{"id":31811,"date":"2019-10-31T21:43:17","date_gmt":"2019-10-31T18:43:17","guid":{"rendered":"https:\/\/prohoster.info\/blog\/network-tools-ili-s-chego-nachat-pentesteru\/"},"modified":"2019-10-31T21:43:17","modified_gmt":"2019-10-31T18:43:17","slug":"network-tools-ili-s-chego-nachat-pentesteru","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sl\/blog\/administrirovanie\/network-tools-ili-s-chego-nachat-pentesteru","title":{"rendered":"Orodja za omre\u017eje, ali kako za\u010deti s pentestiranjem?","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Orodjarstvo za\u010detnega pentestera: predstavljamo kratek pregled glavnih orodij, ki bodo koristna pri pentestu notranjega omre\u017eja. Ta orodja se \u017ee aktivno uporabljajo med \u0161irokim krogom strokovnjakov, zato je koristno, da se z njihovimi zmo\u017enostmi dobro seznanite. <\/p>\n<p><img decoding=\"async\" alt=\"Orodja za omre\u017eje, ali kako za\u010deti s pentestiranjem?\" src=\"\/wp-content\/uploads\/2019\/04\/a6846992cd5eb7769c87bbfb5aaaabbc.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<h2>Vsebina:<\/h2>\n<p><\/p>\n<ul>\n<li> <noindex><a rel=\"nofollow\" href=\"#Nmap\">Nmap<\/a><\/noindex><\/li>\n<li> <noindex><a rel=\"nofollow\" href=\"#Zmap\">Zmap<\/a><\/noindex><\/li>\n<li> <noindex><a rel=\"nofollow\" href=\"#Masscan\">Masscan<\/a><\/noindex><\/li>\n<li> <noindex><a rel=\"nofollow\" href=\"#Nessus\">Nessus<\/a><\/noindex><\/li>\n<li> <noindex><a rel=\"nofollow\" href=\"#Net-Creds\">Net-Creds<\/a><\/noindex><\/li>\n<li> <noindex><a rel=\"nofollow\" href=\"#network-miner\">network-miner<\/a><\/noindex><\/li>\n<li> <noindex><a rel=\"nofollow\" href=\"#mitm6\">mitm6<\/a><\/noindex><\/li>\n<li> <noindex><a rel=\"nofollow\" href=\"#Responder\">Responder<\/a><\/noindex><\/li>\n<li> <noindex><a rel=\"nofollow\" href=\"#Evil_Foca\">Evil_Foca<\/a><\/noindex><\/li>\n<li> <noindex><a rel=\"nofollow\" href=\"#Bettercap\">Bettercap<\/a><\/noindex><\/li>\n<li> <noindex><a rel=\"nofollow\" href=\"#gateway_finder\">gateway_finder<\/a><\/noindex><\/li>\n<li> <noindex><a rel=\"nofollow\" href=\"#mitmproxy\">mitmproxy<\/a><\/noindex><\/li>\n<li> <noindex><a rel=\"nofollow\" href=\"#SIET\">SIET<\/a><\/noindex><\/li>\n<li> <noindex><a rel=\"nofollow\" href=\"#yersinia\">yersinia<\/a><\/noindex><\/li>\n<li> <noindex><a rel=\"nofollow\" href=\"#proxychains\">proxychains<\/a><\/noindex><\/li>\n<\/ul>\n<p><\/p>\n<h2><noindex><a rel=\"nofollow\" name=\"Nmap\"><\/a><\/noindex>Nmap<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/nmap.org\/\">Nmap<\/a><\/noindex> \u2013 orodje z odprtokodnim licenciranjem za skeniranje omre\u017eij, ki je eno najbolj priljubljenih orodij med varnostnimi strokovnjaki in sistemskimi skrbniki. Prvi\u010d se uporablja za skeniranje vrat, poleg tega pa ima \u0161e ogromno koristnih funkcij, kar ga dejansko dela \"super kombinacijo\". <b>super kombinacija<\/b> za raziskovanje omre\u017eij.<\/p>\n<p>Poleg preverjanja odprtih\/zaprtih vrat Nmap lahko identificira storitve, ki poslu\u0161ajo na odprtem vratih, in njihovo razli\u010dico, v\u010dasih pa pomaga tudi pri dolo\u010danju operacijskega sistema. Nmap podpira skripte za skeniranje (NSE - Nmap Scripting Engine). Z uporabo skript je mogo\u010de preveriti ranljivosti za razli\u010dne storitve (\u010de seveda obstaja skript zanje, ali pa lahko vedno napi\u0161ete svoj). <\/p>\n<p>Tako Nmap omogo\u010da, da sestavi podrobno karto omre\u017eja, pridobi najve\u010d informacij o aktivnih storitvah na gostiteljih v omre\u017eju, ter preventivno preveri nekatere ranljivosti. Nmap ima tudi prilagodljive nastavitve skeniranja, omogo\u010da nastavitev hitrosti skeniranja, \u0161tevila niti, \u0161tevila skupin za skeniranje itd.