{"id":34725,"date":"2019-10-31T22:00:00","date_gmt":"2019-10-31T19:00:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/pishem-reverse-socks5-proxy-na-powershell-chast-1\/"},"modified":"2019-10-31T22:00:00","modified_gmt":"2019-10-31T19:00:00","slug":"pishem-reverse-socks5-proxy-na-powershell-chast-1","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sk\/blog\/administrirovanie\/pishem-reverse-socks5-proxy-na-powershell-chast-1","title":{"rendered":"P\u00ed\u0161eme Reverse socks5 proxy v PowerShell. \u010cas\u0165 1","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Pr\u00edbeh o prieskume a v\u00fdvoji v 3 \u010dastiach. \u010cas\u0165 1 \u2014 prieskum.<br \/>\nMnoho p\u00edsmen \u2014 e\u0161te viac u\u017eito\u010dnosti.<\/p>\n<h3>Stanovenie \u00falohy<\/h3>\n<p>\nPo\u010das realiz\u00e1cie penetra\u010dn\u00fdch testov a kampan\u00ed Red Team nie je v\u017edy mo\u017en\u00e9 vyu\u017ei\u0165 \u0161tandardn\u00e9 prostriedky z\u00e1kazn\u00edkov, ako s\u00fa VPN, RDP, Citrix at\u010f., na zabezpe\u010denie pr\u00edstupu do intern\u00fdch siet\u00ed. Niekde \u0161tandardn\u00fd VPN funguje pomocou MFA a ako druh\u00fd faktor sa pou\u017e\u00edva hardv\u00e9rov\u00fd token, inde je pr\u00edsne monitorovan\u00fd a n\u00e1\u0161 pr\u00edstup cez VPN sa okam\u017eite spr\u00edstupn\u00ed, ako sa hovor\u00ed \u2014 so v\u0161etk\u00fdmi n\u00e1sledkami, a niekde tak\u00e9 prostriedky jednoducho neexistuj\u00fa. <\/p>\n<p>V tak\u00fdchto pr\u00edpadoch je nevyhnutn\u00e9 neust\u00e1le vytv\u00e1ra\u0165 tzv. \u201esp\u00e4tn\u00e9 tunely\u201c \u2014 spojenia z vn\u00fatornej siete na extern\u00fd zdroj alebo na server pod na\u0161ou kontrolou. V r\u00e1mci tak\u00e9ho tunela u\u017e m\u00f4\u017eeme pracova\u0165 s intern\u00fdmi prostriedkami z\u00e1kazn\u00edkov.<\/p>\n<p>Existuje nieko\u013eko druhov tak\u00fdchto sp\u00e4tn\u00fdch tunelov. Najzn\u00e1mej\u0161\u00edm z nich je samozrejme Meterpreter. Taktie\u017e s\u00fa ve\u013emi popul\u00e1rne SSH tunely so sp\u00e4tn\u00fdm presmerovan\u00edm portov. Existuje mnoho prostriedkov na realiz\u00e1ciu sp\u00e4tn\u00e9ho tunelovania a mnoh\u00e9 z nich s\u00fa dobre pre\u0161tudovan\u00e9 a pop\u00edsan\u00e9.<br \/>\nSamozrejme, v\u00fdvoj\u00e1ri ochrann\u00fdch rie\u0161en\u00ed neost\u00e1vaj\u00fa pozadu a akt\u00edvne deteguj\u00fa tak\u00e9to \u010dinnosti.<br \/>\nNapr\u00edklad, MSF rel\u00e1cie s\u00fa \u00faspe\u0161ne detegovan\u00e9 modern\u00fdmi IPS od Cisco alebo Positive Tech, zatia\u013e \u010do sp\u00e4tn\u00fd SSH tunel dok\u00e1\u017ee detegova\u0165 prakticky ka\u017ed\u00fd norm\u00e1lny firewall.<\/p>\n<p>Preto, aby sme zostali bez pov\u0161imnutia v dobrej Red Team kampani \u2014 mus\u00edme budova\u0165 sp\u00e4tn\u00fd tunel pomocou netradi\u010dn\u00fdch prostriedkov a \u010do najviac sa prisp\u00f4sobi\u0165 skuto\u010dn\u00e9mu re\u017eimu pr\u00e1ce siete.<\/p>\n<p>Sk\u00fasme n\u00e1js\u0165 alebo vymyslie\u0165 nie\u010do podobn\u00e9.