{"id":34725,"date":"2019-10-31T22:00:00","date_gmt":"2019-10-31T19:00:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/pishem-reverse-socks5-proxy-na-powershell-chast-1\/"},"modified":"2019-10-31T22:00:00","modified_gmt":"2019-10-31T19:00:00","slug":"pishem-reverse-socks5-proxy-na-powershell-chast-1","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/pishem-reverse-socks5-proxy-na-powershell-chast-1","title":{"rendered":"Scriem un proxy Reverse socks5 \u00een PowerShell. Partea 1.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Istoria cercet\u0103rii \u0219i dezvolt\u0103rii \u00een 3 p\u0103r\u021bi. Partea 1 - cercetare.<br \/>\nSunt multe c\u0103r\u021bi - dar \u0219i mai multe beneficii.<\/p>\n<h3>Formularea problemei<\/h3>\n<p>\n\u00cen timpul desf\u0103\u0219ur\u0103rii testelor de penetrare \u0219i campaniilor RedTeam, nu \u00eentotdeauna reu\u0219im s\u0103 folosim instrumentele standard ale clien\u021bilor, cum ar fi VPN, RDP, Citrix etc., ca leg\u0103tur\u0103 pentru accesul la re\u021beaua intern\u0103. \u00cen unele cazuri, VPN-ul standard func\u021bioneaz\u0103 pe baza MFA \u0219i ca al doilea factor este utilizat un token hardware, \u00een altele este monitorizat agresiv \u0219i accesul nostru prin VPN este imediat vizibil, cum s-ar spune - cu toate consecin\u021bele, iar \u00een unele locuri pur \u0219i simplu nu exist\u0103 astfel de instrumente. <\/p>\n<p>\u00cen astfel de cazuri, suntem nevoi\u021bi s\u0103 realiz\u0103m constant a\u0219a-numitele \u201etuneluri inverse\u201d - conexiuni din re\u021beaua intern\u0103 c\u0103tre o resurs\u0103 extern\u0103 sau un server pe care \u00eel control\u0103m. \u00cen interiorul acestui tunel putem deja lucra cu resursele interne ale clien\u021bilor.<\/p>\n<p>Exist\u0103 mai multe tipuri de astfel de tuneluri inverse. Cel mai cunoscut dintre ele, bine\u00een\u021beles, este Meterpreter. De asemenea, tunelurile SSH cu redirec\u021bionare invers\u0103 a porturilor se bucur\u0103 de o mare popularitate \u00een r\u00e2ndul hackerilor. Exist\u0103 suficiente metode de realizare a tunel\u0103rii inverse, iar multe dintre ele sunt bine studiate \u0219i descrise.<br \/>\nDesigur, din partea lor, dezvoltatorii solu\u021biilor de securitate nici nu stau deoparte \u0219i detecteaz\u0103 activ astfel de ac\u021biuni.<br \/>\nDe exemplu, sesiunile MSF sunt detectate cu succes de IPS-urile moderne de la Cisco sau Positive Tech, iar un tunel SSH invers poate fi detectat practic de orice firewall normal.<\/p>\n<p>Prin urmare, pentru a r\u0103m\u00e2ne neobservat \u00eentr-o campanie bun\u0103 RedTeam - trebuie s\u0103 construim un tunel invers prin metode neobi\u0219nuite \u0219i s\u0103 ne ajust\u0103m c\u00e2t mai aproape de modul real de lucru al re\u021belei.<\/p>\n<p>Hai s\u0103 \u00eencerc\u0103m s\u0103 g\u0103sim sau s\u0103 invent\u0103m ceva de genul acesta.<br \/>\n<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><br \/>\n\u00cenainte de a inventa ceva, trebuie s\u0103 \u00een\u021belegem ce rezultate dorim s\u0103 ob\u021binem, ce func\u021bii ar trebui s\u0103 \u00eendeplineasc\u0103 dezvoltarea noastr\u0103. Care vor fi cerin\u021bele pentru tunel, astfel \u00eenc\u00e2t s\u0103 putem lucra \u00een mod maxim ascuns?