{"id":34646,"date":"2019-10-31T21:59:35","date_gmt":"2019-10-31T18:59:35","guid":{"rendered":"https:\/\/prohoster.info\/blog\/web-tools-ili-s-chego-nachat-pentesteru\/"},"modified":"2019-10-31T21:59:35","modified_gmt":"2019-10-31T18:59:35","slug":"web-tools-ili-s-chego-nachat-pentesteru","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/web-tools-ili-s-chego-nachat-pentesteru","title":{"rendered":"Web tools, or where to start for a pentester?","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/dsec\/blog\/447882\/\">Continu\u0103m<\/a><\/noindex> s\u0103 vorbim despre unele unelte utile pentru penetration tester. \u00cen noul articol ne vom concentra asupra instrumentelor pentru analiza securit\u0103\u021bii aplica\u021biilor web.<\/p>\n<p>Colegul nostru <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/users\/belove\/\" class=\"user_link\">BeLove<\/a><\/noindex> a mai realizat o astfel de <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/post\/125317\/\">selec\u021bie<\/a><\/noindex> \u00een urm\u0103 cu aproximativ \u0219apte ani. Este interesant s\u0103 vedem ce instrumente \u0219i-au men\u021binut \u0219i consolidat pozi\u021bia, \u0219i care au fost uitate \u0219i sunt acum folosite rar.<br \/>\n<img decoding=\"async\" alt=\"Web tools, or where to start for a pentester?\" src=\"\/wp-content\/uploads\/2019\/05\/a6d02b9593ebdbe1b11ccc38e6357b2f.gif\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><br \/>\nDe remarcat c\u0103 Burp Suite face parte din aceast\u0103 categorie, dar despre el \u0219i pluginurile sale utile va fi publicat un articol separat.<\/p>\n<h2>Cuprins:<\/h2>\n<p><\/p>\n<ul>\n<li> <noindex><a rel=\"nofollow\" href=\"#Amass\">Amass<\/a><\/noindex><\/li>\n<li> <noindex><a rel=\"nofollow\" href=\"#Altdns\">Altdns<\/a><\/noindex><\/li>\n<li> <noindex><a rel=\"nofollow\" href=\"#aquatone\">aquatone<\/a><\/noindex><\/li>\n<li> <noindex><a rel=\"nofollow\" href=\"#MassDNS\">MassDNS<\/a><\/noindex><\/li>\n<li> <noindex><a rel=\"nofollow\" href=\"#nsec3map\">nsec3map<\/a><\/noindex><\/li>\n<li> <noindex><a rel=\"nofollow\" href=\"#Acunetix\">Acunetix<\/a><\/noindex><\/li>\n<li> <noindex><a rel=\"nofollow\" href=\"#Dirsearch\">Dirsearch<\/a><\/noindex><\/li>\n<li> <noindex><a rel=\"nofollow\" href=\"#wfuzz\">wfuzz<\/a><\/noindex><\/li>\n<li> <noindex><a rel=\"nofollow\" href=\"#ffuf\">ffuf<\/a><\/noindex><\/li>\n<li> <noindex><a rel=\"nofollow\" href=\"#gobuster\">gobuster<\/a><\/noindex><\/li>\n<li> <noindex><a rel=\"nofollow\" href=\"#Arjun\">Arjun<\/a><\/noindex><\/li>\n<li> <noindex><a rel=\"nofollow\" href=\"#LinkFinder\">LinkFinder<\/a><\/noindex><\/li>\n<li> <noindex><a rel=\"nofollow\" href=\"#JSParser\">JSParser<\/a><\/noindex><\/li>\n<li> <noindex><a rel=\"nofollow\" href=\"#sqlmap\">sqlmap<\/a><\/noindex><\/li>\n<li> <noindex><a rel=\"nofollow\" href=\"#NoSQLMap\">NoSQLMap<\/a><\/noindex><\/li>\n<li> <noindex><a rel=\"nofollow\" href=\"#oxml_xxe\">oxml_xxe<\/a><\/noindex><\/li>\n<li> <noindex><a rel=\"nofollow\" href=\"#tplmap\">tplmap<\/a><\/noindex><\/li>\n<li> <noindex><a rel=\"nofollow\" href=\"#CeWL\">CeWL<\/a><\/noindex><\/li>\n<li> <noindex><a rel=\"nofollow\" href=\"#Weakpass\">Weakpass<\/a><\/noindex><\/li>\n<li> <noindex><a rel=\"nofollow\" href=\"#AEM_hacker\">AEM_hacker<\/a><\/noindex><\/li>\n<li> <noindex><a rel=\"nofollow\" href=\"#JoomScan\">JoomScan<\/a><\/noindex><\/li>\n<li> <noindex><a rel=\"nofollow\" href=\"#WPScan\">WPScan<\/a><\/noindex><\/li>\n<\/ul>\n<p><\/p>\n<h2><noindex><a rel=\"nofollow\" name=\"Amass\"><\/a><\/noindex>Amass<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/OWASP\/Amass\">Amass<\/a><\/noindex> \u2014 un instrument scris \u00een Go pentru g\u0103sirea \u0219i enumerarea subdomeniilor DNS \u0219i pentru crearea unei h\u0103r\u021bi a re\u021belei externe. Amass este un proiect OWASP, destinat s\u0103 ilustreze cum arat\u0103 organiza\u021biile \u00een internet din perspectiva unui observator extern. Numele subdomeniilor sunt ob\u021binute prin diverse metode, instrumentul folose\u0219te at\u00e2t enumerarea recursiv\u0103 a subdomeniilor, c\u00e2t \u0219i c\u0103utarea \u00een surse deschise.<\/p>\n<p>Pentru a descoperi segmente de re\u021bea interconectate \u0219i numere de sisteme autonome, Amass utilizeaz\u0103 adrese IP ob\u021binute \u00een timpul rul\u0103rii. Toate informa\u021biile g\u0103site sunt folosite pentru a construi o hart\u0103 a re\u021belei.<\/p>\n<h4>Pro:<\/h4>\n<p><\/p>\n<ul>\n<li>Tehnicile de colectare a informa\u021biilor includ:<br \/>\n * DNS \u2014 enumerare a subdomeniilor prin dic\u021bionar, brute force al subdomeniilor, enumerare \u201einteligent\u0103\u201d utiliz\u00e2nd muta\u021bii bazate pe subdomeni g\u0103site, interog\u0103ri DNS inverse \u0219i c\u0103utarea serverelor DNS care permit cereri pentru transfer de zon\u0103 (AXFR); <\/p>\n<p>* C\u0103utare \u00een surse deschise \u2014 Ask, Baidu, Bing, CommonCrawl, DNSDB, DNSDumpster, DNSTable, Dogpile, Exalead, FindSubdomains, Google, IPv4Info, Netcraft, PTRArchive, Riddler, SiteDossier, ThreatCrowd, VirusTotal, Yahoo;<\/p>\n<p>* C\u0103utare \u00een bazele de date ale certificatelor TLS \u2014 Censys, CertDB, CertSpotter, Crtsh, Entrust;<\/p>\n<p>* Utilizarea API-urilor motorului de c\u0103utare \u2014 BinaryEdge, BufferOver, CIRCL, HackerTarget, PassiveTotal, Robtex, SecurityTrails, Shodan, Twitter, Umbrella, URLScan;<\/p>\n<p>* C\u0103utare \u00een arhivele web ale internetului: ArchiveIt, ArchiveToday, Arquivo, LoCArchive, OpenUKArchive, UKGovArchive, Wayback;<\/li>\n<li>Integrare cu Maltego; <\/li>\n<li>Ofer\u0103 cea mai complet\u0103 acoperire pentru sarcina de c\u0103utare a subdomeniilor DNS.