{"id":31811,"date":"2019-10-31T21:43:17","date_gmt":"2019-10-31T18:43:17","guid":{"rendered":"https:\/\/prohoster.info\/blog\/network-tools-ili-s-chego-nachat-pentesteru\/"},"modified":"2019-10-31T21:43:17","modified_gmt":"2019-10-31T18:43:17","slug":"network-tools-ili-s-chego-nachat-pentesteru","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sk\/blog\/administrirovanie\/network-tools-ili-s-chego-nachat-pentesteru","title":{"rendered":"Sie\u0165ov\u00e9 n\u00e1stroje, alebo ako za\u010da\u0165 s penetra\u010dn\u00fdm testovan\u00edm?","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>N\u00e1stroje za\u010d\u00ednaj\u00edc\u00edho pentestera: p\u0159edstavujeme stru\u010dn\u00fd p\u0159ehled hlavn\u00edch n\u00e1stroj\u016f, kter\u00e9 budou u\u017eite\u010dn\u00e9 p\u0159i pentestov\u00e1n\u00ed vnit\u0159n\u00ed s\u00edt\u011b. Tyto n\u00e1stroje jsou ji\u017e aktivn\u011b vyu\u017e\u00edv\u00e1ny \u0161irok\u00fdm okruhem specialist\u016f, proto bude pro ka\u017ed\u00e9ho u\u017eite\u010dn\u00e9 zn\u00e1t jejich mo\u017enosti a dokonale je ovl\u00e1dat. <\/p>\n<p><img decoding=\"async\" alt=\"Sie\u0165ov\u00e9 n\u00e1stroje, alebo ako za\u010da\u0165 s penetra\u010dn\u00fdm testovan\u00edm?\" src=\"\/wp-content\/uploads\/2019\/04\/a6846992cd5eb7769c87bbfb5aaaabbc.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<h2>Obsah:<\/h2>\n<p><\/p>\n<ul>\n<li> <noindex><a rel=\"nofollow\" href=\"#Nmap\">Nmap<\/a><\/noindex><\/li>\n<li> <noindex><a rel=\"nofollow\" href=\"#Zmap\">Zmap<\/a><\/noindex><\/li>\n<li> <noindex><a rel=\"nofollow\" href=\"#Masscan\">Masscan<\/a><\/noindex><\/li>\n<li> <noindex><a rel=\"nofollow\" href=\"#Nessus\">Nessus<\/a><\/noindex><\/li>\n<li> <noindex><a rel=\"nofollow\" href=\"#Net-Creds\">Net-Creds<\/a><\/noindex><\/li>\n<li> <noindex><a rel=\"nofollow\" href=\"#network-miner\">network-miner<\/a><\/noindex><\/li>\n<li> <noindex><a rel=\"nofollow\" href=\"#mitm6\">mitm6<\/a><\/noindex><\/li>\n<li> <noindex><a rel=\"nofollow\" href=\"#Responder\">Responder<\/a><\/noindex><\/li>\n<li> <noindex><a rel=\"nofollow\" href=\"#Evil_Foca\">Evil_Foca<\/a><\/noindex><\/li>\n<li> <noindex><a rel=\"nofollow\" href=\"#Bettercap\">Bettercap<\/a><\/noindex><\/li>\n<li> <noindex><a rel=\"nofollow\" href=\"#gateway_finder\">gateway_finder<\/a><\/noindex><\/li>\n<li> <noindex><a rel=\"nofollow\" href=\"#mitmproxy\">mitmproxy<\/a><\/noindex><\/li>\n<li> <noindex><a rel=\"nofollow\" href=\"#SIET\">SIET<\/a><\/noindex><\/li>\n<li> <noindex><a rel=\"nofollow\" href=\"#yersinia\">yersinia<\/a><\/noindex><\/li>\n<li> <noindex><a rel=\"nofollow\" href=\"#proxychains\">proxychains<\/a><\/noindex><\/li>\n<\/ul>\n<p><\/p>\n<h2><noindex><a rel=\"nofollow\" name=\"Nmap\"><\/a><\/noindex>Nmap<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/nmap.org\/\">Nmap<\/a><\/noindex> \u2013 opensource utilita pro skenov\u00e1n\u00ed s\u00edt\u00ed, je jedn\u00edm z nejpopul\u00e1rn\u011bj\u0161\u00edch n\u00e1stroj\u016f mezi bezpe\u010dnostn\u00edmi specialisty a syst\u00e9mov\u00fdmi administr\u00e1tory. P\u0159edev\u0161\u00edm se pou\u017e\u00edv\u00e1 k skenov\u00e1n\u00ed port\u016f, ale krom\u011b toho m\u00e1 obrovsk\u00e9 mno\u017estv\u00ed u\u017eite\u010dn\u00fdch funkc\u00ed, co\u017e vlastn\u011b d\u011bl\u00e1 z Nmap <b>super-n\u00e1stroj<\/b> pro pr\u016fzkum s\u00edt\u00ed.<\/p>\n<p>Krom\u011b kontroly otev\u0159en\u00fdch\/zav\u0159en\u00fdch port\u016f Nmap dok\u00e1\u017ee identifikovat slu\u017ebu naslouchaj\u00edc\u00ed na otev\u0159en\u00e9m portu a jej\u00ed verzi, a n\u011bkdy tak\u00e9 pom\u00e1h\u00e1 ur\u010dit opera\u010dn\u00ed syst\u00e9m. Nmap podporuje skripty pro skenov\u00e1n\u00ed (NSE \u2014 Nmap Scripting Engine). S pou\u017eit\u00edm skript\u016f je mo\u017en\u00e9 testovat zranitelnosti r\u016fzn\u00fdch slu\u017eeb (pokud tedy existuje skript, nebo si ho lze v\u017edy napsat) nebo brute-forcovat hesla r\u016fzn\u00fdch slu\u017eeb. <\/p>\n<p>T\u00edmto zp\u016fsobem Nmap umo\u017e\u0148uje sestavit podrobnou mapu s\u00edt\u011b, z\u00edskat maximum informac\u00ed o b\u011b\u017e\u00edc\u00edch slu\u017eb\u00e1ch na hostitel\u00edch v s\u00edti, a tak\u00e9 preventivn\u011b zkontrolovat n\u011bkter\u00e9 zranitelnosti. Nmap tak\u00e9 nab\u00edz\u00ed flexibiln\u00ed mo\u017enosti skenov\u00e1n\u00ed, nastaven\u00ed rychlosti skenov\u00e1n\u00ed, po\u010dtu vl\u00e1ken, po\u010dtu skupin pro skenov\u00e1n\u00ed atd.<br \/>\nJe vhodn\u00fd pro skenov\u00e1n\u00ed mal\u00fdch s\u00edt\u00ed a nezbytn\u00fd pro c\u00edlen\u00e9 skenov\u00e1n\u00ed jednotliv\u00fdch hostitel\u016f.