<br \/>\n<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><br \/>\nPredt\u00fdm, ne\u017e nie\u010do vymysl\u00edme, mus\u00edme pochopi\u0165, ak\u00e9ho v\u00fdsledku chceme dosiahnu\u0165, ak\u00e9 funkcie by mala na\u0161a aplik\u00e1cia vykon\u00e1va\u0165. Ak\u00e9 bud\u00fa po\u017eiadavky na tunel, aby sme mohli pracova\u0165 v re\u017eime maxim\u00e1lnej skrytosti?<\/p>\n<p>Je jasn\u00e9, \u017ee pre ka\u017ed\u00fd pr\u00edpad sa m\u00f4\u017eu tak\u00e9to po\u017eiadavky v\u00fdrazne l\u00ed\u0161i\u0165, ale na z\u00e1klade pracovn\u00fdch sk\u00fasenost\u00ed m\u00f4\u017eeme vyzdvihn\u00fa\u0165 z\u00e1kladn\u00e9:<\/p>\n<ul>\n<li> pr\u00e1ca na OS Windows 7-10. Ke\u010f\u017ee v\u00e4\u010d\u0161ina korpor\u00e1tnych siet\u00ed pou\u017e\u00edva pr\u00e1ve Windows;<\/li>\n<li> klient sa pripojuje na server cez SSL, aby sa predi\u0161lo pas\u00edvnemu odpo\u010d\u00favaniu prostredn\u00edctvom IPS;<\/li>\n<li> pri pripojen\u00ed mus\u00ed klient podporova\u0165 pr\u00e1cu cez proxy server s autentifik\u00e1ciou, preto\u017ee vo viacer\u00fdch spolo\u010dnostiach sa pr\u00edstup na internet vykon\u00e1va cez proxy. V skuto\u010dnosti klientsk\u00fd po\u010d\u00edta\u010d o tom ani nemus\u00ed vedie\u0165 a proxy sa pou\u017e\u00edva v priesvitnom re\u017eime. Tak\u00fato funk\u010dnos\u0165 v\u0161ak mus\u00edme zahrn\u00fa\u0165;<\/li>\n<li> klientsk\u00e1 \u010das\u0165 by mala by\u0165 stru\u010dn\u00e1 a prenosn\u00e1;<br \/>\nJe jasn\u00e9, \u017ee na pr\u00e1cu vn\u00fatri siete Z\u00e1kazn\u00edka je mo\u017en\u00e9 na klientskom po\u010d\u00edta\u010di nain\u0161talova\u0165 OpenVPN a vytvori\u0165 plnohodnotn\u00fd tunel k svojmu serveru (na\u0161\u0165astie klienti openvpn dok\u00e1\u017eu pracova\u0165 cez proxy). Av\u0161ak, po prv\u00e9, to nie v\u017edy bude mo\u017en\u00e9, ke\u010f\u017ee nemus\u00edme by\u0165 lok\u00e1lnymi administr\u00e1tormi, a po druh\u00e9, to sp\u00f4sob\u00ed to\u013eko hluku, \u017ee poriadny SIEM alebo HIPS n\u00e1s okam\u017eite nahl\u00e1si. Ide\u00e1lne by bolo, aby n\u00e1\u0161 klient fungoval ako takzvan\u00fd inline t\u00edm, ako je to implementovan\u00e9 v mnoh\u00fdch bash shelloch, a sp\u00fa\u0161\u0165al sa cez pr\u00edkazov\u00fd riadok, napr\u00edklad pri vykon\u00e1van\u00ed pr\u00edkazov z word makra.<\/li>\n<li> n\u00e1\u0161 tunel by mal by\u0165 viacvl\u00e1knov\u00fd a podporova\u0165 viacero pripojen\u00ed s\u00fa\u010dasne;<\/li>\n<li> pripojenie klient-server by malo ma\u0165 nejak\u00fa autentifik\u00e1ciu, aby tunel bol nastaven\u00fd iba pre n\u00e1\u0161ho klienta a nie pre v\u0161etk\u00fdch, ktor\u00ed sa k n\u00e1m pripoja na server na zadan\u00fa adresu a port. Ide\u00e1lne by pre 'cudzie pou\u017e\u00edvate\u013eov' mala otvori\u0165 vstupn\u00e1 str\u00e1nka so zvieratkami alebo odbornou t\u00e9mou s\u00favisiacou s p\u00f4vodnou dom\u00e9nou.