<\/li>\n<\/ul>\n<p><\/p>\n<h4>Dezavantaje:<\/h4>\n<p><\/p>\n<ul>\n<li>Fi\u021bi aten\u021bi cu amass.netdomains \u2014 acesta va \u00eencerca s\u0103 se conecteze la fiecare adres\u0103 IP din infrastructura identificat\u0103 \u0219i s\u0103 ob\u021bin\u0103 numele domeniilor din interog\u0103rile DNS inverse \u0219i certificatul TLS. Aceasta este o tehnic\u0103 \u201ezgomotoas\u0103\u201d, care poate dezv\u0103lui activit\u0103\u021bile voastre de cercetare \u00een organiza\u021bia analizat\u0103. <\/li>\n<li>Consumul ridicat de memorie poate ajunge p\u00e2n\u0103 la 2 GB RAM \u00een diferite set\u0103ri, ceea ce va \u00eempiedica rularea acestui instrument \u00een cloud pe un VDS ieftin.<\/li>\n<\/ul>\n<p>\n<img decoding=\"async\" alt=\"Web tools, or where to start for a pentester?\" src=\"\/wp-content\/uploads\/2019\/05\/37e1dd6c273eaef2c7c979a57f98c0d9.gif\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h2><noindex><a rel=\"nofollow\" name=\"Altdns\"><\/a><\/noindex>Altdns<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/infosec-au\/altdns\">Altdns<\/a><\/noindex> \u2014 un instrument Python pentru generarea de dictionare pentru enumerarea subdomeniilor DNS. Permite generarea unei multitudini de variante de subdomenii prin muta\u021bii \u0219i permut\u0103ri. Acest lucru se face folosind cuvinte frecvent \u00eent\u00e2lnite \u00een subdomenii (de exemplu: test, dev, staging), toate muta\u021biile \u0219i permut\u0103rile fiind aplicate subdomeniilor deja cunoscute, care pot fi introduse \u00een Altdns. La ie\u0219ire, se ob\u021bine o list\u0103 de varia\u021bii de subdomenii care pot exista, iar aceast\u0103 list\u0103 poate fi folosit\u0103 ulterior \u00een bruta DNS.<\/p>\n<h4>Pro:<\/h4>\n<p><\/p>\n<ul>\n<li>Func\u021bioneaz\u0103 bine cu seturi mari de date.<\/li>\n<\/ul>\n<p><\/p>\n<h2><noindex><a rel=\"nofollow\" name=\"aquatone\"><\/a><\/noindex>aquatone<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/michenriksen\/aquatone\">aquatone<\/a><\/noindex> \u2014 a fost mai cunoscut anterior ca un alt instrument pentru g\u0103sirea subdomeniilor, dar autorul a renun\u021bat la acesta \u00een favoarea men\u021bionatului Amass. Acum, aquatone este scris \u00een Go \u0219i este mai bine optimizat pentru recunoa\u0219terea prealabil\u0103 a site-urilor web. Acest lucru se face prin parcurgerea domeniilor specificate \u0219i c\u0103utarea site-urilor web pe diferite porturi, dup\u0103 care se colecteaz\u0103 toate informa\u021biile despre site \u0219i se fac capturi de ecran. Este util pentru o recunoa\u0219tere preliminar\u0103 rapid\u0103 a site-urilor web, dup\u0103 care se pot selecta \u021bintele prioritare pentru atacuri.<\/p>\n<h4>Pro:<\/h4>\n<p><\/p>\n<ul>\n<li>La ie\u0219ire, crea\u021bi un grup de fi\u0219iere \u0219i foldere care sunt u\u0219or de utilizat \u00een lucr\u0103rile viitoare cu alte instrumente:<br \/>\n * Raport HTML cu capturi de ecran colectate \u0219i titluri de r\u0103spuns grupate dup\u0103 similaritate;<\/p>\n<p>* Fi\u0219ier cu toate URL-urile pe care au fost g\u0103site site-uri web;<\/p>\n<p> * Fi\u0219ier cu statistici \u0219i date despre pagin\u0103;<\/p>\n<p>* Dosar cu fi\u0219iere care con\u021bin antetele de r\u0103spuns de la \u021bintele g\u0103site; <\/p>\n<p>* Dosar cu fi\u0219iere care con\u021bin corpul r\u0103spunsului de la \u021bintele g\u0103site;<\/p>\n<p>* Capturi de ecran ale site-urilor web g\u0103site;<\/li>\n<li>Suport\u0103 lucrul cu rapoarte XML de la Nmap \u0219i Masscan;<\/li>\n<li>Utilizeaz\u0103 Chrome\/Chromium headless pentru a genera capturi de ecran. <\/li>\n<\/ul>\n<p><\/p>\n<h4>Dezavantaje:<\/h4>\n<p><\/p>\n<ul>\n<li> Poate atrage aten\u021bia sistemelor de detectare a intruziunilor, a\u0219a c\u0103 necesit\u0103 configurare.<\/li>\n<\/ul>\n<p>\nCaptura a fost realizat\u0103 pentru una dintre versiunile vechi ale aquatone (v0.5.0), \u00een care a fost implementat\u0103 c\u0103utarea subdomeniilor DNS. Versiuni mai vechi pot fi g\u0103site pe <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/michenriksen\/aquatone\/releases\">pagina de lans\u0103ri<\/a><\/noindex>.<br \/>\n<img decoding=\"async\" alt=\"Web tools, or where to start for a pentester?\" src=\"\/wp-content\/uploads\/2019\/05\/42cf06a7d2ea19f973f76dccd0442bb8.gif\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h2><noindex><a rel=\"nofollow\" name=\"MassDNS\"><\/a><\/noindex>MassDNS<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/blechschmidt\/massdns\">MassDNS<\/a><\/noindex> \u2014 un alt instrument pentru c\u0103utarea subdomeniilor DNS. Diferen\u021ba principal\u0103 este c\u0103 face cereri DNS direct la numeroase rezolvatoare DNS diferite \u0219i o face cu o vitez\u0103 semnificativ\u0103. <\/p>\n<h4>Pro:<\/h4>\n<p><\/p>\n<ul>\n<li>Rapid \u2014 poate rezolva peste 350 de mii de nume pe secund\u0103.