<br \/>\nUdoben je za skeniranje manj\u0161ih omre\u017eij in nepogre\u0161ljiv za to\u010dno skeniranje posameznih gostiteljev.<\/p>\n<h4>Prednosti:<\/h4>\n<ul>\n<li>Hitro deluje z manj\u0161im obsegom gostiteljev;<\/li>\n<li>Prilagodljivost nastavitev - mo\u017enosti lahko kombinirate tako, da pridobite najbolj informativne podatke v sprejemljivem \u010dasu; <\/li>\n<li>Paralelno skeniranje - seznam ciljnih gostiteljev se razdeli v skupine, nato pa se vsaka skupina zaporedno skenira, znotraj skupine pa se uporablja paralelno skeniranje. Razdelitev v skupine je tudi majhna pomanjkljivost (glejte spodaj);<\/li>\n<li>Prednastavljeni nizi skript za razli\u010dne naloge - ne morate porabiti veliko \u010dasa za iskanje specifi\u010dnih skriptov, ampak lahko navedete skupine skript;<\/li>\n<li>Izhod rezultatov - 5 razli\u010dnih formatov, vklju\u010dno z XML, ki ga je mogo\u010de uvoziti v druge orodje;<\/li>\n<\/ul>\n<p><\/p>\n<h4>Mane:<\/h4>\n<p><\/p>\n<ul>\n<li>Skandirnje grupe hostova \u2013 informacije o odre\u0111enom hostu nisu dostupne dok se ne zavr\u0161i skeniranje cele grupe. To se re\u0161ava postavkom maksimalne veli\u010dine grupe i maksimalnog vremenskog intervala u opcijama, tokom kog \u0107e se o\u010dekivati odgovor na zahtev, pre nego \u0161to se prekinu poku\u0161aji ili izvr\u0161i jo\u0161 jedan;<\/li>\n<li>Tokom skeniranja, Nmap \u0161alje SYN pakete na ciljnu portu i \u010deka na bilo koji odgovaraju\u0107i paket ili isteknu\u0107e vremenskog ograni\u010denja, u slu\u010daju da nema odgovora. To negativno uti\u010de na performanse skenera u celini, u pore\u0111enju sa asinhronim skenerima (npr. zmap ili masscan);<\/li>\n<li>Pri skeniranju velikih mre\u017ea z uporabo zastavic za pospe\u0161itev skeniranja (\u2013min-rate, \u2013min-parallelism) lahko daje rezultate z la\u017enimi negativnimi rezultati, zaradi \u010desar zamudi odprte porte na gostitelju. Te mo\u017enosti je prav tako treba uporabljati previdno, saj visok paketni nivo lahko privede do nenamernega DoS. <\/li>\n<\/ul>\n<p>\n<img decoding=\"async\" alt=\"Orodja za omre\u017eje, ali kako za\u010deti s pentestiranjem?\" src=\"\/wp-content\/uploads\/2019\/04\/189c9a5145449871571ad11d8b0be9c2.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h2><noindex><a rel=\"nofollow\" name=\"Zmap\"><\/a><\/noindex>Zmap<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/zmap\/zmap\">Zmap<\/a><\/noindex> (ne me\u0161ati sa ZenMap) \u2013 tako\u0111e je skener sa otvorenim izvorom, razvijen kao br\u017ea alternativa Nmap-u.<\/p>\n<p>Za razliku od nmap-a \u2013 Zmap prilikom slanja SYN paketa ne \u010deka da se vrati odgovor, ve\u0107 nastavlja skeniranje, istovremeno o\u010dekuju\u0107i odgovore od svih hostova, tako da zapravo ne odr\u017eava stanje konekcije. Kada odgovor na SYN paket stigne, Zmap \u0107e koristiti sadr\u017eaj paketa da razume koji port i na kojem hostu je otvoren. Pored toga, Zmap \u0161alje samo jedan SYN paket na skenirani port. Tako\u0111e postoji mogu\u0107nost kori\u0161\u0107enja PF_RING za brzo skeniranje velikih mre\u017ea, ako se iznenada na\u0111e 10-gigabitni interfejs i kompatibilna mre\u017ena kartica.<\/p>\n<h4>Prednosti:<\/h4>\n<p><\/p>\n<ul>\n<li>Brzina skeniranja;<\/li>\n<li>Zmap generi\u0161e Ethernet okvire mimo sistemskog TCP\/IP steka;<\/li>\n<li>Mogu\u0107nost kori\u0161\u0107enja PF_RING;<\/li>\n<li>ZMap randomizuje ciljeve za ravnomernu raspodelu optere\u0107enja na skeniranom delu;<\/li>\n<li>Mogu\u0107nost integracije sa ZGrab (alat za prikupljanje informacija o servisima na aplikativnom nivou L7).