<\/p>\n<p>Este evident c\u0103 aceste cerin\u021be pot varia semnificativ \u00een fiecare caz, dar, din experien\u021ba de lucru, putem eviden\u021bia principalele:<\/p>\n<ul>\n<li> func\u021bionare pe sistemul de operare Windows 7-10. Deoarece \u00een majoritatea re\u021belelor corporative se utilizeaz\u0103 \u00een mod special Windows;<\/li>\n<li> clientul se conecteaz\u0103 la server prin SSL pentru a evita ascultarea pasiv\u0103 prin intermediul ips;<\/li>\n<li> la conectare, clientul trebuie s\u0103 suporte func\u021bionarea prin intermediul unui server proxy cu autentificare, deoarece \u00een multe companii accesul la internet se face prin proxy. De fapt, ma\u0219ina clientului poate s\u0103 nu fie con\u0219tient\u0103 de acest lucru \u0219i proxy-ul este utilizat \u00een mod transparent. Dar aceast\u0103 func\u021bionalitate trebuie s\u0103 fie inclus\u0103;<\/li>\n<li> partea clientului trebuie s\u0103 fie concis\u0103 \u0219i portabil\u0103;<br \/>\nEste clar c\u0103 pentru a func\u021biona \u00een re\u021beaua Clientului, pe ma\u0219ina clientului se poate instala OpenVPN \u0219i se poate ridica un tunel complet c\u0103tre propriul server (bine\u00een\u021beles, clien\u021bii openvpn pot func\u021biona prin proxy). Dar, pe de o parte, nu \u00eentotdeauna aceasta va fi posibil, deoarece s-ar putea s\u0103 nu fim administratori locali acolo, iar pe de alt\u0103 parte, acest lucru ar putea genera at\u00e2t de mult zgomot \u00eenc\u00e2t un SIEM sau HIPS decent ar ac\u021biona imediat. Ideal ar fi ca clientul nostru s\u0103 fie a\u0219a-numita echip\u0103 inline, cum ar fi multe shell-uri bash, \u0219i s\u0103 fie executat prin linia de comand\u0103, de exemplu, la execu\u021bia comenzilor dintr-un macro Word.<\/li>\n<li> tunelul nostru trebuie s\u0103 fie multi-threaded \u0219i s\u0103 suporte numeroase conexiuni simultan;<\/li>\n<li> conexiunea client-server trebuie s\u0103 aib\u0103 o anumit\u0103 autentificare pentru a se stabili tunelul doar pentru clientul nostru, nu pentru to\u021bi cei care vin la serverul nostru pe adresa \u0219i portul men\u021bionat. Ideal, pentru \u201eutilizatori externi\u201d, ar trebui s\u0103 se deschid\u0103 o pagin\u0103 de destina\u021bie cu pisici sau o tem\u0103 profesional\u0103 legat\u0103 de domeniul de origine.<br \/>\nDe exemplu, dac\u0103 Clientul este o organiza\u021bie medical\u0103, atunci pentru administratorul de securitate informa\u021bional\u0103 care decide s\u0103 verifice resursa accesat\u0103 de un angajat al clinicii, ar trebui s\u0103 se deschid\u0103 o pagin\u0103 cu produse farmaceutice, Wikipedia cu descrierea diagnosticului sau blogul doctorului Komarovski etc. <\/li>\n<\/ul>\n<p><\/p>\n<h3>Analiza instrumentelor existente<\/h3>\n<p>\n\u00cenainte de a inventa bicicleta proprie - este necesar s\u0103 se fac\u0103 o analiz\u0103 a bicicletelor existente \u0219i s\u0103 se \u00een\u021beleag\u0103 dac\u0103 este realmente necesar\u0103 \u0219i, probabil, nu doar noi ne-am g\u00e2ndit la necesitatea unei astfel de biciclete func\u021bionale.<\/p>\n<p>C\u0103utarea pe internet (parc\u0103 c\u0103ut\u0103m destul de bine), precum \u0219i c\u0103utarea pe GitHub dup\u0103 cuvintele cheie \u201ereverse socks\u201d nu a adus multe rezultate. \u00cen principal, totul se reduce la construirea tunelurilor SSH cu redirec\u021bionare invers\u0103 a porturilor \u0219i tot ce este legat de aceasta. Pe l\u00e2ng\u0103 tunelurile SSH, putem eviden\u021bia c\u00e2teva solu\u021bii:<\/p>\n<p><b><noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/klsecservices\/rpivot\">github.com\/klsecservices\/rpivot<\/a><\/noindex><\/b><br \/>\nO implementare veche a tunelului invers de la echipa de la Laboratorul Kaspersky. Din nume este clar