<\/li>\n<\/ul>\n<p><\/p>\n<h4>Dezavantaje:<\/h4>\n<p><\/p>\n<ul>\n<li>MassDNS poate genera o sarcin\u0103 semnificativ\u0103 pe serverele DNS utilizate, ceea ce poate duce la blocarea acestor servere sau la pl\u00e2ngeri c\u0103tre furnizorul dvs. \u00cen plus, va crea o sarcin\u0103 mare pe serverele DNS ale companiei, dac\u0103 acestea exist\u0103 \u0219i dac\u0103 sunt responsabile pentru domeniile pe care \u00eencerca\u021bi s\u0103 le rezolva\u021bi. <\/li>\n<li> Lista rezolvatorilor este \u00een prezent dep\u0103\u0219it\u0103, totu\u0219i, dac\u0103 elimina\u021bi rezolvatorii DNS nefunc\u021bionali \u0219i ad\u0103uga\u021bi altele noi cunoscute, totul va fi bine.<\/li>\n<\/ul>\n<p>\n<img decoding=\"async\" alt=\"Web tools, or where to start for a pentester?\" src=\"\/wp-content\/uploads\/2019\/05\/a53181d6982b8d115ec5ece79fbca157.gif\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<i>Screenshot aquatone v0.5.0<\/i><\/p>\n<h2><noindex><a rel=\"nofollow\" name=\"nsec3map\"><\/a><\/noindex>nsec3map<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/anonion0\/nsec3map\">nsec3map<\/a><\/noindex> \u2014 un instrument Python pentru ob\u021binerea unei liste complete de domenii protejate prin DNSSEC.<\/p>\n<h4>Pro:<\/h4>\n<p><\/p>\n<ul>\n<li>Detecteaz\u0103 rapid gazdele \u00een zonele DNS cu un num\u0103r minim de solicit\u0103ri, dac\u0103 zona are activat\u0103 suportul pentru DNSSEC;<\/li>\n<li>Include un plugin pentru John the Ripper, care poate fi utilizat pentru a sparge hash-urile NSEC3 ob\u021binute.<\/li>\n<\/ul>\n<p><\/p>\n<h4>Dezavantaje:<\/h4>\n<p><\/p>\n<ul>\n<li>Multe erori DNS sunt gestionate incorect;<\/li>\n<li>Nu exist\u0103 un proces automat de paralelizare a prelucr\u0103rii \u00eenregistr\u0103rilor NSEC \u2014 trebuie s\u0103 separa\u021bi manual spa\u021biul de nume;<\/li>\n<li>Consumul ridicat de memorie.<\/li>\n<\/ul>\n<p><\/p>\n<h2><noindex><a rel=\"nofollow\" name=\"Acunetix\"><\/a><\/noindex>Acunetix<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/www.acunetix.com\/\">Acunetix<\/a><\/noindex> \u2014 un scanner de vulnerabilit\u0103\u021bi web care automatizeaz\u0103 procesul de verificare a securit\u0103\u021bii aplica\u021biilor web. Testeaz\u0103 aplica\u021bia pentru a identifica SQL injection, XSS, XXE, SSRF \u0219i multe alte vulnerabilit\u0103\u021bi web. Totu\u0219i, ca orice alt scanner de vulnerabilit\u0103\u021bi web, nu \u00eenlocuie\u0219te un pentester, deoarece lan\u021burile complexe de vulnerabilit\u0103\u021bi sau vulnerabilit\u0103\u021bile din logica aplica\u021biei nu vor putea fi identificate. Totu\u0219i, acoper\u0103 foarte multe vulnerabilit\u0103\u021bi diferite, inclusiv diverse CVE de care pentesterul ar putea fi uitat, fiind astfel foarte util pentru a reduce sarcinile de verificare de rutin\u0103.<\/p>\n<h4>Pro:<\/h4>\n<p><\/p>\n<ul>\n<li>Nivel sc\u0103zut de alerte false;<\/li>\n<li>Rezultatele pot fi exportate sub form\u0103 de rapoarte;<\/li>\n<li>Efectueaz\u0103 un num\u0103r mare de verific\u0103ri pentru diferite vulnerabilit\u0103\u021bi;<\/li>\n<li>Scanare paralel\u0103 a mai multor gazde. <\/li>\n<\/ul>\n<p><\/p>\n<h4>Dezavantaje:<\/h4>\n<p><\/p>\n<ul>\n<li>Nu exist\u0103 un algoritm de deduplicare (paginile cu func\u021bionalitate identic\u0103 vor fi considerate diferite de Acunetix, deoarece se acceseaz\u0103 prin URL-uri diferite), dar dezvoltatorii lucreaz\u0103 la acest lucru;<\/li>\n<li>Necesit\u0103 instalarea pe un server web separat, ceea ce complic\u0103 testarea sistemelor client cu conectare VPN \u0219i utilizarea scanner-ului \u00een segmente izolate ale re\u021belei locale a clientului;<\/li>\n<li>Poate \u201ez\u0103p\u0103ci\u201d serviciul studiat, de exemplu, trimi\u021b\u00e2nd prea multe vectori de atac \u00een formularul de contact de pe site, complic\u00e2nd astfel semnificativ procesele de afaceri;<\/li>\n<li>Este un instrument proprietar \u0219i, prin urmare, pl\u0103tit.<\/li>\n<\/ul>\n<p>\n<img decoding=\"async\" alt=\"Web tools, or where to start for a pentester?\" src=\"\/wp-content\/uploads\/2019\/05\/3756cfae6f3cbf221c42c8a439f6ee86.gif\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h2><noindex><a rel=\"nofollow\" name=\"Dirsearch\"><\/a><\/noindex>Dirsearch<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/maurosoria\/dirsearch\">Dirsearch<\/a><\/noindex> \u2014 un instrument Python pentru for\u021barea directoarelor \u0219i fi\u0219ierelor pe site-uri web. <\/p>\n<h4>Pro:<\/h4>\n<p><\/p>\n<ul>\n<li>Poate distinge \u00eentre paginile reale \u201e200 OK\u201d \u0219i paginile \u201e200 OK\u201d cu textul \u201epagina nu a fost g\u0103sit\u0103\u201d;<\/li>\n<li>Vine cu un dic\u021bionar convenabil, av\u00e2nd un bun echilibru \u00eentre dimensiune \u0219i eficien\u021ba c\u0103ut\u0103rii. Con\u021bine c\u0103i standard, caracteristice pentru multe CMS-uri \u0219i stive tehnologice;<\/li>\n<li>Formatul s\u0103u de dic\u021bionar, care permite ob\u021binerea unei bune eficien\u021be \u0219i flexibilit\u0103\u021bi \u00een parcurgerea fi\u0219ierelor \u0219i directoarelor;<\/li>\n<li>Iesire convenabil\u0103 \u2014 text simplu, JSON;<\/li>\n<li>Poate face throttling \u2014 pauz\u0103 \u00eentre cereri, ceea ce este esen\u021bial pentru orice serviciu slab.