<\/li>\n<\/ul>\n<p><\/p>\n<h4>Mane:<\/h4>\n<p><\/p>\n<ul>\n<li>Mo\u017ee izazvati prekid u radu mre\u017ene opreme, na primer, o\u0161tetiti prelazne rutere, uprkos raspodeljenom optere\u0107enju, po\u0161to \u0107e svi paketi prolaziti kroz jedan ruter.<\/li>\n<\/ul>\n<p>\n<img decoding=\"async\" alt=\"Orodja za omre\u017eje, ali kako za\u010deti s pentestiranjem?\" src=\"\/wp-content\/uploads\/2019\/04\/474b04785f27540510421d4fb715d4b4.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h2><noindex><a rel=\"nofollow\" name=\"Masscan\"><\/a><\/noindex>Masscan<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/robertdavidgraham\/masscan\">Masscan<\/a><\/noindex> \u2014 \u0443\u0434\u0438\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u043e, \u043d\u043e \u044d\u0442\u043e \u0442\u043e\u0436\u0435 \u0441\u043a\u0430\u043d\u0435\u0440 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0441\u043e\u0437\u0434\u0430\u043d \u0441 \u043e\u0434\u043d\u043e\u0439 \u0446\u0435\u043b\u044c\u044e \u2014 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442 \u0435\u0449\u0451 \u0431\u044b\u0441\u0442\u0440\u0435\u0435 (\u043c\u0435\u043d\u0435\u0435 \u0447\u0435\u043c \u0437\u0430 6 \u043c\u0438\u043d\u0443\u0442 \u0441\u043e \u0441\u043a\u043e\u0440\u043e\u0441\u0442\u044c\u044e \u043e\u043a\u043e\u043b\u043e 10 \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u043e\u0432 \u043f\u0430\u043a\u0435\u0442\u043e\u0432\/\u0441). \u041f\u043e \u0441\u0443\u0442\u0438, \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u043f\u043e\u0447\u0442\u0438 \u0442\u0430\u043a \u0436\u0435, \u043a\u0430\u043a Zmap, \u0442\u043e\u043b\u044c\u043a\u043e \u0435\u0449\u0451 \u0431\u044b\u0441\u0442\u0440\u0435\u0435.<\/p>\n<h4>Prednosti:<\/h4>\n<p><\/p>\n<ul>\n<li>\u0421\u0438\u043d\u0442\u0430\u043a\u0441\u0438\u0441 \u043f\u043e\u0445\u043e\u0436 \u043d\u0430 Nmap, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0430 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u0442 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u0438\u043c\u044b\u0435 \u0441 Nmap \u043e\u043f\u0446\u0438\u0438;<\/li>\n<li>\u0421\u043a\u043e\u0440\u043e\u0441\u0442\u044c \u0440\u0430\u0431\u043e\u0442\u044b \u2014 \u044d\u0442\u043e \u043e\u0434\u0438\u043d \u0438\u0437 \u0441\u0430\u043c\u044b\u0445 \u0431\u044b\u0441\u0442\u0440\u044b\u0445 \u0430\u0441\u0438\u043d\u0445\u0440\u043e\u043d\u043d\u044b\u0445 \u0441\u043a\u0430\u043d\u0435\u0440\u043e\u0432.<\/li>\n<li>\u0413\u0438\u0431\u043a\u0438\u0439 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u2014 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0432\u043e\u0437\u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u0435\u0440\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0438 \u0440\u0430\u0441\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u0435 \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u043f\u043e \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c (\u043a\u0430\u043a \u0432 Zmap).<\/li>\n<\/ul>\n<p><\/p>\n<h4>Mane:<\/h4>\n<p><\/p>\n<ul>\n<li>\u041a\u0430\u043a \u0438 \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u0441 Zmap, \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0430 \u043d\u0430 \u0441\u0435\u0442\u044c \u043a\u0440\u0430\u0439\u043d\u0435 \u0432\u044b\u0441\u043e\u043a\u0430, \u0447\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a DoS;<\/li>\n<li>\u041f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u043d\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043d\u0430 \u043f\u0440\u0438\u043a\u043b\u0430\u0434\u043d\u043e\u043c \u0443\u0440\u043e\u0432\u043d\u0435 L7;<\/li>\n<\/ul>\n<p>\n<img decoding=\"async\" alt=\"Orodja za omre\u017eje, ali kako za\u010deti s pentestiranjem?