<br \/>\nNapr\u00edklad, ak je Z\u00e1kazn\u00edkom zdravotn\u00e1 organiz\u00e1cia, pre administr\u00e1tora informa\u010dnej bezpe\u010dnosti, ktor\u00fd sa rozhodol skontrolova\u0165 zdroj, na ktor\u00fd sa pracovn\u00edk kliniky odvol\u00e1val, by mala otvori\u0165 str\u00e1nka s farmaceutick\u00fdmi produktmi, Wikipedia s opisom diagn\u00f3zy alebo blog doktora Komarovsk\u00e9ho a pod. <\/li>\n<\/ul>\n<p><\/p>\n<h3>Anal\u00fdza existuj\u00facich n\u00e1strojov<\/h3>\n<p>\nPredt\u00fdm, ako vyn\u00e1jdeme svoj vlastn\u00fd bicykel, je potrebn\u00e9 analyzova\u0165 existuj\u00face bicykle a zisti\u0165, \u010di to naozaj potrebujeme a pravdepodobne sme nie sme jedin\u00ed, kto uva\u017euje o potrebe tak\u00e9ho funk\u010dn\u00e9ho bicykla.<\/p>\n<p>H\u013eadanie na internete (zd\u00e1 sa, \u017ee h\u013ead\u00e1me norm\u00e1lne), ako aj vyh\u013ead\u00e1vanie na GitHub pod\u013ea k\u013e\u00fa\u010dov\u00fdch slov \u201ereverse socks\u201c neprinieslo ve\u013ea v\u00fdsledkov. V podstate to v\u0161etko s\u00favis\u00ed s vytv\u00e1ran\u00edm SSH tunelov s reverzn\u00edm port forwardingom a v\u0161etk\u00fdm, \u010do s t\u00fdm s\u00favis\u00ed. Okrem SSH tunelov m\u00f4\u017eeme vyzdvihn\u00fa\u0165 nieko\u013eko rie\u0161en\u00ed:<\/p>\n<p><b><noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/klsecservices\/rpivot\">github.com\/klsecservices\/rpivot<\/a><\/noindex><\/b><br \/>\nDlhodob\u00e1 implement\u00e1cia reverzn\u00e9ho tunelu od chlapcov z Kaspersky Lab. Z n\u00e1zvu je jasn\u00e9, na \u010do je tento skript ur\u010den\u00fd. Implementovan\u00e9 v Pythone 2.7, tunel funguje v cleartext re\u017eime (ako sa teraz hovor\u00ed \u2014 pozdravujte RKN)<\/p>\n<p><b><noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/tonyseek\/rsocks\">github.com\/tonyseek\/rsocks<\/a><\/noindex><\/b><br \/>\n\u010eal\u0161ia implement\u00e1cia v Pythone, taktie\u017e v cleartext, ale s viacer\u00fdmi mo\u017enos\u0165ami. Nap\u00edsan\u00e9 vo forme modulu s API na integr\u00e1ciu rie\u0161en\u00ed do vlastn\u00fdch projektov.<\/p>\n<p><b><noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/llkat\/rsockstun\">github.com\/llkat\/rsockstun<\/a><\/noindex><\/b><br \/>\n<b><noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/mis-team\/rsockstun\">github.com\/mis-team\/rsockstun<\/a><\/noindex><\/b><br \/>\nPrv\u00fd odkaz \u2014 p\u00f4vodn\u00e1 verzia implement\u00e1cie reverzn\u00e9ho socksa v Golangu (nie je podporovan\u00e1 v\u00fdvoj\u00e1rom).<br \/>\nDruh\u00fd odkaz \u2014 u\u017e na\u0161a \u00faprava s \u010fal\u0161\u00edmi funkciami, taktie\u017e v Golangu. V na\u0161ej verzii sme implementovali SSL, pr\u00e1cu cez proxy s NTLM autoriz\u00e1ciou, autoriz\u00e1ciu na klientovi, vstupn\u00fa str\u00e1nku pri nespr\u00e1vnom hesle (sk\u00f4r \u2014 presmerovanie na vstupn\u00fa str\u00e1nku), viacer\u00e9 vl\u00e1kna (t.j. s tunelom m\u00f4\u017eu pracova\u0165 viacer\u00ed \u013eudia s\u00fa\u010dasne), syst\u00e9m pingovania klienta, aby sa zistilo, \u010di je na\u017eive alebo nie.<\/p>\n<p><b><noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/jun7th\/tsocks\">github.com\/jun7th\/tsocks<\/a><\/noindex><\/b><br \/>\nImplement\u00e1cia reverzn\u00e9ho socksa od na\u0161ich \u201e\u010d\u00ednskych priate\u013eov\u201c v Pythone. Tam sa nach\u00e1dza aj hotov\u00fd bin\u00e1rny s\u00fabor (exe), ktor\u00fd vytvorili \u010c\u00ed\u0148ania a je ur\u010den\u00fd na pou\u017eitie. Tu len \u010d\u00ednsky boh vie, \u010do m\u00f4\u017ee v tomto bin\u00e1ri by\u0165 okrem hlavnej funk\u010dnosti, tak\u017ee pou\u017e\u00edvajte na vlastn\u00e9 riziko.