<\/li>\n<\/ul>\n<p><\/p>\n<h4>Dezavantaje:<\/h4>\n<p><\/p>\n<ul>\n<li>Extensiile trebuie transmise sub form\u0103 de \u0219ir, ceea ce este incomod dac\u0103 trebuie s\u0103 se transmit\u0103 multe extensii simultan;<\/li>\n<li>Pentru a folosi propriul dic\u021bionar, va trebui s\u0103-l ajusta\u021bi pu\u021bin pentru formatul dic\u021bionarelor Dirsearch pentru a ob\u021bine o eficien\u021b\u0103 maxim\u0103.<\/li>\n<\/ul>\n<p>\n<img decoding=\"async\" alt=\"Web tools, or where to start for a pentester?\" src=\"\/wp-content\/uploads\/2019\/05\/00676a0d7916ecc4cc521a3a5e8607e5.gif\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h2><noindex><a rel=\"nofollow\" name=\"wfuzz\"><\/a><\/noindex>wfuzz<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/xmendez\/wfuzz\">wfuzz<\/a><\/noindex> \u2014 un fuzz-er web pentru Python. Probabil unul dintre cei mai cunoscu\u021bi fuzz-eri web. Principiul este simplu: wfuzz permite fuzzing \u00een orice loc din cererea HTTP, ceea ce ofer\u0103 posibilitatea de a fuzz GET\/POST parametri, antete HTTP, inclusiv Cookie \u0219i alte antete de autentificare. De asemenea, este convenabil pentru for\u021barea simpl\u0103 a directoarelor \u0219i fi\u0219ierelor, pentru care este necesar un dic\u021bionar bun. Are, de asemenea, un sistem flexibil de filtre care permite filtrarea r\u0103spunsurilor de la site-uri web pe diferite parametri, permi\u021b\u00e2nd ob\u021binerea unor rezultate eficiente. <\/p>\n<h4>Pro:<\/h4>\n<p><\/p>\n<ul>\n<li>Multifunc\u021bional \u2014 structur\u0103 modular\u0103, asamblarea dureaz\u0103 c\u00e2teva minute;<\/li>\n<li>Mecanism convenabil de filtrare \u0219i fuzzing;<\/li>\n<li>Poate fuzz orice metod\u0103 HTTP, precum \u0219i orice loc din cererea HTTP.<\/li>\n<\/ul>\n<p><\/p>\n<h4>Dezavantaje:<\/h4>\n<p><\/p>\n<ul>\n<li>\u00cen stadiul de dezvoltare.<\/li>\n<\/ul>\n<p>\n<img decoding=\"async\" alt=\"Web tools, or where to start for a pentester?\" src=\"\/wp-content\/uploads\/2019\/05\/f3b2ae5036eb8b8032f16516e78c82d0.gif\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h2><noindex><a rel=\"nofollow\" name=\"ffuf\"><\/a><\/noindex>ffuf<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/ffuf\/ffuf\">ffuf<\/a><\/noindex> \u2014 un fuzz-er web pe Go, creat dup\u0103 \u201echipul \u0219i asem\u0103narea\u201d wfuzz, permite for\u021barea fi\u0219ierelor, directoarelor, c\u0103ilor URL, numelui \u0219i valorilor parametrilor GET\/POST, antetelor HTTP, inclusiv antetul Host pentru for\u021barea gazdelor virtuale. Se diferen\u021biaz\u0103 de fratele s\u0103u wfuzz printr-o vitez\u0103 mai mare \u0219i c\u00e2teva func\u021bii noi, de exemplu, suport\u0103 dic\u021bionare \u00een format Dirsearch.<\/p>\n<h4>Pro:<\/h4>\n<p><\/p>\n<ul>\n<li>Filtrele sunt asem\u0103n\u0103toare cu filtrele wfuzz, permit\u00e2nd configurarea flexibil\u0103 a for\u021b\u0103rii;<\/li>\n<li>Permite fuzzing-ul valorilor antetelor HTTP, datelor cererilor POST \u0219i diferitelor p\u0103r\u021bi ale URL-ului, inclusiv numele \u0219i valorile parametrilor GET;<\/li>\n<li>Poate specifica orice metod\u0103 HTTP.<\/li>\n<\/ul>\n<p><\/p>\n<h4>Dezavantaje:<\/h4>\n<p><\/p>\n<ul>\n<li>\u00cen stadiul de dezvoltare.<\/li>\n<\/ul>\n<p>\n<img decoding=\"async\" alt=\"Web tools, or where to start for a pentester?\" src=\"\/wp-content\/uploads\/2019\/05\/f432340ca10a6d834d01be4577f65fe2.gif\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h2><noindex><a rel=\"nofollow\" name=\"gobuster\"><\/a><\/noindex>gobuster<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/OJ\/gobuster\">gobuster<\/a><\/noindex> \u2014 un instrument pe Go pentru explorare, are dou\u0103 moduri de func\u021bionare. Primul este utilizat pentru brutefor\u021barea fi\u0219ierelor \u0219i directorilor pe un site web, iar al doilea \u2014 pentru enumerarea subdomeniilor DNS. Instrumentul nu suport\u0103 ini\u021bial parcurgerea recursiv\u0103 a fi\u0219ierelor \u0219i directorilor, ceea ce, fire\u0219te, economise\u0219te timp, dar pe de alt\u0103 parte, brutefor\u021barea fiec\u0103rui nou endpoint pe site-ul web trebuie s\u0103 fie ini\u021biat\u0103 separat.<\/p>\n<h4>Pro:<\/h4>\n<p><\/p>\n<ul>\n<li>Vitez\u0103 mare de operare at\u00e2t pentru enumerarea subdomeniilor DNS, c\u00e2t \u0219i pentru brutefor\u021barea fi\u0219ierelor \u0219i directorilor.<\/li>\n<\/ul>\n<p><\/p>\n<h4>Dezavantaje:<\/h4>\n<p><\/p>\n<ul>\n<li>\u00cen versiunea actual\u0103 nu suport\u0103 setarea antetelor HTTP;<\/li>\n<li>\u00cen mod implicit, consider\u0103 valide doar c\u00e2teva coduri de stare HTTP (200, 204, 301, 302, 307).<\/li>\n<\/ul>\n<p>\n<img decoding=\"async\" alt=\"Web tools, or where to start for a pentester?