<\/p>\n<h4>V\u00fdhody:<\/h4>\n<ul>\n<li>Rychle pracuje s mal\u00fdm rozsahem hostitel\u016f;<\/li>\n<li>Flexibilita nastaven\u00ed \u2014 mo\u017enosti lze kombinovat tak, aby se z\u00edskaly co nejv\u00edce informativn\u00ed \u00fadaje za p\u0159ijateln\u00fd \u010das; <\/li>\n<li>Paraleln\u00ed skenov\u00e1n\u00ed \u2014 seznam c\u00edlov\u00fdch hostitel\u016f se d\u011bl\u00ed na skupiny, a ka\u017ed\u00e1 skupina se pak postupn\u011b skenuje, p\u0159i\u010dem\u017e v r\u00e1mci skupiny se pou\u017e\u00edv\u00e1 paraleln\u00ed skenov\u00e1n\u00ed. Rozd\u011blen\u00ed na skupiny je tak\u00e9 malou nev\u00fdhodou (viz n\u00ed\u017ee);<\/li>\n<li>P\u0159eddefinovan\u00e9 sady skript\u016f pro r\u016fzn\u00e9 \u00fakoly \u2014 nen\u00ed t\u0159eba ztr\u00e1cet hodn\u011b \u010dasu s vyb\u00edr\u00e1n\u00edm konkr\u00e9tn\u00edch skript\u016f, sta\u010d\u00ed uv\u00e9st skupiny skript\u016f;<\/li>\n<li>V\u00fdstup v\u00fdsledkov \u2014 5 r\u00f4znych form\u00e1tov, vr\u00e1tane XML, ktor\u00fd m\u00f4\u017ee by\u0165 importovan\u00fd do in\u00fdch n\u00e1strojov;<\/li>\n<\/ul>\n<p><\/p>\n<h4>Nev\u00fdhody:<\/h4>\n<p><\/p>\n<ul>\n<li>Skenovanie skupiny hostite\u013eov \u2014 inform\u00e1cie o akomko\u013evek hostite\u013eovi nie s\u00fa dostupn\u00e9, k\u00fdm neskon\u010d\u00ed skenovanie celej skupiny. To sa rie\u0161i nastaven\u00edm v mo\u017enostiach maxim\u00e1lnej ve\u013ekosti skupiny a maxim\u00e1lneho \u010dasov\u00e9ho intervalu, po\u010das ktor\u00e9ho sa \u010dak\u00e1 na odpove\u010f na po\u017eiadavku, predt\u00fdm ako sa pokusy zastavia alebo vykon\u00e1 \u010fal\u0161\u00ed;<\/li>\n<li>Pri skenovan\u00ed Nmap odosiela SYN pakety na cie\u013eov\u00fd port a \u010dak\u00e1 na ak\u00fdko\u013evek odpovedaj\u00faci paket alebo uplynutie \u010dasov\u00e9ho limitu, ak odpove\u010f nepr\u00edde. To negat\u00edvne ovplyv\u0148uje v\u00fdkon skenera ako celku, v porovnan\u00ed s asynchr\u00f3nnymi skenerami (napr\u00edklad zmap alebo masscan);<\/li>\n<li>Pri skenovan\u00ed ve\u013ek\u00fdch siet\u00ed s pou\u017eit\u00edm vlajok na zr\u00fdchlenie skenovania (\u2014min-rate, \u2014min-parallelism) m\u00f4\u017ee poskytova\u0165 v\u00fdsledky s falo\u0161n\u00fdmi negat\u00edvmi, pri\u010dom prehliada otvoren\u00e9 porty na hoste. Taktie\u017e je potrebn\u00e9 tieto mo\u017enosti pou\u017e\u00edva\u0165 opatrne, pri\u010dom treba zoh\u013eadni\u0165, \u017ee vysok\u00e1 packet-rate m\u00f4\u017ee vies\u0165 k ne\u00famyseln\u00e9mu DoS. <\/li>\n<\/ul>\n<p>\n<img decoding=\"async\" alt=\"Sie\u0165ov\u00e9 n\u00e1stroje, alebo ako za\u010da\u0165 s penetra\u010dn\u00fdm testovan\u00edm?\" src=\"\/wp-content\/uploads\/2019\/04\/189c9a5145449871571ad11d8b0be9c2.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h2><noindex><a rel=\"nofollow\" name=\"Zmap\"><\/a><\/noindex>Zmap<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/zmap\/zmap\">Zmap<\/a><\/noindex> (nemie\u0161a\u0165 so ZenMap) \u2014 je to tie\u017e skener s otvoren\u00fdm zdrojov\u00fdm k\u00f3dom, vytvoren\u00fd ako r\u00fdchlej\u0161ia alternat\u00edva k Nmap.<\/p>\n<p>Na rozdiel od nmap \u2014 Zmap pri odosielan\u00ed SYN paketov ne\u010dak\u00e1, k\u00fdm sa vr\u00e1ti odpove\u010f, ale pokra\u010duje v skenovan\u00ed, pri\u010dom paralelne \u010dak\u00e1 na odpovede od v\u0161etk\u00fdch hostite\u013eov, t\u00fdm p\u00e1dom v skuto\u010dnosti nepodporuje stav spojenia. Ke\u010f odpove\u010f na SYN paket pr\u00edde, Zmap na z\u00e1klade obsahu paketu zist\u00ed, ktor\u00fd port a na akom hostite\u013eovi bol otvoren\u00fd. Okrem toho Zmap odosiela len jeden SYN paket na skenovan\u00fd port. Existuje tie\u017e mo\u017enos\u0165 pou\u017eitia PF_RING na r\u00fdchle skenovanie ve\u013ek\u00fdch siet\u00ed, ak m\u00e1te po ruke 10-gigabitov\u00fd rozhranie a kompatibiln\u00fa sie\u0165ov\u00fa kartu.<\/p>\n<h4>V\u00fdhody:<\/h4>\n<p><\/p>\n<ul>\n<li>R\u00fdchlos\u0165 skenovania;<\/li>\n<li>Zmap generuje Ethernetov\u00e9 r\u00e1mce obch\u00e1dzaj\u00fac syst\u00e9mov\u00fd TCP\/IP z\u00e1sobn\u00edk;<\/li>\n<li>Mo\u017enos\u0165 pou\u017eitia PF_RING;<\/li>\n<li>ZMap randomizuje ciele pre rovnomern\u00e9 rozdelenie z\u00e1\u0165a\u017ee na skenovanej strane;<\/li>\n<li>Mo\u017enos\u0165 integr\u00e1cie s ZGrab (n\u00e1stroj na zber inform\u00e1ci\u00ed o slu\u017eb\u00e1ch na aplika\u010dnej \u00farovni L7).<\/li>\n<\/ul>\n<p><\/p>\n<h4>Nev\u00fdhody:<\/h4>\n<p><\/p>\n<ul>\n<li>M\u00f4\u017ee sp\u00f4sobi\u0165 v\u00fdpadok sie\u0165ov\u00e9ho zariadenia, napr\u00edklad m\u00f4\u017ee znehodnoti\u0165 medzivrstvov\u00e9 smerova\u010de, napriek rozlo\u017eenej z\u00e1\u0165a\u017ei, preto\u017ee v\u0161etky pakety bud\u00fa prech\u00e1dza\u0165 cez jeden smerova\u010d.