pentru ce este destinat acest script. Este implementat pe Python 2.7, tunelul func\u021bioneaz\u0103 \u00een modul cleartext (a\u0219a cum este la mod\u0103 s\u0103 spunem acum \u2013 salut, RKN)<\/p>\n<p><b><noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/tonyseek\/rsocks\">github.com\/tonyseek\/rsocks<\/a><\/noindex><\/b><br \/>\nO alt\u0103 implementare pe Python, tot \u00een cleartext, dar cu mai multe func\u021bionalit\u0103\u021bi. Este scris sub form\u0103 de modul \u0219i are API pentru integrarea solu\u021biei \u00een proiectele proprii.<\/p>\n<p><b><noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/llkat\/rsockstun\">github.com\/llkat\/rsockstun<\/a><\/noindex><\/b><br \/>\n<b><noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/mis-team\/rsockstun\">github.com\/mis-team\/rsockstun<\/a><\/noindex><\/b><br \/>\nPrimul link este versiunea ini\u021bial\u0103 a implement\u0103rii reverse socks pe Golang (nu este sus\u021binut\u0103 de dezvoltator).<br \/>\nAl doilea link este deja versiunea noastr\u0103 \u00eembun\u0103t\u0103\u021bit\u0103 cu func\u021bionalit\u0103\u021bi suplimentare, tot pe Golang. \u00cen versiunea noastr\u0103 am implementat SSL, func\u021bionare prin proxy cu autorizare NTLM, autorizare pe client, pagin\u0103 de destina\u021bie \u00een cazul parolei incorecte (mai bine zis \u2013 redirec\u021bionare c\u0103tre pagina de destina\u021bie), modul multi-thread (deci, cu tunelul pot lucra mai multe persoane simultan), sistem de ping-uri pentru a verifica dac\u0103 clientul este activ sau nu.<\/p>\n<p><b><noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/jun7th\/tsocks\">github.com\/jun7th\/tsocks<\/a><\/noindex><\/b><br \/>\nO implementare a reverse socks de la \u201eprietenii no\u0219tri chinezi\u201d pe Python. Acolo se g\u0103se\u0219te \u0219i pentru cei lene\u0219i \u0219i \u201enemuritori\u201d un binar gata (exe), compilat de chinezi \u0219i gata de utilizare. Aici un singur zeu chinez \u0219tie ce altceva poate fi \u00een acest binar, pe l\u00e2ng\u0103 func\u021bionalitatea principal\u0103, a\u0219a c\u0103 folosi\u021bi-l pe riscul vostru.<\/p>\n<p><b><noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/securesocketfunneling\/ssf\">github.com\/securesocketfunneling\/ssf<\/a><\/noindex><\/b><br \/>\nUn proiect destul de interesant pe C++ pentru implementarea reverse socks \u0219i nu numai. Pe l\u00e2ng\u0103 tunelul invers, acesta poate face redirec\u021bion\u0103ri de porturi, creare de shell-uri pentru comenzi etc.<\/p>\n<p><b>MSF meterpreter<\/b><br \/>\nAici, cum se spune, f\u0103r\u0103 comentarii. To\u021bi hackerii ceva mai educa\u021bi sunt bine familiariza\u021bi cu aceast\u0103 unealt\u0103 \u0219i \u00een\u021beleg c\u00e2t de u\u0219or este detectat\u0103 de c\u0103tre solu\u021biile de protec\u021bie.<\/p>\n<p>Toate instrumentele descrise mai sus func\u021bioneaz\u0103 pe o tehnologie similar\u0103: pe ma\u0219ina din re\u021bea se lanseaz\u0103 un modul binar executabil, preg\u0103tit dinainte, care stabile\u0219te o conexiune cu un server extern. Pe server, se lanseaz\u0103 un server SOCKS4\/5 care accept\u0103 conexiuni \u0219i le transmite clientului.