\" src=\"\/wp-content\/uploads\/2019\/05\/2ce6c6ae6bbd0d2dc851ed632b5bc309.gif\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h2><noindex><a rel=\"nofollow\" name=\"Arjun\"><\/a><\/noindex>Arjun<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/s0md3v\/Arjun\">Arjun<\/a><\/noindex> \u2014 un instrument pentru brutefor\u021barea parametrilor HTTP ascun\u0219i \u00een parametrii GET\/POST, precum \u0219i \u00een JSON. Dic\u021bionarul \u00eencorporat are 25 980 de cuvinte, pe care Ajrun le verific\u0103 \u00een aproape 30 de secunde. Focalizarea const\u0103 \u00een faptul c\u0103 Ajrun nu verific\u0103 fiecare parametru \u00een parte, ci examineaz\u0103 aproximativ 1000 de parametri deodat\u0103 \u0219i observ\u0103 dac\u0103 r\u0103spunsul s-a modificat. Dac\u0103 r\u0103spunsul s-a schimbat, atunci \u00eemparte ace\u0219ti 1000 de parametri \u00een dou\u0103 p\u0103r\u021bi \u0219i verific\u0103 care dintre aceste p\u0103r\u021bi influen\u021beaz\u0103 r\u0103spunsul. Astfel, printr-o simpl\u0103 c\u0103utare binar\u0103, se g\u0103se\u0219te parametrul sau mai mul\u021bi parametri ascun\u0219i care au influen\u021bat r\u0103spunsul \u0219i, prin urmare, ar putea exista. <\/p>\n<h4>Pro:<\/h4>\n<p><\/p>\n<ul>\n<li>Vitez\u0103 mare de operare datorit\u0103 c\u0103ut\u0103rii binare;<\/li>\n<li>Suport pentru parametrii GET\/POST, precum \u0219i pentru parametri \u00een format JSON;<\/li>\n<\/ul>\n<p>\nFunc\u021bioneaz\u0103 pe un principiu similar \u0219i pluginul pentru Burp Suite \u2014 <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/PortSwigger\/param-miner\"><b>param-miner<\/b><\/a><\/noindex>, care este, de asemenea, foarte eficient \u00een c\u0103utarea parametrilor HTTP ascun\u0219i. Vom detalia mai multe despre el \u00een viitorul nostru articol despre Burp \u0219i pluginurile sale.<br \/>\n<img decoding=\"async\" alt=\"Web tools, or where to start for a pentester?\" src=\"\/wp-content\/uploads\/2019\/05\/9571552d9954c5d9902ab658ecb77bbb.gif\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h2><noindex><a rel=\"nofollow\" name=\"LinkFinder\"><\/a><\/noindex>LinkFinder<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/GerbenJavado\/LinkFinder\">LinkFinder<\/a><\/noindex> \u2014 un script Python pentru g\u0103sirea linkurilor \u00een fi\u0219ierele JavaScript. Util pentru g\u0103sirea endpointurilor\/URL-urilor ascunse sau uitate dintr-o aplica\u021bie web.<\/p>\n<h4>Pro:<\/h4>\n<p><\/p>\n<ul>\n<li>Rapid;<\/li>\n<li>Exist\u0103 un plugin special pentru Chrome bazat pe LinkFinder.<\/li>\n<\/ul>\n<p>.<\/p>\n<h4>Dezavantaje:<\/h4>\n<p><\/p>\n<ul>\n<li>Ie\u0219ire final\u0103 incomod\u0103;<\/li>\n<li>Nu analizeaz\u0103 JavaScriptul dinamic;<\/li>\n<li>Logica de c\u0103utare a linkurilor este destul de simpl\u0103 \u2014 dac\u0103 JavaScriptul este obfuscat \u00een vreun fel sau linkurile lipsesc ini\u021bial \u0219i sunt generate dinamic, atunci nu va putea g\u0103si nimic. <\/li>\n<\/ul>\n<p>\n<img decoding=\"async\" alt=\"Web tools, or where to start for a pentester?\" src=\"\/wp-content\/uploads\/2019\/05\/4cbb12ad81b249cdb21a2f4861acc346.gif\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h2><noindex><a rel=\"nofollow\" name=\"JSParser\"><\/a><\/noindex>JSParser<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/nahamsec\/JSParser\">JSParser<\/a><\/noindex> \u2014 un script Python care folose\u0219te <noindex><a rel=\"nofollow\" href=\"https:\/\/www.tornadoweb.org\/en\/stable\/\">Tornado<\/a><\/noindex> \u0219i <noindex><a rel=\"nofollow\" href=\"https:\/\/beautifier.io\/\">JSBeautifier<\/a><\/noindex> pentru analiza URL-urilor relative din fi\u0219ierele JavaScript. Foarte util pentru descoperirea cererilor AJAX \u0219i compilarea unei liste de metode API cu care interac\u021bioneaz\u0103 aplica\u021bia. Func\u021bioneaz\u0103 eficient \u00eempreun\u0103 cu LinkFinder. <\/p>\n<h4>Pro:<\/h4>\n<p><\/p>\n<ul>\n<li>Parsing rapid al fi\u0219ierelor JavaScript.<\/li>\n<\/ul>\n<p>\n<img decoding=\"async\" alt=\"Web tools, or where to start for a pentester?\" src=\"\/wp-content\/uploads\/2019\/05\/20812f77021319d9d1d7eafd5d394383.gif\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h2><noindex><a rel=\"nofollow\" name=\"sqlmap\"><\/a><\/noindex>sqlmap<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/sqlmapproject\/sqlmap\">sqlmap<\/a><\/noindex> \u2014 probabil unul dintre cele mai cunoscute instrumente pentru analiza aplica\u021biilor web. Sqlmap automatizeaz\u0103 c\u0103utarea \u0219i exploatarea iniec\u021biilor SQL, func\u021bioneaz\u0103 cu mai multe dialecte SQL \u0219i are \u00een arsenal o gam\u0103 larg\u0103 de tehnici, \u00eencep\u00e2nd de la iniec\u021biile simple \u0219i p\u00e2n\u0103 la vectorii complexi pentru iniec\u021biile SQL bazate pe timp. \u00cen plus, dispune de numeroase tehnici de exploatare ulterioar\u0103 pentru diferite SGBD-uri, astfel \u00eenc\u00e2t este util nu doar ca scanner pentru iniec\u021bii SQL, ci \u0219i ca un instrument puternic pentru exploatarea iniec\u021biilor SQL deja descoperite.<\/p>\n<h4>Pro:<\/h4>\n<p><\/p>\n<ul>\n<li>O gam\u0103 larg\u0103 de tehnici \u0219i vectori;<\/li>\n<li>Num\u0103r sc\u0103zut de alarme false;<\/li>\n<li>Multe op\u021biuni de personalizare, diverse tehnici, baza de date \u021bint\u0103, scripturi de manipulare pentru a ocoli WAF;<\/li>\n<li>Posibilitatea de a crea un dump de date de ie\u0219ire;<\/li>\n<li>Multe op\u021biuni diferite de exploatare, de exemplu, pentru unele SGBD-uri \u2014 \u00eenc\u0103rcarea\/desc\u0103rcarea automat\u0103 a fi\u0219ierelor, ob\u021binerea capacit\u0103\u021bii de execu\u021bie a comenzilor (RCE) \u0219i altele;<\/li>\n<li>Suport pentru conectarea direct\u0103 la SGBD folosind datele ob\u021binute \u00een timpul atacului;<\/li>\n<li>Se poate furniza un fi\u0219ier text cu rezultatele extrase de Burp \u2014 nu trebuie s\u0103 compune\u021bi manual toate atributele din linia de comand\u0103.