<\/li>\n<\/ul>\n<p>\n<img decoding=\"async\" alt=\"Sie\u0165ov\u00e9 n\u00e1stroje, alebo ako za\u010da\u0165 s penetra\u010dn\u00fdm testovan\u00edm?\" src=\"\/wp-content\/uploads\/2019\/04\/474b04785f27540510421d4fb715d4b4.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h2><noindex><a rel=\"nofollow\" name=\"Masscan\"><\/a><\/noindex>Masscan<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/robertdavidgraham\/masscan\">Masscan<\/a><\/noindex> \u2014 \u00fa\u017easn\u00e9, ale aj tak je to skener s otvoren\u00fdm zdrojom, ktor\u00fd bol vytvoren\u00fd s jedn\u00fdm cie\u013eom \u2014 skenova\u0165 internet e\u0161te r\u00fdchlej\u0161ie (menej ne\u017e za 6 min\u00fat r\u00fdchlos\u0165ou ~10 mili\u00f3nov paketov\/s). V podstate funguje takmer rovnako ako Zmap, len e\u0161te r\u00fdchlej\u0161ie.<\/p>\n<h4>V\u00fdhody:<\/h4>\n<p><\/p>\n<ul>\n<li>Syntax je podobn\u00fd Nmap, program tie\u017e podporuje niektor\u00e9 mo\u017enosti kompatibiln\u00e9 s Nmap;<\/li>\n<li>R\u00fdchlos\u0165 prev\u00e1dzky \u2014 jeden z najr\u00fdchlej\u0161\u00edch asynchr\u00f3nnych skenerov.<\/li>\n<li>Flexibiln\u00fd mechanizmus skenovania \u2014 obnova preru\u0161en\u00e9ho skenovania, rozlo\u017eenie z\u00e1\u0165a\u017ee na viacero zariaden\u00ed (ako v Zmap).<\/li>\n<\/ul>\n<p><\/p>\n<h4>Nev\u00fdhody:<\/h4>\n<p><\/p>\n<ul>\n<li>Podobne ako s Zmap je z\u00e1\u0165a\u017e na samotn\u00fa sie\u0165 mimoriadne vysok\u00e1, \u010do m\u00f4\u017ee vies\u0165 k DoS;<\/li>\n<li>Predvolene nie je mo\u017enos\u0165 skenova\u0165 na aplika\u010dnej \u00farovni L7;<\/li>\n<\/ul>\n<p>\n<img decoding=\"async\" alt=\"Sie\u0165ov\u00e9 n\u00e1stroje, alebo ako za\u010da\u0165 s penetra\u010dn\u00fdm testovan\u00edm?\" src=\"\/wp-content\/uploads\/2019\/04\/cc919cc2dfd848594f4d8d6a35f9c1cf.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h2><noindex><a rel=\"nofollow\" name=\"Nessus\"><\/a><\/noindex>Nessus<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/www.tenable.com\/products\/nessus\/nessus-professional\">Nessus<\/a><\/noindex> \u2014 skener na automatiz\u00e1ciu kontroly a zistenia zn\u00e1mych zranite\u013enost\u00ed v syst\u00e9me. Zdrojov\u00fd k\u00f3d je uzavret\u00fd, existuje bezplatn\u00e1 verzia Nessus Home, ktor\u00e1 umo\u017e\u0148uje skenova\u0165 a\u017e 16 IP adries s rovnakou r\u00fdchlos\u0165ou a podrobn\u00fdm anal\u00fdzou ako platen\u00e1 verzia.<\/p>\n<p>Schopn\u00fd ur\u010dova\u0165 zranite\u013en\u00e9 verzie slu\u017eieb alebo serverov, zis\u0165ova\u0165 chyby v konfigur\u00e1cii syst\u00e9mu, vykon\u00e1va\u0165 bruteforce hesiel zo slovn\u00edk. M\u00f4\u017ee sa pou\u017ei\u0165 na kontrolu spr\u00e1vnosti nastaven\u00ed slu\u017eieb (po\u0161ta, aktualiz\u00e1cie a pod.), ako aj pri pr\u00edprave na audit PCI DSS. Okrem toho m\u00f4\u017ee Nessus prij\u00edma\u0165 pr\u00edstupov\u00e9 \u00fadaje pre hostite\u013ea (SSH alebo dom\u00e9nov\u00fd \u00fa\u010det v Active Directory) a skener z\u00edska pr\u00edstup k hostite\u013eovi a vykon\u00e1\u0165 kontroly priamo na \u0148om, t\u00e1to mo\u017enos\u0165 sa naz\u00fdva credential scan. Je vhodn\u00fd pre spolo\u010dnosti vykon\u00e1vaj\u00face audity svojich siet\u00ed.<\/p>\n<h4>V\u00fdhody:<\/h4>\n<p><\/p>\n<ul>\n<li>Samostatn\u00e9 skripty pre ka\u017ed\u00fa zranite\u013enos\u0165, ktor\u00fdch datab\u00e1za sa neust\u00e1le aktualizuje;<\/li>\n<li>V\u00fdstup v\u00fdsledkov \u2014 jednoduch\u00fd text, XML, HTML a LaTeX;<\/li>\n<li>API Nessus \u2014 umo\u017e\u0148uje automatizova\u0165 procesy skenovania a z\u00edskavania v\u00fdsledkov;<\/li>\n<li>Credential Scan, m\u00f4\u017eete pou\u017ei\u0165 pr\u00edstupov\u00e9 \u00fadaje Windows alebo Linux na kontrolu aktualiz\u00e1ci\u00ed alebo in\u00fdch zranite\u013enost\u00ed;<\/li>\n<li>Mo\u017enos\u0165 p\u00edsa\u0165 vlastn\u00e9 vstavan\u00e9 bezpe\u010dnostn\u00e9 moduly \u2014 skener obsahuje vlastn\u00fd skriptovac\u00ed jazyk NASL (Nessus Attack Scripting Language);<\/li>\n<li>M\u00f4\u017eete nastavi\u0165 \u010das na pravideln\u00e9 skenovanie lok\u00e1lnej siete \u2014 v\u010faka tomu sa Slu\u017eba Informa\u010dnej Bezpe\u010dnosti bude informova\u0165 o v\u0161etk\u00fdch zmen\u00e1ch v bezpe\u010dnostnej konfigur\u00e1cii, objaven\u00ed nov\u00fdch hostite\u013eov a pou\u017e\u00edvan\u00ed slovn\u00edkov\u00fdch hesiel alebo predvolen\u00fdch hesiel.