\" src=\"\/wp-content\/uploads\/2019\/04\/cc919cc2dfd848594f4d8d6a35f9c1cf.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h2><noindex><a rel=\"nofollow\" name=\"Nessus\"><\/a><\/noindex>Nessus<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/www.tenable.com\/products\/nessus\/nessus-professional\">Nessus<\/a><\/noindex> \u2014 \u044d\u0442\u043e \u0441\u043a\u0430\u043d\u0435\u0440 \u0434\u043b\u044f \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435. \u0418\u0441\u0445\u043e\u0434\u043d\u044b\u0439 \u043a\u043e\u0434 \u0437\u0430\u043a\u0440\u044b\u0442, \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442 \u0431\u0435\u0441\u043f\u043b\u0430\u0442\u043d\u0430\u044f \u0432\u0435\u0440\u0441\u0438\u044f Nessus Home, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0434\u043e 16 IP-\u0430\u0434\u0440\u0435\u0441\u043e\u0432 \u0441 \u0442\u043e\u0439 \u0436\u0435 \u0441\u043a\u043e\u0440\u043e\u0441\u0442\u044c\u044e \u0438 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u044b\u043c \u0430\u043d\u0430\u043b\u0438\u0437\u043e\u043c, \u0447\u0442\u043e \u0438 \u0432 \u043f\u043b\u0430\u0442\u043d\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438.<\/p>\n<p>\u0421\u043f\u043e\u0441\u043e\u0431\u0435\u043d \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u044f\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u0441\u043b\u0443\u0436\u0431 \u0438\u043b\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0432\u0430\u0442\u044c \u043e\u0448\u0438\u0431\u043a\u0438 \u0432 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c bruteforce \u0441\u043b\u043e\u0432\u0430\u0440\u043d\u044b\u0445 \u043f\u0430\u0440\u043e\u043b\u0435\u0439. \u041c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u044f \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0441\u0442\u0438 \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043a \u0441\u0435\u0440\u0432\u0438\u0441\u043e\u0432 (\u043f\u043e\u0447\u0442\u0430, \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0438 \u0442.\u043f.), \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u0438 \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043a\u0435 \u043a PCI DSS \u0430\u0443\u0434\u0438\u0442\u0443. \u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0432 Nessus \u043c\u043e\u0436\u043d\u043e \u043f\u0435\u0440\u0435\u0434\u0430\u0442\u044c \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0434\u043b\u044f \u0445\u043e\u0441\u0442\u0430 (SSH \u0438\u043b\u0438 \u0443\u0447\u0435\u0442\u043d\u0430\u044f \u0437\u0430\u043f\u0438\u0441\u044c \u0432 Active Directory), \u0438 \u0441\u043a\u0430\u043d\u0435\u0440 \u043f\u043e\u043b\u0443\u0447\u0438\u0442 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0445\u043e\u0441\u0442\u0443 \u0438 \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u0442 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u0440\u044f\u043c\u043e \u043d\u0430 \u043d\u0435\u043c; \u044d\u0442\u0430 \u043e\u043f\u0446\u0438\u044f \u043d\u0430\u0437\u044b\u0432\u0430\u0435\u0442\u0441\u044f credential scan. \u0423\u0434\u043e\u0431\u0435\u043d \u0434\u043b\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439, \u043f\u0440\u043e\u0432\u043e\u0434\u044f\u0449\u0438\u0445 \u0430\u0443\u0434\u0438\u0442\u044b \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0439.