<\/li>\n<\/ul>\n<p><\/p>\n<h4>Dezavantaje:<\/h4>\n<p><\/p>\n<ul>\n<li>Dificil de personalizat, de exemplu, s\u0103 scrie\u021bi propriile verific\u0103ri din cauza documenta\u021biei insuficiente pentru acest lucru;<\/li>\n<li>F\u0103r\u0103 set\u0103rile corespunz\u0103toare, efectueaz\u0103 un set incomplet de verific\u0103ri, ceea ce poate induce \u00een eroare.<\/li>\n<\/ul>\n<p>\n<img decoding=\"async\" alt=\"Web tools, or where to start for a pentester?\" src=\"\/wp-content\/uploads\/2019\/05\/f99ac42bd3139894668353924112d416.gif\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h2><noindex><a rel=\"nofollow\" name=\"NoSQLMap\"><\/a><\/noindex>NoSQLMap<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/codingo\/NoSQLMap\">NoSQLMap<\/a><\/noindex> \u2014 un instrument scris \u00een Python pentru automatizarea c\u0103ut\u0103rii \u0219i exploat\u0103rii iniec\u021biilor NoSQL. Este convenabil de utilizat nu doar cu bazele de date NoSQL, ci \u0219i direct \u00een auditul aplica\u021biilor web care folosesc NoSQL.<\/p>\n<h4>Pro:<\/h4>\n<p><\/p>\n<ul>\n<li>La fel ca sqlmap, permite nu doar descoperirea vulnerabilit\u0103\u021bilor poten\u021biale, ci \u0219i verificarea posibilit\u0103\u021bii de exploatare pentru MongoDB \u0219i CouchDB.<\/li>\n<\/ul>\n<p><\/p>\n<h4>Dezavantaje:<\/h4>\n<p><\/p>\n<ul>\n<li>Nu suport\u0103 NoSQL pentru Redis, Cassandra, \u00een aceast\u0103 direc\u021bie se desf\u0103\u0219oar\u0103 dezvolt\u0103ri.<\/li>\n<\/ul>\n<h2><noindex><a rel=\"nofollow\" name=\"oxml_xxe\"><\/a><\/noindex>oxml_xxe<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/BuffaloWill\/oxml_xxe\">oxml_xxe<\/a><\/noindex> \u2014 un instrument pentru \u00eencorporarea exploiturilor XXE XML \u00een diferite tipuri de fi\u0219iere care utilizeaz\u0103 \u00een orice form\u0103 formatul XML.<\/p>\n<h4>Pro:<\/h4>\n<p><\/p>\n<ul>\n<li>Suport\u0103 multe formate r\u0103sp\u00e2ndite, cum ar fi DOCX, ODT, SVG, XML.<\/li>\n<\/ul>\n<p><\/p>\n<h4>Dezavantaje:<\/h4>\n<p><\/p>\n<ul>\n<li>Suportul pentru PDF, JPEG, GIF nu este complet implementat;<\/li>\n<li>Creaz\u0103 doar un singur fi\u0219ier. Pentru a solu\u021biona aceast\u0103 problem\u0103, se poate utiliza instrumentul <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/BuffaloWill\/oxml_xxe\">docem<\/a><\/noindex>, care poate crea un num\u0103r mare de fi\u0219iere cu payload-uri \u00een diferite loca\u021bii. <\/li>\n<\/ul>\n<p>\nUtilitarele men\u021bionate mai sus se descurc\u0103 excelent \u00een testarea XXE \u00een cazul \u00eenc\u0103rc\u0103rii documentelor care con\u021bin XML. Dar nu uita\u021bi c\u0103 procesatoarele de formate XML pot ap\u0103rea \u00een multe alte cazuri, de exemplu, XML poate fi utilizat ca format de date \u00een loc de JSON.<\/p>\n<p>De aceea, v\u0103 recomand\u0103m s\u0103 acorda\u021bi aten\u021bie urm\u0103torului depozit, care con\u021bine o mare varietate de payload-uri: <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/swisskyrepo\/PayloadsAllTheThings\">PayloadsAllTheThings<\/a><\/noindex>.<\/p>\n<h2><noindex><a rel=\"nofollow\" name=\"tplmap\"><\/a><\/noindex>tplmap<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/epinna\/tplmap\">tplmap<\/a><\/noindex> \u2014 un instrument Python pentru identificarea \u0219i exploatarea automat\u0103 a vulnerabilit\u0103\u021bilor Server-Side Template Injection, av\u00e2nd set\u0103ri \u0219i steaguri similare cu sqlmap. Folose\u0219te mai multe tehnici \u0219i vectori diferi\u021bi, inclusiv injec\u021bii blind, \u0219i are tehnici pentru executarea codului \u0219i pentru \u00eenc\u0103rcarea\/desc\u0103rcarea fi\u0219ierelor arbitrare. \u00cen plus, dispune de tehnici pentru zeci de motoare de \u0219abloane diferite \u0219i unele tehnici pentru g\u0103sirea injec\u021biilor de cod de tip eval() \u00een Python, Ruby, PHP, JavaScript. \u00cen cazul unei exploat\u0103ri reu\u0219ite, deschide o consol\u0103 interactiv\u0103.<\/p>\n<h4>Pro:<\/h4>\n<p><\/p>\n<ul>\n<li>O gam\u0103 larg\u0103 de tehnici \u0219i vectori; <\/li>\n<li>Suport\u0103 numeroase motoare pentru randarea \u0219abloanelor;<\/li>\n<li>Multe tehnici de exploatare.<\/li>\n<\/ul>\n<p><\/p>\n<h2><noindex><a rel=\"nofollow\" name=\"CeWL\"><\/a><\/noindex>CeWL<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/digininja\/CeWL\">CeWL<\/a><\/noindex> \u2014 un generator de dic\u021bionare \u00een Ruby, creat pentru extragerea cuvintelor unice de pe un site web specificat, parcurge linkurile de pe site la o ad\u00e2ncime specificat\u0103. Dic\u021bionarul compus din cuvinte unice poate fi utilizat ulterior pentru brutefor\u021barea parolelor pe servicii sau brutefor\u021barea fi\u0219ierelor \u0219i directoarelor pe acela\u0219i site web, fie pentru atacarea hash-urilor ob\u021binute folosind hashcat sau John the Ripper. Util \u00een compilarea unei liste \u201e\u021bint\u0103\u201d de parole poten\u021biale.