<\/li>\n<\/ul>\n<p><\/p>\n<h4>Nev\u00fdhody:<\/h4>\n<p><\/p>\n<ul>\n<li>M\u00f4\u017eu nasta\u0165 poruchy v skenovan\u00fdch syst\u00e9moch \u2014 pri vypnutej mo\u017enosti safe checks je potrebn\u00e9 pracova\u0165 opatrne;<\/li>\n<li>Verzia umo\u017e\u0148uj\u00faca komer\u010dn\u00e9 vyu\u017eitie nie je bezplatn\u00e1.<\/li>\n<\/ul>\n<p>\n<img decoding=\"async\" alt=\"Sie\u0165ov\u00e9 n\u00e1stroje, alebo ako za\u010da\u0165 s penetra\u010dn\u00fdm testovan\u00edm?\" src=\"\/wp-content\/uploads\/2019\/04\/07117e6a14a384a1ce2d285a19ca08fb.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h2><noindex><a rel=\"nofollow\" name=\"Net-Creds\"><\/a><\/noindex>Net-Creds<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/DanMcInerney\/net-creds\">Net-Creds<\/a><\/noindex> \u2014 n\u00e1stroj v jazyku Python na zber hesiel a hashov, ako aj in\u00fdch inform\u00e1ci\u00ed, napr\u00edklad nav\u0161t\u00edven\u00fdch URL, stiahnut\u00fdch s\u00faborov a \u010fal\u0161\u00edch \u00fadajov z prenosu, \u010di u\u017e v re\u00e1lnom \u010dase po\u010das vykon\u00e1vania MiTM \u00fatoku, alebo z predt\u00fdm ulo\u017een\u00fdch PCAP s\u00faborov. Vhodn\u00fd na r\u00fdchlu a povrchn\u00fa anal\u00fdzu ve\u013ek\u00fdch objemov prenosu, napr\u00edklad pri sie\u0165ov\u00fdch MiTM \u00fatokoch, ke\u010f je \u010das obmedzen\u00fd a ru\u010dn\u00e1 anal\u00fdza pomocou Wiresharku si vy\u017eaduje ve\u013ea \u010dasu.<\/p>\n<h4>V\u00fdhody:<\/h4>\n<p><\/p>\n<ul>\n<li>Identifik\u00e1cia slu\u017eieb je zalo\u017een\u00e1 na anal\u00fdze bal\u00edkov miesto ur\u010denia slu\u017eby pod\u013ea \u010d\u00edsla pou\u017e\u00edvan\u00e9ho portu;<\/li>\n<li>Jednoduch\u00e9 na pou\u017e\u00edvanie;<\/li>\n<li>\u0160irok\u00e9 spektrum extrahovan\u00fdch \u00fadajov \u2014 vr\u00e1tane prihl\u00e1sen\u00ed a hesiel pre FTP, POP, IMAP, SMTP, protokolov NTLMv1\/v2, ako aj inform\u00e1ci\u00ed z HTTP po\u017eiadaviek, ako s\u00fa prihlasovacie formul\u00e1re a basic auth;<\/li>\n<\/ul>\n<p><img decoding=\"async\" alt=\"Sie\u0165ov\u00e9 n\u00e1stroje, alebo ako za\u010da\u0165 s penetra\u010dn\u00fdm testovan\u00edm?\" src=\"\/wp-content\/uploads\/2019\/04\/45048ea241e42fe7008bf5a8f81c2efe.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h2><noindex><a rel=\"nofollow\" name=\"network-miner\"><\/a><\/noindex>network-miner<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/www.netresec.com\/?page=networkminer\">network-miner<\/a><\/noindex> \u2014 anal\u00f3g Net-Creds z poh\u013eadu fungovania, av\u0161ak m\u00e1 v\u00e4\u010d\u0161iu funk\u010dnos\u0165, napr\u00edklad je tu mo\u017enos\u0165 extrakcie s\u00faborov pren\u00e1\u0161an\u00fdch pomocou protokolov SMB. Rovnako ako Net-Creds, je pohodln\u00fd, ke\u010f je potrebn\u00e9 r\u00fdchlo analyzova\u0165 ve\u013ek\u00e9 objemy prenosu. M\u00e1 tie\u017e u\u017e\u00edvate\u013esky pr\u00edvetiv\u00e9 grafick\u00e9 rozhranie.<\/p>\n<h4>V\u00fdhody:<\/h4>\n<p><\/p>\n<ul>\n<li>Grafick\u00e9 rozhranie;<\/li>\n<li>Vizualiz\u00e1cia a klasifik\u00e1cia \u00fadajov pod\u013ea skup\u00edn \u2014 u\u013eah\u010duje anal\u00fdzu prenosu a rob\u00ed ju r\u00fdchlou.<\/li>\n<\/ul>\n<p><\/p>\n<h4>Nev\u00fdhody:<\/h4>\n<p><\/p>\n<ul>\n<li>Oboznamovacia verzia m\u00e1 niektor\u00e9 obmedzenia funk\u010dnosti.<\/li>\n<\/ul>\n<p>\n<img decoding=\"async\" alt=\"Sie\u0165ov\u00e9 n\u00e1stroje, alebo ako za\u010da\u0165 s penetra\u010dn\u00fdm testovan\u00edm?\" src=\"\/wp-content\/uploads\/2019\/04\/4e3a8c72150e3e9a4aceeff0ac7bd5db.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h2><noindex><a rel=\"nofollow\" name=\"mitm6\"><\/a><\/noindex>mitm6<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/fox-it\/mitm6\">mitm6 <\/a><\/noindex> \u2014 n\u00e1stroj na vykon\u00e1vanie \u00fatokov na IPv6 (SLAAC-attack). IPv6 je prioritn\u00e9 v opera\u010dnom syst\u00e9me Windows (v z\u00e1sade aj v ostatn\u00fdch OS) a v predvolenej konfigur\u00e1cii je IPv6 rozhranie povolen\u00e9, \u010do umo\u017e\u0148uje \u00fato\u010dn\u00edkovi nastavi\u0165 obete svoj DNS server pomocou paketov Router Advertisement, po \u010dom \u00fato\u010dn\u00edk z\u00edska mo\u017enos\u0165 podv\u00e1dza\u0165 DNS obete. V\u00fdborne sa hod\u00ed na vykon\u00e1vanie Relay \u00fatokov spolu s utilitou ntlmrelayx, \u010do umo\u017e\u0148uje \u00fa\u010dinn\u00fd \u00fatok na Windows siete. <\/p>\n<h4>V\u00fdhody:<\/h4>\n<p><\/p>\n<ul>\n<li>Funguje skvele v mnoh\u00fdch sie\u0165ach pr\u00e1ve kv\u00f4li \u0161tandardn\u00fdm konfigur\u00e1ci\u00e1m Windows hostite\u013eov a siet\u00ed;<\/li>\n<\/ul>\n<p><\/p>\n<h2><noindex><a