<\/p>\n<p><b><noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/securesocketfunneling\/ssf\">github.com\/securesocketfunneling\/ssf<\/a><\/noindex><\/b><br \/>\nCelkom zauj\u00edmav\u00fd projekt v C++ na implement\u00e1ciu reverzn\u00e9ho socksa a nielen toho. Okrem reverzn\u00e9ho tunela m\u00f4\u017ee robi\u0165 aj port forwarding, vytv\u00e1ra\u0165 pr\u00edkazov\u00e9 shell a podobne.<\/p>\n<p><b>MSF meterpreter<\/b><br \/>\nTu, ako sa hovor\u00ed, bez koment\u00e1ra. V\u0161etci aspo\u0148 tro\u0161ku vzdelan\u00ed hackeri s\u00fa s touto vecou d\u00f4verne obozn\u00e1men\u00ed a ch\u00e1pu, ako \u013eahko ju prostriedky ochrany objavia.<\/p>\n<p>V\u0161etky vy\u0161\u0161ie uveden\u00e9 n\u00e1stroje funguj\u00fa na podobnej technol\u00f3gii: na po\u010d\u00edta\u010di v sieti sa sp\u00fa\u0161\u0165a vopred pripraven\u00fd spustite\u013en\u00fd bin\u00e1rny modul, ktor\u00fd nadv\u00e4zuje spojenie s vonkaj\u0161\u00edm serverom. Na serveri sa sp\u00fa\u0161\u0165a SOCKS4\/5 server, ktor\u00fd prij\u00edma pripojenia a pren\u00e1\u0161a ich na klienta.<\/p>\n<p>Nev\u00fdhodou v\u0161etk\u00fdch vy\u0161\u0161ie uveden\u00fdch n\u00e1strojov je, \u017ee bu\u010f je na klientskom po\u010d\u00edta\u010di potrebn\u00fd nain\u0161talovan\u00fd Python alebo Golang (ko\u013eko ste u\u017e videli po\u010d\u00edta\u010dov s nain\u0161talovan\u00fdm Pythonom, napr\u00edklad u riadite\u013ea firmy alebo kancel\u00e1rskych pracovn\u00edkov?), alebo je potrebn\u00e9 prenies\u0165 vopred zostaven\u00fd bin\u00e1rny s\u00fabor (v skuto\u010dnosti python a skript v jednom balen\u00ed) a spusti\u0165 tento bin\u00e1rny s\u00fabor tam. A s\u0165ahovanie exe s n\u00e1sledn\u00fdm spusten\u00edm je pre miestny antiv\u00edrus alebo HIPS v\u00fdnimo\u010dn\u00fd podpis.<\/p>\n<p>Celkovo sa pon\u00faka jasn\u00fd z\u00e1ver \u2014 potrebujeme rie\u0161enie na powershell. Teraz na n\u00e1s bud\u00fa h\u00e1dza\u0165 paradajky \u2014 \u017ee powershell je u\u017e v\u0161etko zn\u00e1me, monitoruje sa, blokuje a tak \u010falej. V skuto\u010dnosti \u2014 nie v\u0161ade. Zodpovedne prehl\u00e1sime. Mimochodom, existuje mno\u017estvo sp\u00f4sobov, ako ob\u00eds\u0165 blokovania (tu op\u00e4\u0165 popul\u00e1rna fr\u00e1za o zdrav\u00ed RKN \ud83d\ude42), od jednoduch\u00e9ho premenovania powershell.exe na cmdd.exe a\u017e po powerdll a podobne.<\/p>\n<h3>Za\u010dneme vym\u00fd\u0161\u013ea\u0165<\/h3>\n<p>\nJe jasn\u00e9, \u017ee najsk\u00f4r sa pozrieme na Google a... nen\u00e1jdeme ni\u010d konkr\u00e9tne na t\u00fato t\u00e9mu (ak niekto nie\u010do na\u0161iel \u2014 po\u0161lite odkazy do koment\u00e1rov). Je tu len <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/p3nt4\/Invoke-SocksProxy\">implement\u00e1cia<\/a><\/noindex> Socks5 na powershell, ale to je oby\u010dajn\u00fd \"priamy\" socks, ktor\u00fd m\u00e1 rad svojich nev\u00fdhod (o ktor\u00fdch si povieme nesk\u00f4r). M\u00f4\u017eeme to samozrejme jedn\u00fdm pohybom ruky premeni\u0165 na sp\u00e4tn\u00fd, ale to bude len jednovl\u00e1knov\u00fd socks, \u010do pre n\u00e1s nie je \u00faplne to, \u010do potrebujeme.