<\/p>\n<p>Dezavantajul tuturor acestor instrumente este c\u0103 fie pe ma\u0219ina client este necesar s\u0103 fie instalat Python sau Golang (c\u00e2t de des a\u021bi \u00eent\u00e2lnit Python instalat pe ma\u0219inile, de exemplu, ale directorilor sau angaja\u021bilor de birou?), fie pe aceast\u0103 ma\u0219in\u0103 trebuie s\u0103 transfera\u021bi un binar preg\u0103tit anterior (de fapt, python \u0219i scriptul \u00eentr-un singur pachet) \u0219i s\u0103 porni\u021bi acel binar acolo. Iar desc\u0103rcarea unui exe \u0219i apoi rularea acestuia este o semn\u0103tur\u0103 destul de suspect\u0103 pentru antivirusul local sau HIPS.<\/p>\n<p>\u00cen general, concluzia se impune de la sine \u2013 avem nevoie de o solu\u021bie pe PowerShell. Acum vom avea parte de critici \u2013 cum c\u0103 PowerShell este deja o tehnologie uzat\u0103, monitorizat\u0103, blocat\u0103 etc. \u0219i toate celelalte. De fapt, nu este adev\u0103rat peste tot. Declaram acest lucru cu responsabilitate. Apropo, exist\u0103 o mul\u021bime de modalit\u0103\u021bi de a ocoli blocajele (aici iar\u0103\u0219i e o fraz\u0103 la mod\u0103 referitoare la salutul RKN \ud83d\ude42), de la simpla redenumire a powershell.exe \u00een cmdd.exe p\u00e2n\u0103 la utilizarea powerdll \u0219i altele.<\/p>\n<h3>\u00cencepem s\u0103 dezvolt\u0103m<\/h3>\n<p>\nEvident, vom c\u0103uta pe Google \u0219i... nu vom g\u0103si nimic pe aceast\u0103 tem\u0103 (dac\u0103 cineva a g\u0103sit, l\u0103sa\u021bi link-uri \u00een comentarii). Exist\u0103 doar <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/p3nt4\/Invoke-SocksProxy\">specifica\u021biei CSI prin sidecar-uri nu corespunde acestor cerin\u021be:<\/a><\/noindex> Socks5 pe PowerShell, dar acesta este un socks 'direct' obi\u0219nuit, care are o serie de dezavantaje (despre acestea vom discuta mai t\u00e2rziu). Desigur, putem transforma u\u0219or \u00een unul invers, dar va fi doar un socks pe un singur fir, ceea ce pentru noi nu este ceea ce avem nevoie.<\/p>\n<p>Deci, nu am g\u0103sit nimic gata f\u0103cut, a\u0219a c\u0103 va trebui s\u0103 ne invent\u0103m bicicleta. Ca baz\u0103 pentru bicicleta noastr\u0103, vom folosi <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/mis-team\/rsockstun\">dezvoltarea noastr\u0103<\/a><\/noindex> a unui socks invers pe Golang, iar clientul pentru acesta \u00eel vom realiza pe PowerShell.<\/p>\n<p><b>RSocksTun<\/b><br \/>\nDeci, cum func\u021bioneaz\u0103 rsockstun?<\/p>\n<p>La baza func\u021bion\u0103rii RsocksTun (\u00een continuare denumit rs) stau dou\u0103 componente software \u2013 Yamux \u0219i serverul Socks5. Serverul Socks5 este un socks5 local obi\u0219nuit, el se lanseaz\u0103 pe client. Iar multiplexarea conexiunilor c\u0103tre acesta (\u021bine\u021bi minte despre multithreading?) este asigurat\u0103 cu ajutorul yamux (<noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/hashicorp\/yamux\/\">\u00eenc\u0103 un multiplexer)<\/a><\/noindex>). Aceast\u0103 schem\u0103 permite rularea mai multor servere socks5 client \u0219i distribuirea conexiunilor externe c\u0103tre acestea, trec\u00e2ndu-le printr-o singur\u0103 conexiune TCP (aproape ca \u00een meterpreter) de la client la server, implement\u00e2nd astfel un mod multi-threaded, f\u0103r\u0103 de care nu vom putea lucra eficient \u00een re\u021beaua intern\u0103.<\/p>\n<p>Conceptul de func\u021bionare al yamux-ului const\u0103 \u00een faptul c\u0103 introduce un nivel suplimentar de re\u021bea de fluxuri, implement\u00e2ndu-l sub form\u0103 de antet de 12 bytes pentru fiecare pachet. (Aici folosim \u00een mod inten\u021bionat termenul \u201eflux\u201d, nu \u201estream\u201d, pentru a nu confunda cititorul cu fluxul programatic \u201ethread\u201d \u2014 acest concept \u00eel vom folosi de asemenea \u00een acest articol). \u00cen interiorul antetului yamux se afl\u0103 num\u0103rul fluxului, steaguri pentru deschiderea\/\u00eenchiderea fluxului, num\u0103rul de bytes transmi\u0219i, dimensiunea feron\u021bei.