rel=\"nofollow\" name=\"Responder\"><\/a><\/noindex>Responder<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/SpiderLabs\/Responder\">Responder<\/a><\/noindex> \u2014 n\u00e1stroj na spoofing vysielac\u00edch protokolov na rozl\u00ed\u0161enie mien (LLMNR, NetBIOS, MDNS). Neocenite\u013en\u00fd n\u00e1stroj v Active Directory sie\u0165ach. Okrem spoofingu dok\u00e1\u017ee zachyt\u00e1va\u0165 NTLM autentifik\u00e1ciu, spolu s n\u00edm je dod\u00e1van\u00fd aj s\u00fabor n\u00e1strojov na zber inform\u00e1ci\u00ed a realiz\u00e1ciu \u00fatokov NTLM-Relay. <\/p>\n<h4>V\u00fdhody:<\/h4>\n<p><\/p>\n<ul>\n<li> Predvolene sp\u00fa\u0161\u0165a mno\u017estvo serverov s podporou NTLM autentifik\u00e1cie: SMB, MSSQL, HTTP, HTTPS, LDAP, FTP, POP3, IMAP, SMTP;<\/li>\n<li>Umo\u017e\u0148uje podv\u00e1dza\u0165 DNS v pr\u00edpade MITM \u00fatokov (ARP spoofing a pod.); <\/li>\n<li>Fingerprint hostite\u013eov, ktor\u00e9 vykonali broadcastov\u00fd dotaz;<\/li>\n<li>Re\u017eim anal\u00fdzy \u2014 na pas\u00edvne sledovanie po\u017eiadaviek;<\/li>\n<li>Form\u00e1t zachyten\u00fdch hashov pri NTLM autentifik\u00e1cii je kompatibiln\u00fd s John the Ripper a Hashcat.<\/li>\n<\/ul>\n<p><\/p>\n<h4>Nev\u00fdhody:<\/h4>\n<p><\/p>\n<ul>\n<li>Pri spusten\u00ed vo Windows je viazanie portu 445 (SMB) spojen\u00e9 s ur\u010dit\u00fdmi \u0165a\u017ekos\u0165ami (vy\u017eaduje zastavenie pr\u00edslu\u0161n\u00fdch slu\u017eieb a re\u0161tart);<\/li>\n<\/ul>\n<p>\n<img decoding=\"async\" alt=\"Sie\u0165ov\u00e9 n\u00e1stroje, alebo ako za\u010da\u0165 s penetra\u010dn\u00fdm testovan\u00edm?\" src=\"\/wp-content\/uploads\/2019\/04\/ebe0c72c960bb3f6cfa6e6f34b5d2ec9.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<img decoding=\"async\" alt=\"Sie\u0165ov\u00e9 n\u00e1stroje, alebo ako za\u010da\u0165 s penetra\u010dn\u00fdm testovan\u00edm?\" src=\"\/wp-content\/uploads\/2019\/04\/477fe7559f446176ae8c6fc3c351b769.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h2><noindex><a rel=\"nofollow\" name=\"Evil_Foca\"><\/a><\/noindex>Evil_Foca<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/ElevenPaths\/EvilFOCA\">Evil Foca<\/a><\/noindex> \u2014 n\u00e1stroj na kontrolu r\u00f4znych sie\u0165ov\u00fdch \u00fatokov v sie\u0165ach IPv4 a IPv6. Skenuje miestnu sie\u0165, identifikuje zariadenia, smerova\u010de a ich sie\u0165ov\u00e9 rozhrania, po \u010dom je mo\u017en\u00e9 vykon\u00e1va\u0165 r\u00f4zne \u00fatoky na \u00fa\u010dastn\u00edkov siete.<\/p>\n<h4>V\u00fdhody:<\/h4>\n<p><\/p>\n<ul>\n<li>Vhodn\u00e9 na vykon\u00e1vanie MITM \u00fatokov (ARP spoofing, DHCP ACK injekcie, SLAAC \u00fatok, DHCP spoofing);<\/li>\n<li>M\u00f4\u017eu sa vykon\u00e1va\u0165 DoS \u00fatoky \u2014 s ARP spoofingom pre IPv4 siete, so SLAAC DoS v IPv6 sie\u0165ach;<\/li>\n<li>M\u00f4\u017ee sa uskuto\u010dni\u0165 hijacking DNS;<\/li>\n<li>Jednoduch\u00e9 na pou\u017e\u00edvanie, pohodln\u00e9 grafick\u00e9 rozhranie.<\/li>\n<\/ul>\n<p><\/p>\n<h4>Nev\u00fdhody:<\/h4>\n<p><\/p>\n<ul>\n<li>Funguje iba na Windows.<\/li>\n<\/ul>\n<p>\n<img decoding=\"async\" alt=\"Sie\u0165ov\u00e9 n\u00e1stroje, alebo ako za\u010da\u0165 s penetra\u010dn\u00fdm testovan\u00edm?\" src=\"\/wp-content\/uploads\/2019\/04\/f9ae7134162a703ad6fd1bdc05667a95.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h2><noindex><a rel=\"nofollow\" name=\"Bettercap\"><\/a><\/noindex>Bettercap<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/bettercap\/bettercap\">Bettercap<\/a><\/noindex> \u2014 mocn\u00fd r\u00e1mec na anal\u00fdzu a \u00fatok siet\u00ed, pri\u010dom sa hovor\u00ed aj o \u00fatokoch na bezdr\u00f4tov\u00e9 siete, BLE (bluetooth low energy) a dokonca \u00fatoky MouseJack na bezdr\u00f4tov\u00e9 HID zariadenia. Obsahuje tie\u017e funk\u010dnos\u0165 na zber inform\u00e1ci\u00ed z tr\u00e1s (analogicky s net-creds). V podstate \u0161vaj\u010diarsky n\u00f4\u017e (all in one). Ned\u00e1vno m\u00e1 <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/bettercap\/hydra\">grafick\u00e9 webov\u00e9 rozhranie<\/a><\/noindex>.<\/p>\n<h4>V\u00fdhody:<\/h4>\n<p><\/p>\n<ul>\n<li>Sn\u00edma\u010d poveren\u00ed \u2014 mo\u017en\u00e9 zachyt\u00e1va\u0165 nav\u0161t\u00edven\u00e9 URL a HTTPS hostite\u013eov, HTTP autentifik\u00e1ciu, poverenia cez mnoho r\u00f4znych protokolov;<\/li>\n<li>Mnoho integrovan\u00fdch MITM \u00fatokov;<\/li>\n<li>Modul\u00e1rny HTTP(S) transparentn\u00fd proxy \u2014 mo\u017en\u00e9 spravova\u0165 prev\u00e1dzku pod\u013ea potrieb;<\/li>\n<li>Vstavan\u00fd HTTP server;<\/li>\n<li>Podpora capletov \u2014 s\u00faborov, ktor\u00e9 umo\u017e\u0148uj\u00fa pop\u00edsa\u0165 skriptov\u00fdm jazykom zlo\u017eit\u00e9 a automatizovan\u00e9 \u00fatoky.