<\/p>\n<h4>Prednosti:<\/h4>\n<p><\/p>\n<ul>\n<li>\u041e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0435 \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u0438 \u0434\u043b\u044f \u043a\u0430\u0436\u0434\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0431\u0430\u0437\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u0435\u0442\u0441\u044f;<\/li>\n<li>\u0412\u044b\u0432\u043e\u0434 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u043e\u0432 \u2014 \u043f\u0440\u043e\u0441\u0442\u043e\u0439 \u0442\u0435\u043a\u0441\u0442, XML, HTML \u0438 LaTeX;<\/li>\n<li>API Nessus \u2014 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u044b \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0438 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u043e\u0432;<\/li>\n<li>Credential Scan, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 Windows \u0438\u043b\u0438 Linux \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u0438\u043b\u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439;<\/li>\n<li>\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043f\u0438\u0441\u0430\u0442\u044c \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0432\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u0435\u043c\u044b\u0435 \u043c\u043e\u0434\u0443\u043b\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u2014 \u0432 \u0441\u043a\u0430\u043d\u0435\u0440\u0435 \u0438\u043c\u0435\u0435\u0442\u0441\u044f \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0439 \u044f\u0437\u044b\u043a \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u0435\u0432 NASL (Nessus Attack Scripting Language);<\/li>\n<li>\u041c\u043e\u0436\u043d\u043e \u0437\u0430\u0434\u0430\u0442\u044c \u0432\u0440\u0435\u043c\u044f \u0434\u043b\u044f \u0440\u0435\u0433\u0443\u043b\u044f\u0440\u043d\u043e\u0433\u043e \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0435\u0442\u0438 \u2014 \u0431\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u044f \u044d\u0442\u043e\u043c\u0443 \u0421\u043b\u0443\u0436\u0431\u0430 \u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0411\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0431\u0443\u0434\u0435\u0442 \u0432 \u043a\u0443\u0440\u0441\u0435 \u0432\u0441\u0435\u0445 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439 \u0432 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043f\u043e\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u043d\u043e\u0432\u044b\u0445 \u0445\u043e\u0441\u0442\u043e\u0432 \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0441\u043b\u043e\u0432\u0430\u0440\u043d\u044b\u0445 \u043f\u0430\u0440\u043e\u043b\u0435\u0439 \u0438\u043b\u0438 \u043f\u0430\u0440\u043e\u043b\u0435\u0439 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e.<\/li>\n<\/ul>\n<p><\/p>\n<h4>Mane:<\/h4>\n<p><\/p>\n<ul>\n<li>Mogo\u010da so motnje v delovanju skeniranih sistemov \u2014 pri izklopljeni mo\u017enosti varnega preverjanja je potrebno delati previdno;<\/li>\n<li>Razli\u010dica, ki dovoljuje komercialno uporabo, ni brezpla\u010dna.<\/li>\n<\/ul>\n<p>\n<img decoding=\"async\" alt=\"Orodja za omre\u017eje, ali kako za\u010deti s pentestiranjem?\" src=\"\/wp-content\/uploads\/2019\/04\/07117e6a14a384a1ce2d285a19ca08fb.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h2><noindex><a rel=\"nofollow\" name=\"Net-Creds\"><\/a><\/noindex>Net-Creds<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/DanMcInerney\/net-creds\">Net-Creds<\/a><\/noindex> \u2014 orodje v programskem jeziku Python za zbiranje gesel in hash-jev ter druge informacije, na primer obiskani URL-ji, preneseni datoteki in druge informacije iz prometa, tako v realnem \u010dasu pri izvajanju MiTM napadov, kot tudi iz vnaprej shranjenih PCAP datotek. Primerno za hitro in plitvo analizo velikih koli\u010din prometa, na primer pri omre\u017enih MiTM napadih, kjer je \u010das omejen, analiza z Wireshark-om pa zahteva veliko \u010dasa.