<\/p>\n<p><img decoding=\"async\" alt=\"Scriem un proxy Reverse socks5 \u00een PowerShell. Partea 1.\" src=\"\/wp-content\/uploads\/2019\/05\/3a1bc23bdc90176f7cd37f112a8a1a6c.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nPe l\u00e2ng\u0103 deschiderea\/\u00eenchiderea fluxului, yamux dispune de un mecanism de keepalive-uri, care permite monitorizarea func\u021bion\u0103rii canalului de comunicare stabilit. Func\u021bionarea mecanismului de mesaje keepalive se configureaz\u0103 la crearea sesiunii Yamux. De fapt, din set\u0103rile disponibile exist\u0103 doar \u2014 dou\u0103 parametrii: activare\/dezactivare \u0219i frecven\u021ba de trimitere a pachetelor \u00een secunde. Mesajele keepalive pot fi trimise at\u00e2t de serverul yamux, c\u00e2t \u0219i de clientul yamux. La primirea unui mesaj keepalive, partea remote este obligat\u0103 s\u0103 r\u0103spund\u0103 cu un mesaj exact identic (de fapt \u2014 un num\u0103r) pe care l-a primit. \u00cen general, keepalive-ul este acela\u0219i lucru cu ping-ul, doar c\u0103 pentru yamux.<\/p>\n<p>Detalii despre \u00eentreaga tehnic\u0103 de func\u021bionare a multiplexorului: tipuri de pachete, steagurile de deschidere \u0219i \u00eenchidere a conexiunilor, mecanismul de transmitere a datelor sunt descrise \u00een <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/hashicorp\/yamux\/blob\/master\/spec.md\">specifica\u021bii<\/a><\/noindex> la yamux. <\/p>\n<h3>\u00cencheierea primei p\u0103r\u021bi<\/h3>\n<p>\nA\u0219adar, \u00een prima parte a articolului ne-am familiarizat cu un anumit set de instrumente pentru organizarea tunelurilor inverse, am analizat avantajele \u0219i dezavantajele acestora, am studiat mecanismul de func\u021bionare al multiplexorului Yamux \u0219i am descris cerin\u021bele de baz\u0103 pentru modulul powershell ce urmeaz\u0103 a fi creat. \u00cen partea urm\u0103toare ne vom ocupa de dezvoltarea modulului propriu-zis, practic, de la zero. Continuarea urmeaz\u0103. Nu schimba\u021bi canalul \ud83d\ude42<br \/>\n<br \/>Sursa: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/post\/453870\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0418\u0441\u0442\u043e\u0440\u0438\u044f \u043e\u0431 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0438 \u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0432 3-\u0445 \u0447\u0430\u0441\u0442\u044f\u0445. \u0427\u0430\u0441\u0442\u044c 1 \u2014 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0430\u044f. \u0411\u0443\u043a\u043e\u0432 \u043c\u043d\u043e\u0433\u043e \u2014 \u043f\u043e\u043b\u044c\u0437\u044b \u0435\u0449\u0435 \u0431\u043e\u043b\u044c\u0448\u0435. \u041f\u043e\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 \u0437\u0430\u0434\u0430\u0447\u0438 \u0412 \u0445\u043e\u0434\u0435 \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043f\u0435\u043d\u0442\u0435\u0441\u0442\u043e\u0432 \u0438 RedTeam \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0439 \u043d\u0435 \u0432\u0441\u0435\u0433\u0434\u0430 \u0443\u0434\u0430\u0435\u0442\u0441\u044f \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0448\u0442\u0430\u0442\u043d\u044b\u043c\u0438 \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430\u043c\u0438 \u0417\u0430\u043a\u0430\u0437\u0447\u0438\u043a\u043e\u0432, \u0442\u0430\u043a\u0438\u043c\u0438 \u043a\u0430\u043a VPN, RDP, Citrix \u0438 \u0442.