<\/li>\n<\/ul>\n<p><\/p>\n<h4>Nev\u00fdhody:<\/h4>\n<p><\/p>\n<ul>\n<li>Niektor\u00e9 moduly \u2014 napr\u00edklad ble.enum \u2014 s\u00fa \u010diasto\u010dne nepodporovan\u00e9 v macOS a Windows, niektor\u00e9 s\u00fa ur\u010den\u00e9 len pre Linux \u2014 packet.proxy.<\/li>\n<\/ul>\n<p>\n<img decoding=\"async\" alt=\"Sie\u0165ov\u00e9 n\u00e1stroje, alebo ako za\u010da\u0165 s penetra\u010dn\u00fdm testovan\u00edm?\" src=\"\/wp-content\/uploads\/2019\/04\/68f5b6ccd737b3fa0ee5235f31dde4d3.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h2><noindex><a rel=\"nofollow\" name=\"gateway_finder\"><\/a><\/noindex>gateway_finder<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/pentestmonkey\/gateway-finder\">gateway finder <\/a><\/noindex> \u2014 skript v Pythone, ktor\u00fd pom\u00e1ha ur\u010di\u0165 mo\u017en\u00e9 gatewaye v sieti. Vhodn\u00fd na kontrolu segment\u00e1cie alebo h\u013eadanie hostite\u013eov, ktor\u00e9 m\u00f4\u017eu smerova\u0165 do po\u017eadovanej podsiete alebo Internetu. Vhodn\u00fd na intern\u00e9 pentesty, ke\u010f je potrebn\u00e9 r\u00fdchlo skontrolova\u0165 pr\u00edtomnos\u0165 neopr\u00e1vnen\u00fdch tr\u00e1s alebo tr\u00e1s k in\u00fdm intern\u00fdm lok\u00e1lnym sie\u0165am. <\/p>\n<h4>V\u00fdhody:<\/h4>\n<p><\/p>\n<ul>\n<li>Jednoduch\u00e9 na pou\u017e\u00edvanie a prisp\u00f4sobenie.<\/li>\n<\/ul>\n<p><img decoding=\"async\" alt=\"Sie\u0165ov\u00e9 n\u00e1stroje, alebo ako za\u010da\u0165 s penetra\u010dn\u00fdm testovan\u00edm?\" src=\"\/wp-content\/uploads\/2019\/04\/dee33c0d4426c3b98e89dd726c5b647c.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h2><noindex><a rel=\"nofollow\" name=\"mitmproxy\"><\/a><\/noindex>mitmproxy<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/mitmproxy\/mitmproxy\">mitmproxy<\/a><\/noindex> \u2014 opensource n\u00e1stroj na anal\u00fdzu \u0161ifrovan\u00e9ho SSL\/TLS prenosu. mitmproxy je vhodn\u00fd na zachyt\u00e1vanie a modifik\u00e1ciu \u0161ifrovan\u00e9ho prenosu, samozrejme, s niektor\u00fdmi obmedzeniami; n\u00e1stroj nevykon\u00e1va \u00fatoky na de\u0161ifrovanie SSL\/TLS. Pou\u017e\u00edva sa, ke\u010f je potrebn\u00e9 zachyti\u0165 a zaznamena\u0165 zmeny v \u0161ifrovanom prenose SSL\/TLS. Sklad\u00e1 sa z Mitmproxy \u2014 na proxovanie toku, mitmdump \u2014 obdobn\u00fd tcpdump, ale pre HTTP(S) tok, a mitmweb \u2014 webov\u00e9ho rozhrania pre Mitmproxy.<\/p>\n<h4>V\u00fdhody:<\/h4>\n<p><\/p>\n<ul>\n<li>Pracuje s r\u00f4znymi protokolmi a podporuje modifik\u00e1ciu r\u00f4znych form\u00e1tov, od HTML po Protobuf;<\/li>\n<li>API pre Python \u2014 umo\u017e\u0148uje p\u00edsa\u0165 skripty pre nestandardn\u00e9 \u00falohy;<\/li>\n<li>M\u00f4\u017ee pracova\u0165 v re\u017eime transparentn\u00e9ho proxy so zachyt\u00e1van\u00edm prenosu.<\/li>\n<\/ul>\n<p><\/p>\n<h4>Nev\u00fdhody:<\/h4>\n<p><\/p>\n<ul>\n<li>Form\u00e1t dumpu nie je kompatibiln\u00fd s ni\u010d\u00edm \u2014 \u0165a\u017eko sa pou\u017e\u00edva grep, mus\u00edte p\u00edsa\u0165 skripty;<\/li>\n<\/ul>\n<p>\n<img decoding=\"async\" alt=\"Sie\u0165ov\u00e9 n\u00e1stroje, alebo ako za\u010da\u0165 s penetra\u010dn\u00fdm testovan\u00edm?\" src=\"\/wp-content\/uploads\/2019\/04\/2049cb5c62067cd65b07abdb1a2d40a5.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<img decoding=\"async\" alt=\"Sie\u0165ov\u00e9 n\u00e1stroje, alebo ako za\u010da\u0165 s penetra\u010dn\u00fdm testovan\u00edm?\" src=\"\/wp-content\/uploads\/2019\/04\/a37457f2faafae55f333b4d6839d5254.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h2><noindex><a rel=\"nofollow\" name=\"SIET\"><\/a><\/noindex>SIET<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/Sab0tag3d\/SIET\">SIET<\/a><\/noindex> \u2014 n\u00e1stroj na vyu\u017eitie mo\u017enost\u00ed protokolu Cisco Smart Install. Umo\u017e\u0148uje z\u00edska\u0165 a modifikova\u0165 konfigur\u00e1ciu, ako aj prevzia\u0165 kontrolu nad zariaden\u00edm Cisco. Ak ste z\u00edskali konfigur\u00e1ciu zariadenia Cisco, m\u00f4\u017eete ju overi\u0165 pomocou <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/cisco-config-analysis-tool\/ccat\">CCAT<\/a><\/noindex>, tento n\u00e1stroj je u\u017eito\u010dn\u00fd na anal\u00fdzu zabezpe\u010denia konfigur\u00e1cie zariaden\u00ed Cisco.