<\/p>\n<p>Tak\u017ee, ni\u010d pripraven\u00e9ho sme nena\u0161li, preto sa budeme musie\u0165 predsa len vymyslie\u0165 svoj vlastn\u00fd bicykel. Z\u00e1klad na\u0161ich bicyklov vezmeme <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/mis-team\/rsockstun\">na\u0161u vyvinut\u00fa<\/a><\/noindex> sp\u00e4tn\u00fa socks\u00e1 na golang, a klienta k nemu realizujeme na powershell.<\/p>\n<p><b>RSocksTun<\/b><br \/>\nTak\u017ee, ako funguje rsockstun?<\/p>\n<p>Na praxi RsocksTun (\u010falej len \u2014 rs) s\u00fa zalo\u017een\u00e9 dva softv\u00e9rov\u00e9 komponenty \u2014 Yamux a Socks5 server. Socks5 server je oby\u010dajn\u00fd lok\u00e1lny socks5, sp\u00fa\u0161\u0165a sa na klientovi. A multiplexovanie spojen\u00ed k nemu (pam\u00e4t\u00e1te na viacvl\u00e1knovos\u0165?) zabezpe\u010duje yamux (<noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/hashicorp\/yamux\/\">e\u0161te jeden multiplexer<\/a><\/noindex>). Tento syst\u00e9m umo\u017e\u0148uje sp\u00fa\u0161\u0165a\u0165 nieko\u013eko klientsk\u00fdch socks5 serverov a rozde\u013eova\u0165 extern\u00e9 pripojenia k nim, pren\u00e1\u0161aj\u00fac ich cez jedno jedin\u00e9 TCP spojenie (takmer ako v meterprepteri) od klienta k serveru, \u010d\u00edm sa implementuje viacvl\u00e1knov\u00fd re\u017eim, bez ktor\u00e9ho jednoducho nem\u00f4\u017eeme plnohodnotne pracova\u0165 vo vn\u00fatornej sieti.<\/p>\n<p>Z\u00e1kladn\u00e1 funkcionalita yamuxu spo\u010d\u00edva v tom, \u017ee zav\u00e1dza \u010fal\u0161iu sie\u0165ov\u00fa vrstvu streamov, ktor\u00e1 je realizovan\u00e1 ako 12-bajtov\u00e1 hlavi\u010dka pre ka\u017ed\u00fd paket. (Tu \u00famyselne pou\u017e\u00edvame slovo \u201estream\u201c, a nie pr\u00fad, aby sme nezamie\u0148ali \u010ditate\u013ea so softv\u00e9rov\u00fdm pr\u00fadom \u201ethread\u201c \u2014 toto pojatie taktie\u017e pou\u017eijeme v tomto \u010dl\u00e1nku). Vn\u00fatri hlavi\u010dky yamuxu s\u00fa \u010d\u00edslo streamu, flagy na nastavenie\/ukon\u010denie streamu, po\u010det pren\u00e1\u0161an\u00fdch bajtov a ve\u013ekos\u0165 prenosov\u00e9ho okna.<\/p>\n<p><img decoding=\"async\" alt=\"P\u00ed\u0161eme Reverse socks5 proxy v PowerShell. \u010cas\u0165 1\" src=\"\/wp-content\/uploads\/2019\/05\/3a1bc23bdc90176f7cd37f112a8a1a6c.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nOkrem nastavenia\/ukon\u010denia streamu yamux realizuje aj mechanizmus keepalive, ktor\u00fd umo\u017e\u0148uje sledova\u0165 funk\u010dnos\u0165 zriaden\u00e9ho komunika\u010dn\u00e9ho kan\u00e1la. Fungovanie mechanizmu keepalive spr\u00e1v sa nastavuje pri vytv\u00e1ran\u00ed Yamux rel\u00e1cie. V podstate s\u00fa tam len dva parametre: povoli\u0165\/zak\u00e1za\u0165 a periodicita odosielania paketov v sekund\u00e1ch. Keepalive spr\u00e1vy m\u00f4\u017ee odosiela\u0165 ako yamux server, tak aj yamux klient. Po prijat\u00ed keepalive spr\u00e1vy je vzdialen\u00e1 strana povinn\u00e1 odpoveda\u0165 presne tou istou identifika\u010dnou spr\u00e1vou (v podstate \u2014 \u010d\u00edslom), ktor\u00fa prijala. V z\u00e1sade keepalive je to ten ist\u00fd ping, iba pre yamux.