<\/p>\n<h4>Pro:<\/h4>\n<p><\/p>\n<ul>\n<li>U\u0219or de folosit.<\/li>\n<\/ul>\n<p><\/p>\n<h4>Dezavantaje:<\/h4>\n<p><\/p>\n<ul>\n<li>Trebuie s\u0103 fi\u021bi mai aten\u021bi cu ad\u00e2ncimea c\u0103ut\u0103rii pentru a nu captura un domeniu suplimentar.<\/li>\n<\/ul>\n<p><\/p>\n<h2><noindex><a rel=\"nofollow\" name=\"Weakpass\"><\/a><\/noindex>Weakpass<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/weakpass.com\">Weakpass<\/a><\/noindex> \u2014 un serviciu care con\u021bine o multitudine de dic\u021bionare cu parole unice. Extrem de util pentru diverse sarcini legate de spargerea parolelor, de la brutefor\u021barea simpl\u0103 online a conturilor pe serviciile \u021bint\u0103, p\u00e2n\u0103 la brutefor\u021barea offline a hash-urilor ob\u021binute prin <noindex><a rel=\"nofollow\" href=\"https:\/\/hashcat.net\/hashcat\/\">hashcat<\/a><\/noindex> sau <noindex><a rel=\"nofollow\" href=\"https:\/\/www.openwall.com\/john\/\">John The Ripper<\/a><\/noindex>. Con\u021bine aproximativ 8 miliarde de parole cu lungimi \u00eentre 4 \u0219i 25 de caractere. <\/p>\n<h4>Pro:<\/h4>\n<p><\/p>\n<ul>\n<li>Include at\u00e2t dic\u021bionare specifice, c\u00e2t \u0219i dic\u021bionare cu cele mai frecvente parole \u2013 se poate alege un dic\u021bionar specific \u00een func\u021bie de necesit\u0103\u021bi;<\/li>\n<li>Dic\u021bionarele sunt actualizate \u0219i completate cu parole noi.<\/li>\n<li>Dic\u021bionarele sunt sortate dup\u0103 eficien\u021b\u0103. Pute\u021bi alege o variant\u0103 at\u00e2t pentru un brut force online rapid, c\u00e2t \u0219i pentru o selec\u021bie detaliat\u0103 a parolelor dintr-un dic\u021bionar voluminos cu ultimele scurgeri;<\/li>\n<li>Exist\u0103 un calculator care arat\u0103 timpul necesar pentru a sparge parolele pe echipamentul dumneavoastr\u0103.<\/li>\n<\/ul>\n<p>\n<img decoding=\"async\" alt=\"Web tools, or where to start for a pentester?\" src=\"\/wp-content\/uploads\/2019\/05\/1e9daeca2b42b5ba4dd7750bee2ef36c.gif\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nAm dori s\u0103 separ\u0103m instrumentele pentru verific\u0103ri CMS: WPScan, JoomScan \u0219i AEM hacker. <\/p>\n<h2><noindex><a rel=\"nofollow\" name=\"AEM_hacker\"><\/a><\/noindex>AEM_hacker<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/0ang3el\/aem-hacker\">AEM hacker<\/a><\/noindex> \u2014 un instrument pentru identificarea vulnerabilit\u0103\u021bilor \u00een aplica\u021biile Adobe Experience Manager (AEM). <\/p>\n<h4>Pro:<\/h4>\n<p><\/p>\n<ul>\n<li>Poate detecta aplica\u021biile AEM din lista de URL-uri furnizat\u0103;<\/li>\n<li>Include scripturi pentru ob\u021binerea RCE prin \u00eenc\u0103rcarea unui shell JSP sau exploatarea SSRF.<\/li>\n<\/ul>\n<p><\/p>\n<h2><noindex><a rel=\"nofollow\" name=\"JoomScan\"><\/a><\/noindex>JoomScan<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/rezasp\/joomscan\">JoomScan<\/a><\/noindex> \u2014 un instrument pe Perl pentru automatizarea descoperirii vulnerabilit\u0103\u021bilor \u00een timpul implement\u0103rii Joomla CMS. <\/p>\n<h4>Pro:<\/h4>\n<p><\/p>\n<ul>\n<li>Este capabil s\u0103 identifice deficien\u021bele de configurare \u0219i problemele de set\u0103ri administrative;<\/li>\n<li>Enumer\u0103 versiunile Joomla \u0219i vulnerabilit\u0103\u021bile asociate, similar pentru componentele individuale;<\/li>\n<li>Con\u021bine peste 1000 de exploat\u0103ri pentru componente Joomla;<\/li>\n<li>Ofer\u0103 rapoarte finale \u00een formate text \u0219i HTML.<\/li>\n<\/ul>\n<p>\n<img decoding=\"async\" alt=\"Web tools, or where to start for a pentester?\" src=\"\/wp-content\/uploads\/2019\/05\/2f9561213895d338f8e88127bf02c3e6.gif\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h2><noindex><a rel=\"nofollow\" name=\"WPScan\"><\/a><\/noindex>WPScan<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/wpscanteam\/wpscan\">WPScan<\/a><\/noindex> \u2014 un instrument pentru scanarea site-urilor WordPress, av\u00e2nd \u00een arsenal vulnerabilit\u0103\u021bi at\u00e2t pentru motorul WordPress \u00een sine, c\u00e2t \u0219i pentru unele pluginuri.<\/p>\n<h4>Pro:<\/h4>\n<p><\/p>\n<ul>\n<li>Este capabil s\u0103 enumere nu doar pluginurile \u0219i temele nesecurizate WordPress, ci \u0219i s\u0103 ob\u021bin\u0103 lista utilizatorilor \u0219i fi\u0219ierele TimThumb;<\/li>\n<li>Poate efectua atacuri de brut force pe site-urile WordPress.<\/li>\n<\/ul>\n<p><\/p>\n<h4>Dezavantaje:<\/h4>\n<p><\/p>\n<ul>\n<li>F\u0103r\u0103 set\u0103rile corespunz\u0103toare, efectueaz\u0103 un set incomplet de verific\u0103ri, ceea ce poate induce \u00een eroare.<\/li>\n<\/ul>\n<p>\n<img decoding=\"async\" alt=\"Web tools, or where to start for a pentester?\" src=\"\/wp-content\/uploads\/2019\/05\/eb391071eb62381da16c425d95e7cec5.gif\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n\u00cen general, diferite persoane prefer\u0103 instrumente diferite pentru lucru: fiecare dintre ele este bun \u00een felul s\u0103u, iar ceea ce a pl\u0103cut unei persoane poate s\u0103 nu fie potrivit pentru alta. Dac\u0103 considera\u021bi c\u0103 am neglijat o utilitate bun\u0103 \u2014 v\u0103 rug\u0103m s\u0103 ne scrie\u021bi despre ea \u00een comentarii!