca tester de penetrare?\" src=\"\/wp-content\/uploads\/2019\/04\/643e5511c44940d1f9c313347c74029a.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h2><noindex><a rel=\"nofollow\" name=\"yersinia\"><\/a><\/noindex>yersinia<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/tomac\/yersinia\">yersinia<\/a><\/noindex> \u2014 un framework pentru atacuri L2, creat pentru a exploata vulnerabilit\u0103\u021bile de securitate \u00een diferite protocoale de re\u021bea L2.<\/p>\n<h4>Pro:<\/h4>\n<p><\/p>\n<ul>\n<li>Permite efectuarea de atacuri pe protocoale precum STP, CDP, DTP, DHCP, HSRP, VTP \u0219i altele.<\/li>\n<\/ul>\n<p><\/p>\n<h4>Dezavantaje:<\/h4>\n<p><\/p>\n<ul>\n<li>Interfa\u021ba nu este cea mai prietenoas\u0103.<\/li>\n<\/ul>\n<p>\n<img decoding=\"async\" alt=\"Instrumente de re\u021bea, sau cu ce s\u0103 \u00eencepi ca tester de penetrare?\" src=\"\/wp-content\/uploads\/2019\/04\/d0cb4b5fac1fc0e5c302ad133d5b4504.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h2><noindex><a rel=\"nofollow\" name=\"proxychains\"><\/a><\/noindex>proxychains<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/haad\/proxychains\">proxychains<\/a><\/noindex> \u2014 un instrument care permite redirec\u021bionarea traficului aplica\u021biei printr-un proxy SOCKS specificat.<\/p>\n<h4>Pro:<\/h4>\n<p><\/p>\n<ul>\n<li>Ajut\u0103 la redirec\u021bionarea traficului unor aplica\u021bii care, \u00een mod normal, nu \u0219tiu s\u0103 func\u021bioneze cu proxy;<\/li>\n<\/ul>\n<p>\n<img decoding=\"async\" alt=\"Instrumente de re\u021bea, sau cu ce s\u0103 \u00eencepi ca tester de penetrare?\" src=\"\/wp-content\/uploads\/2019\/04\/d09dcdaf7429ea29ff70fb682e7cd590.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n\u00cen acest articol, am analizat pe scurt avantajele \u0219i dezavantajele principalelor instrumente pentru pen-testing-ul re\u021belei interne. Urm\u0103ri\u021bi actualiz\u0103rile, inten\u021bion\u0103m s\u0103 public\u0103m astfel de selec\u021bii \u0219i \u00een continuare: Web, baze de date, aplica\u021bii mobile \u2014 despre asta vom scrie \u0219i noi cu siguran\u021b\u0103.<\/p>\n<p>\u00cemp\u0103rt\u0103\u0219i\u021bi-v\u0103 utilitarele preferate \u00een comentarii!<br \/>\n<br \/>Sursa: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/dsec\/blog\/447882\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>Toolkit \u043d\u0430\u0447\u0438\u043d\u0430\u044e\u0449\u0435\u0433\u043e \u043f\u0435\u043d\u0442\u0435\u0441\u0442\u0435\u0440\u0430: \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u043c \u043a\u0440\u0430\u0442\u043a\u0438\u0439 \u0434\u0430\u0439\u0434\u0436\u0435\u0441\u0442 \u0433\u043b\u0430\u0432\u043d\u044b\u0445 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u0440\u0438\u0433\u043e\u0434\u044f\u0442\u0441\u044f \u043f\u0440\u0438 \u043f\u0435\u043d\u0442\u0435\u0441\u0442\u0435 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0439 \u0441\u0435\u0442\u0438. \u042d\u0442\u0438 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u044b \u0443\u0436\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0448\u0438\u0440\u043e\u043a\u0438\u043c \u043a\u0440\u0443\u0433\u043e\u043c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u043e\u0432, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u0437\u043d\u0430\u0442\u044c \u043e\u0431 \u0438\u0445 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044f\u0445 \u0438 \u0432\u043b\u0430\u0434\u0435\u0442\u044c \u0432 \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0441\u0442\u0432\u0435 \u0431\u0443\u0434\u0435\u0442 \u043f\u043e\u043b\u0435\u0437\u043d\u043e \u043a\u0430\u0436\u0434\u043e\u043c\u0443. \u0421\u043e\u0434\u0435\u0440\u0436\u0430\u043d\u0438\u0435: Nmap Zmap Masscan Nessus Net-Creds network-miner mitm6 Responder Evil_Foca Bettercap gateway_finder mitmproxy SIET yersinia proxychains Nmap Nmap \u2013 opensource \u0443\u0442\u0438\u043b\u0438\u0442\u0430 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":23689,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-31811","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.2.