\u0434. \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0437\u0430\u043a\u0440\u0435\u043f\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0437\u0430\u0445\u043e\u0434\u0430 \u0432\u043e \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u044e\u044e \u0441\u0435\u0442\u044c. \u0413\u0434\u0435-\u0442\u043e \u0448\u0442\u0430\u0442\u043d\u044b\u0439 VPN \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u043f\u043e MFA [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":26164,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-34725","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.2.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0418\u0441\u0442\u043e\u0440\u0438\u044f \u043e\u0431 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0438 \u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0432 3-\u0445 \u0447\u0430\u0441\u0442\u044f\u0445.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/pishem-reverse-socks5-proxy-na-powershell-chast-1\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.2.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"ro_RO\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u041f\u0438\u0448\u0435\u043c Reverse socks5 proxy \u043d\u0430 powershell.\u0427\u0430\u0441\u0442\u044c 1 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0418\u0441\u0442\u043e\u0440\u0438\u044f \u043e\u0431 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0438 \u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0432 3-\u0445 \u0447\u0430\u0441\u0442\u044f\u0445.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/pishem-reverse-socks5-proxy-na-powershell-chast-1\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T19:00:00+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2019-10-31T19:00:00+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Scriem Reverse socks5 proxy \u00een powershell. Partea 1 | ProHoster","description":"Povestea despre cercetare \u0219i dezvoltare \u00een 3 p\u0103r\u021bi.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/pishem-reverse-socks5-proxy-na-powershell-chast-1","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041f\u0438\u0448\u0435\u043c Reverse socks5 proxy \u043d\u0430 powershell.\u0427\u0430\u0441\u0442\u044c 1 | ProHoster","og:description":"\u0418\u0441\u0442\u043e\u0440\u0438\u044f \u043e\u0431 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0438 \u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0432 3-\u0445 \u0447\u0430\u0441\u0442\u044f\u0445.","og:url":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/pishem-reverse-socks5-proxy-na-powershell-chast-1","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:00:00+00:00","article:modified_time":"2019-10-31T19:00:00+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"34725","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 20:23:33","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 02:16:32","updated":"2026-01-21 20:23:33","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/34725","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=34725"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/34725\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media\/26164"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=34725"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=34725"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=34725"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}