<br \/>\n<br \/>Sursa: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/dsec\/blog\/452836\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u043c \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u044b\u0432\u0430\u0442\u044c \u043e \u043f\u043e\u043b\u0435\u0437\u043d\u044b\u0445 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0445 \u0434\u043b\u044f \u043f\u0435\u043d\u0442\u0435\u0441\u0442\u0435\u0440\u0430. \u0412 \u043d\u043e\u0432\u043e\u0439 \u0441\u0442\u0430\u0442\u044c\u0435 \u043c\u044b \u0440\u0430\u0441\u0441\u043c\u043e\u0442\u0440\u0438\u043c \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u044b \u0434\u043b\u044f \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u043e\u0441\u0442\u0438 \u0432\u0435\u0431-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439. \u041d\u0430\u0448 \u043a\u043e\u043b\u043b\u0435\u0433\u0430 BeLove \u0443\u0436\u0435 \u0434\u0435\u043b\u0430\u043b \u043f\u043e\u0434\u043e\u0431\u043d\u0443\u044e \u043f\u043e\u0434\u0431\u043e\u0440\u043a\u0443 \u043e\u043a\u043e\u043b\u043e \u0441\u0435\u043c\u0438 \u043b\u0435\u0442 \u043d\u0430\u0437\u0430\u0434. \u0418\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u043e \u0432\u0437\u0433\u043b\u044f\u043d\u0443\u0442\u044c, \u043a\u0430\u043a\u0438\u0435 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u044b \u0441\u043e\u0445\u0440\u0430\u043d\u0438\u043b\u0438 \u0438 \u0443\u043a\u0440\u0435\u043f\u0438\u043b\u0438 \u0441\u0432\u043e\u0438 \u043f\u043e\u0437\u0438\u0446\u0438\u0438, \u0430 \u043a\u0430\u043a\u0438\u0435 \u043e\u0442\u043e\u0448\u043b\u0438 \u043d\u0430 \u0437\u0430\u0434\u043d\u0438\u0439 \u043f\u043b\u0430\u043d \u0438 \u0441\u0435\u0439\u0447\u0430\u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0440\u0435\u0434\u043a\u043e. \u041e\u0442\u043c\u0435\u0442\u0438\u043c, \u0447\u0442\u043e \u0441\u044e\u0434\u0430 \u0436\u0435 \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0441\u044f \u0438 Burp Suite, [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":26108,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-34646","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.2.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u043c \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u044b\u0432\u0430\u0442\u044c \u043e \u043f\u043e\u043b\u0435\u0437\u043d\u044b\u0445 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0445 \u0434\u043b\u044f \u043f\u0435\u043d\u0442\u0435\u0441\u0442\u0435\u0440\u0430.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/web-tools-ili-s-chego-nachat-pentesteru\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.2.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"ro_RO\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47Web tools, \u0438\u043b\u0438 \u0441 \u0447\u0435\u0433\u043e \u043d\u0430\u0447\u0430\u0442\u044c \u043f\u0435\u043d\u0442\u0435\u0441\u0442\u0435\u0440\u0443? | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u043c \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u044b\u0432\u0430\u0442\u044c \u043e \u043f\u043e\u043b\u0435\u0437\u043d\u044b\u0445 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0445 \u0434\u043b\u044f \u043f\u0435\u043d\u0442\u0435\u0441\u0442\u0435\u0440\u0430.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/web-tools-ili-s-chego-nachat-pentesteru\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T18:59:35+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2019-10-31T18:59:35+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Instrumente web, sau cu ce s\u0103 \u00eenceap\u0103 un pentester? | ProHoster","description":"Continu\u0103m s\u0103 vorbim despre instrumente utile pentru pentester.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/web-tools-ili-s-chego-nachat-pentesteru","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Web tools, \u0438\u043b\u0438 \u0441 \u0447\u0435\u0433\u043e \u043d\u0430\u0447\u0430\u0442\u044c \u043f\u0435\u043d\u0442\u0435\u0441\u0442\u0435\u0440\u0443? | ProHoster","og:description":"\u041f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u043c \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u044b\u0432\u0430\u0442\u044c \u043e \u043f\u043e\u043b\u0435\u0437\u043d\u044b\u0445 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0445 \u0434\u043b\u044f \u043f\u0435\u043d\u0442\u0435\u0441\u0442\u0435\u0440\u0430.","og:url":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/web-tools-ili-s-chego-nachat-pentesteru","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:59:35+00:00","article:modified_time":"2019-10-31T18:59:35+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"34646","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 20:04:30","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 02:17:23","updated":"2026-01-21 20:04:30","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/34646","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=34646"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/34646\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media\/26108"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=34646"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=34646"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=34646"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}