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"Toolkit \u043d\u0430\u0447\u0438\u043d\u0430\u044e\u0449\u0435\u0433\u043e \u043f\u0435\u043d\u0442\u0435\u0441\u0442\u0435\u0440\u0430: \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u043c \u043a\u0440\u0430\u0442\u043a\u0438\u0439 \u0434\u0430\u0439\u0434\u0436\u0435\u0441\u0442 \u0433\u043b\u0430\u0432\u043d\u044b\u0445 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u0440\u0438\u0433\u043e\u0434\u044f\u0442\u0441\u044f \u043f\u0440\u0438 \u043f\u0435\u043d\u0442\u0435\u0441\u0442\u0435 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0439 \u0441\u0435\u0442\u0438.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/network-tools-ili-s-chego-nachat-pentesteru\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.2.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"ro_RO\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47Network tools, \u0438\u043b\u0438 \u0441 \u0447\u0435\u0433\u043e \u043d\u0430\u0447\u0430\u0442\u044c \u043f\u0435\u043d\u0442\u0435\u0441\u0442\u0435\u0440\u0443? | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"Toolkit \u043d\u0430\u0447\u0438\u043d\u0430\u044e\u0449\u0435\u0433\u043e \u043f\u0435\u043d\u0442\u0435\u0441\u0442\u0435\u0440\u0430: \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u043c \u043a\u0440\u0430\u0442\u043a\u0438\u0439 \u0434\u0430\u0439\u0434\u0436\u0435\u0441\u0442 \u0433\u043b\u0430\u0432\u043d\u044b\u0445 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u0440\u0438\u0433\u043e\u0434\u044f\u0442\u0441\u044f \u043f\u0440\u0438 \u043f\u0435\u043d\u0442\u0435\u0441\u0442\u0435 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0439 \u0441\u0435\u0442\u0438.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/network-tools-ili-s-chego-nachat-pentesteru\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T18:43:17+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2019-10-31T18:43:17+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Instrumente de re\u021bea, sau de unde s\u0103 \u00eenceap\u0103 un pen-tester? | ProHoster","description":"Toolkit-ul pentru pen-testerii \u00eencep\u0103tori: v\u0103 prezent\u0103m un rezumat scurt al principalelor instrumente care vor fi utile \u00een pen-testing-ul re\u021belei interne.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/network-tools-ili-s-chego-nachat-pentesteru","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Network tools, \u0438\u043b\u0438 \u0441 \u0447\u0435\u0433\u043e \u043d\u0430\u0447\u0430\u0442\u044c \u043f\u0435\u043d\u0442\u0435\u0441\u0442\u0435\u0440\u0443? | ProHoster","og:description":"Toolkit \u043d\u0430\u0447\u0438\u043d\u0430\u044e\u0449\u0435\u0433\u043e \u043f\u0435\u043d\u0442\u0435\u0441\u0442\u0435\u0440\u0430: \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u043c \u043a\u0440\u0430\u0442\u043a\u0438\u0439 \u0434\u0430\u0439\u0434\u0436\u0435\u0441\u0442 \u0433\u043b\u0430\u0432\u043d\u044b\u0445 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u0440\u0438\u0433\u043e\u0434\u044f\u0442\u0441\u044f \u043f\u0440\u0438 \u043f\u0435\u043d\u0442\u0435\u0441\u0442\u0435 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0439 \u0441\u0435\u0442\u0438.","og:url":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/network-tools-ili-s-chego-nachat-pentesteru","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:43:17+00:00","article:modified_time":"2019-10-31T18:43:17+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"31811","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 07:57:22","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 03:10:46","updated":"2026-01-21 07:57:22","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/31811","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=31811"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/31811\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media\/23689"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=31811"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=31811"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=31811"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}