<\/p>\n<p>Podrobne s\u00fa v\u0161etky techniky fungovania multiplexeru: typy paketov, flagy na nastavenie a ukon\u010denie spojen\u00ed, mechanizmus prenosu d\u00e1t pop\u00edsan\u00e9 v <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/hashicorp\/yamux\/blob\/master\/spec.md\">\u0161pecifik\u00e1cie<\/a><\/noindex> k yamuxu. <\/p>\n<h3>Z\u00e1ver prvej \u010dasti<\/h3>\n<p>\nTak\u017ee v prvej \u010dasti \u010dl\u00e1nku sme sa obozn\u00e1mili s niektor\u00fdmi n\u00e1strojmi na organiz\u00e1ciu reverzn\u00fdch tunelov, pozreli sme sa na ich v\u00fdhody a nev\u00fdhody, presk\u00famali sme mechanizmus fungovania Yamux multiplexeru a op\u00edsali hlavn\u00fa po\u017eiadavku na novo vytv\u00e1ran\u00fd powershell modul. V \u010fal\u0161ej \u010dasti sa zameriame na v\u00fdvoj samotn\u00e9ho modulu prakticky od nuly. Pokra\u010dovanie nasleduje. Neprela\u010fte sa \ud83d\ude42<br \/>\n<br \/>Zdroj: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/post\/453870\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0418\u0441\u0442\u043e\u0440\u0438\u044f \u043e\u0431 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0438 \u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0432 3-\u0445 \u0447\u0430\u0441\u0442\u044f\u0445. \u0427\u0430\u0441\u0442\u044c 1 \u2014 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0430\u044f. \u0411\u0443\u043a\u043e\u0432 \u043c\u043d\u043e\u0433\u043e \u2014 \u043f\u043e\u043b\u044c\u0437\u044b \u0435\u0449\u0435 \u0431\u043e\u043b\u044c\u0448\u0435. \u041f\u043e\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 \u0437\u0430\u0434\u0430\u0447\u0438 \u0412 \u0445\u043e\u0434\u0435 \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043f\u0435\u043d\u0442\u0435\u0441\u0442\u043e\u0432 \u0438 RedTeam \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0439 \u043d\u0435 \u0432\u0441\u0435\u0433\u0434\u0430 \u0443\u0434\u0430\u0435\u0442\u0441\u044f \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0448\u0442\u0430\u0442\u043d\u044b\u043c\u0438 \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430\u043c\u0438 \u0417\u0430\u043a\u0430\u0437\u0447\u0438\u043a\u043e\u0432, \u0442\u0430\u043a\u0438\u043c\u0438 \u043a\u0430\u043a VPN, RDP, Citrix \u0438 \u0442.\u0434. \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0437\u0430\u043a\u0440\u0435\u043f\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0437\u0430\u0445\u043e\u0434\u0430 \u0432\u043e \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u044e\u044e \u0441\u0435\u0442\u044c. \u0413\u0434\u0435-\u0442\u043e \u0448\u0442\u0430\u0442\u043d\u044b\u0439 VPN \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u043f\u043e MFA [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":26164,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-34725","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.5 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0418\u0441\u0442\u043e\u0440\u0438\u044f \u043e\u0431 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0438 \u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0432 3-\u0445 \u0447\u0430\u0441\u0442\u044f\u0445.