<\/p>\n<h4>V\u00fdhody:<\/h4>\n<p>\nPou\u017eitie protokolu Cisco Smart Install umo\u017e\u0148uje:<\/p>\n<ul>\n<li>Zmeni\u0165 adresu tftp servera na klientskej jednotke zaslan\u00edm jedn\u00e9ho skreslen\u00e9ho TCP paketu;<\/li>\n<li>Kop\u00edrova\u0165 konfigura\u010dn\u00fd s\u00fabor zariadenia;<\/li>\n<li>Nahradi\u0165 konfigur\u00e1ciu zariadenia, napr\u00edklad prida\u0165 nov\u00e9ho pou\u017e\u00edvate\u013ea;<\/li>\n<li>Aktualizova\u0165 obraz iOS na zariaden\u00ed;<\/li>\n<li>Vykona\u0165 \u013eubovo\u013en\u00fa sadu pr\u00edkazov na zariaden\u00ed. Toto je nov\u00e1 funkcia funguj\u00faca iba vo verzi\u00e1ch 3.6.0E a 15.2 (2) E iOS;<\/li>\n<\/ul>\n<p><\/p>\n<h4>Nev\u00fdhody:<\/h4>\n<p><\/p>\n<ul>\n<li>Pracuje s obmedzen\u00fdm po\u010dtom zariaden\u00ed Cisco, navy\u0161e je potrebn\u00e1 'biela' ip adresa na prijatie odpovede od zariadenia, alebo mus\u00edte by\u0165 v tej istej sieti ako zariadenie;<\/li>\n<\/ul>\n<p>\n<img decoding=\"async\" alt=\"Sie\u0165ov\u00e9 n\u00e1stroje, alebo ako za\u010da\u0165 s penetra\u010dn\u00fdm testovan\u00edm?\" src=\"\/wp-content\/uploads\/2019\/04\/643e5511c44940d1f9c313347c74029a.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h2><noindex><a rel=\"nofollow\" name=\"yersinia\"><\/a><\/noindex>yersinia<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/tomac\/yersinia\">yersinia<\/a><\/noindex> \u2014 framework pre L2 \u00fatoky, vytvoren\u00fd na vyu\u017eitie bezpe\u010dnostn\u00fdch slab\u00edn v r\u00f4znych sie\u0165ov\u00fdch protokoloch L2.<\/p>\n<h4>V\u00fdhody:<\/h4>\n<p><\/p>\n<ul>\n<li>Umo\u017e\u0148uje vykon\u00e1va\u0165 \u00fatoky na protokoly STP, CDP, DTP, DHCP, HSRP, VTP a \u010fal\u0161ie.<\/li>\n<\/ul>\n<p><\/p>\n<h4>Nev\u00fdhody:<\/h4>\n<p><\/p>\n<ul>\n<li>Nie najpohodlnej\u0161ie rozhranie.<\/li>\n<\/ul>\n<p>\n<img decoding=\"async\" alt=\"Sie\u0165ov\u00e9 n\u00e1stroje, alebo ako za\u010da\u0165 s penetra\u010dn\u00fdm testovan\u00edm?\" src=\"\/wp-content\/uploads\/2019\/04\/d0cb4b5fac1fc0e5c302ad133d5b4504.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h2><noindex><a rel=\"nofollow\" name=\"proxychains\"><\/a><\/noindex>proxychains<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/haad\/proxychains\">proxychains<\/a><\/noindex> \u2014 n\u00e1stroj, ktor\u00fd umo\u017e\u0148uje presmerova\u0165 prenos aplik\u00e1cie cez zadan\u00fd SOCKS proxy.<\/p>\n<h4>V\u00fdhody:<\/h4>\n<p><\/p>\n<ul>\n<li>Pom\u00e1ha presmerova\u0165 prenos niektor\u00fdch aplik\u00e1ci\u00ed, ktor\u00e9 \u0161tandardne nevedia pracova\u0165 s proxy;<\/li>\n<\/ul>\n<p>\n<img decoding=\"async\" alt=\"Sie\u0165ov\u00e9 n\u00e1stroje, alebo ako za\u010da\u0165 s penetra\u010dn\u00fdm testovan\u00edm?\" src=\"\/wp-content\/uploads\/2019\/04\/d09dcdaf7429ea29ff70fb682e7cd590.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nV tomto \u010dl\u00e1nku sme stru\u010dne presk\u00famali v\u00fdhody a nev\u00fdhody hlavn\u00fdch n\u00e1strojov pre pentesting vn\u00fatornej siete. Sledujte n\u00e1s, pl\u00e1nujeme publikova\u0165 tak\u00e9to zbierky aj na\u010falej: Web, datab\u00e1zy, mobiln\u00e9 aplik\u00e1cie \u2014 o tom ur\u010dite tie\u017e nap\u00ed\u0161eme.<\/p>\n<p>Pode\u013ete sa o svoje ob\u013e\u00faben\u00e9 n\u00e1stroje v koment\u00e1roch!<br \/>\n<br \/>Zdroj: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/dsec\/blog\/447882\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>Toolkit \u043d\u0430\u0447\u0438\u043d\u0430\u044e\u0449\u0435\u0433\u043e \u043f\u0435\u043d\u0442\u0435\u0441\u0442\u0435\u0440\u0430: \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u043c \u043a\u0440\u0430\u0442\u043a\u0438\u0439 \u0434\u0430\u0439\u0434\u0436\u0435\u0441\u0442 \u0433\u043b\u0430\u0432\u043d\u044b\u0445 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u0440\u0438\u0433\u043e\u0434\u044f\u0442\u0441\u044f \u043f\u0440\u0438 \u043f\u0435\u043d\u0442\u0435\u0441\u0442\u0435 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0439 \u0441\u0435\u0442\u0438. \u042d\u0442\u0438 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u044b \u0443\u0436\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0448\u0438\u0440\u043e\u043a\u0438\u043c \u043a\u0440\u0443\u0433\u043e\u043c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u043e\u0432, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u0437\u043d\u0430\u0442\u044c \u043e\u0431 \u0438\u0445 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044f\u0445 \u0438 \u0432\u043b\u0430\u0434\u0435\u0442\u044c \u0432 \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0441\u0442\u0432\u0435 \u0431\u0443\u0434\u0435\u0442 \u043f\u043e\u043b\u0435\u0437\u043d\u043e \u043a\u0430\u0436\u0434\u043e\u043c\u0443. \u0421\u043e\u0434\u0435\u0440\u0436\u0430\u043d\u0438\u0435: Nmap Zmap Masscan Nessus Net-Creds network-miner mitm6 Responder