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sk\/blog\/administrirovanie\/pishem-reverse-socks5-proxy-na-powershell-chast-1\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.5\" \/>\n\t\t<meta property=\"og:locale\" content=\"sk_SK\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u041f\u0438\u0448\u0435\u043c Reverse socks5 proxy \u043d\u0430 powershell.\u0427\u0430\u0441\u0442\u044c 1 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0418\u0441\u0442\u043e\u0440\u0438\u044f \u043e\u0431 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0438 \u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0432 3-\u0445 \u0447\u0430\u0441\u0442\u044f\u0445.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sk\/blog\/administrirovanie\/pishem-reverse-socks5-proxy-na-powershell-chast-1\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T19:00:00+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2019-10-31T19:00:00+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47P\u00ed\u0161eme Reverse socks5 proxy na powershell. \u010cas\u0165 1 | ProHoster","description":"Pr\u00edbeh o v\u00fdskume a v\u00fdvoji v 3 \u010dastiach.","canonical_url":"https:\/\/prohoster.info\/sk\/blog\/administrirovanie\/pishem-reverse-socks5-proxy-na-powershell-chast-1","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sk_SK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041f\u0438\u0448\u0435\u043c Reverse socks5 proxy \u043d\u0430 powershell.\u0427\u0430\u0441\u0442\u044c 1 | ProHoster","og:description":"\u0418\u0441\u0442\u043e\u0440\u0438\u044f \u043e\u0431 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0438 \u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0432 3-\u0445 \u0447\u0430\u0441\u0442\u044f\u0445.","og:url":"https:\/\/prohoster.info\/sk\/blog\/administrirovanie\/pishem-reverse-socks5-proxy-na-powershell-chast-1","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:00:00+00:00","article:modified_time":"2019-10-31T19:00:00+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"34725","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 20:23:33","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 02:16:32","updated":"2026-01-21 20:23:33","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/34725","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/comments?post=34725"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/34725\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/media\/26164"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/media?parent=34725"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/categories?post=34725"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/tags?post=34725"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}