Evil_Foca Bettercap gateway_finder mitmproxy SIET yersinia proxychains Nmap Nmap \u2013 opensource \u0443\u0442\u0438\u043b\u0438\u0442\u0430 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":23689,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-31811","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"Toolkit \u043d\u0430\u0447\u0438\u043d\u0430\u044e\u0449\u0435\u0433\u043e \u043f\u0435\u043d\u0442\u0435\u0441\u0442\u0435\u0440\u0430: \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u043c \u043a\u0440\u0430\u0442\u043a\u0438\u0439 \u0434\u0430\u0439\u0434\u0436\u0435\u0441\u0442 \u0433\u043b\u0430\u0432\u043d\u044b\u0445 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u0440\u0438\u0433\u043e\u0434\u044f\u0442\u0441\u044f \u043f\u0440\u0438 \u043f\u0435\u043d\u0442\u0435\u0441\u0442\u0435 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0439 \u0441\u0435\u0442\u0438.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sk\/blog\/administrirovanie\/network-tools-ili-s-chego-nachat-pentesteru\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"sk_SK\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47Network tools, \u0438\u043b\u0438 \u0441 \u0447\u0435\u0433\u043e \u043d\u0430\u0447\u0430\u0442\u044c \u043f\u0435\u043d\u0442\u0435\u0441\u0442\u0435\u0440\u0443? | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"Toolkit \u043d\u0430\u0447\u0438\u043d\u0430\u044e\u0449\u0435\u0433\u043e \u043f\u0435\u043d\u0442\u0435\u0441\u0442\u0435\u0440\u0430: \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u043c \u043a\u0440\u0430\u0442\u043a\u0438\u0439 \u0434\u0430\u0439\u0434\u0436\u0435\u0441\u0442 \u0433\u043b\u0430\u0432\u043d\u044b\u0445 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u0440\u0438\u0433\u043e\u0434\u044f\u0442\u0441\u044f \u043f\u0440\u0438 \u043f\u0435\u043d\u0442\u0435\u0441\u0442\u0435 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0439 \u0441\u0435\u0442\u0438.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sk\/blog\/administrirovanie\/network-tools-ili-s-chego-nachat-pentesteru\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T18:43:17+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2019-10-31T18:43:17+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Sie\u0165ov\u00e9 n\u00e1stroje, alebo s \u010d\u00edm za\u010da\u0165 pentester? | ProHoster","description":"Toolkit za\u010d\u00ednaj\u00faceho pentestera: predstavujeme stru\u010dn\u00fd preh\u013ead hlavn\u00fdch n\u00e1strojov, ktor\u00e9 bud\u00fa u\u017eito\u010dn\u00e9 pri pentestingu vn\u00fatornej siete.","canonical_url":"https:\/\/prohoster.info\/sk\/blog\/administrirovanie\/network-tools-ili-s-chego-nachat-pentesteru","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sk_SK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Network tools, \u0438\u043b\u0438 \u0441 \u0447\u0435\u0433\u043e \u043d\u0430\u0447\u0430\u0442\u044c \u043f\u0435\u043d\u0442\u0435\u0441\u0442\u0435\u0440\u0443? | ProHoster","og:description":"Toolkit \u043d\u0430\u0447\u0438\u043d\u0430\u044e\u0449\u0435\u0433\u043e \u043f\u0435\u043d\u0442\u0435\u0441\u0442\u0435\u0440\u0430: \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u043c \u043a\u0440\u0430\u0442\u043a\u0438\u0439 \u0434\u0430\u0439\u0434\u0436\u0435\u0441\u0442 \u0433\u043b\u0430\u0432\u043d\u044b\u0445 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u0440\u0438\u0433\u043e\u0434\u044f\u0442\u0441\u044f \u043f\u0440\u0438 \u043f\u0435\u043d\u0442\u0435\u0441\u0442\u0435 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0439 \u0441\u0435\u0442\u0438.","og:url":"https:\/\/prohoster.info\/sk\/blog\/administrirovanie\/network-tools-ili-s-chego-nachat-pentesteru","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:43:17+00:00","article:modified_time":"2019-10-31T18:43:17+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"31811","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 07:57:22","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 03:10:46","updated":"2026-01-21 07:57:22","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/31811","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/comments?post=31811"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/31811\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/media\/23689"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/media?parent=31811"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/categories?post=31811"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/tags?post=31811"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}