<\/p>\n<h4>Prednosti:<\/h4>\n<p><\/p>\n<ul>\n<li>Identifikacija storitev temelji na analizi paketov namesto na dolo\u010danju storitve po \u0161tevilu uporabljenega porta;<\/li>\n<li>Enostaven za uporabo;<\/li>\n<li>\u0160irok spekter izto\u010dljivih podatkov \u2014 vklju\u010dno z uporabni\u0161kimi imeni in gesli za FTP, POP, IMAP, SMTP, protokole NTLMv1\/v2, ter informacije iz HTTP zahtevkov, na primer prijavne obrazce in osnovno avtentikacijo;<\/li>\n<\/ul>\n<p><img decoding=\"async\" alt=\"Orodja za omre\u017eje, ali kako za\u010deti s pentestiranjem?\" src=\"\/wp-content\/uploads\/2019\/04\/45048ea241e42fe7008bf5a8f81c2efe.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h2><noindex><a rel=\"nofollow\" name=\"network-miner\"><\/a><\/noindex>network-miner<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/www.netresec.com\/?page=networkminer\">network-miner<\/a><\/noindex> \u2014 analog Net-Creds po na\u010delu delovanja, vendar ima ve\u010djo funkcionalnost, na primer mo\u017enost izvleka datotek, prenesenih po protokolih SMB. Tako kot Net-Creds, je priro\u010den, ko je treba hitro analizirati veliko koli\u010dino prometa. Ima tudi priro\u010den grafi\u010dni vmesnik.<\/p>\n<h4>Prednosti:<\/h4>\n<p><\/p>\n<ul>\n<li>Grafi\u010dni vmesnik;<\/li>\n<li>Vizualizacija in klasifikacija podatkov po skupinah \u2014 poenostavi analizo prometa in jo naredi hitro.<\/li>\n<\/ul>\n<p><\/p>\n<h4>Mane:<\/h4>\n<p><\/p>\n<ul>\n<li>Pri predstavitveni razli\u010dici je dolo\u010denih funkcionalnosti omejenih.<\/li>\n<\/ul>\n<p>\n<img decoding=\"async\" alt=\"Orodja za omre\u017eje, ali kako za\u010deti s pentestiranjem?\" src=\"\/wp-content\/uploads\/2019\/04\/4e3a8c72150e3e9a4aceeff0ac7bd5db.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h2><noindex><a rel=\"nofollow\" name=\"mitm6\"><\/a><\/noindex>mitm6<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/fox-it\/mitm6\">mitm6 <\/a><\/noindex> \u2014 orodje za izvajanje napadov na IPv6 (SLAAC napad). IPv6 je prednostna v operacijskem sistemu Windows (na splo\u0161no povedano, tudi v drugih operacijskih sistemih), in v privzetih nastavitvah je vmesnik IPv6 vklopljen, kar omogo\u010da napadalcu, da na \u017ertev nastavi svoj DNS stre\u017enik, s pomo\u010djo paketov Router Advertisement, po \u010demer napadalec dobi mo\u017enost, da preusmeri DNS \u017ertve. Odli\u010dno se prilega izvajanju Relay napadov skupaj z orodjem ntlmrelayx, kar omogo\u010da uspe\u0161ne napade na Windows omre\u017eja. <\/p>\n<h4>Prednosti:<\/h4>\n<p><\/p>\n<ul>\n<li>Deluje odli\u010dno v mnogih omre\u017ejih prav zaradi standardnih nastavitvah Windows gostiteljev in omre\u017eij;<\/li>\n<\/ul>\n<p><\/p>\n<h2><noindex><a rel=\"nofollow\" name=\"Responder\"><\/a><\/noindex>Responder<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/SpiderLabs\/Responder\">Responder<\/a><\/noindex> \u2014 orodje za spoofing \u0161irokopasovnih protokolov za razre\u0161evanje imen (LLMNR, NetBIOS, MDNS). Nepogre\u0161ljivo orodje v omre\u017ejih Active Directory. Poleg spoofinga zna tudi prestrezati NTLM avtentikacijo, skupaj z njim je na voljo nabor orodij za zbiranje informacij in izvajanje NTLM-Relay napadov. <\/p>\n<h4>Prednosti:<\/h4>\n<p><\/p>\n<ul>\n<li> Privzeto postavi ve\u010d stre\u017enikov s podporo za NTLM-avtentikacijo: SMB, MSSQL, HTTP, HTTPS, LDAP, FTP, POP3, IMAP, SMTP;<\/li>\n<li>Omogo\u010da zamenjavo DNS v primeru MITM napadov (ARP prevarant itd.); <\/li>\n<li>Identifikacija gostiteljev, ki so izvedli \u0161irokopasovno poizvedovanje;<\/li>\n<li>Analizni na\u010din \u2014 za pasivno opazovanje poizvedb;<\/li>\n<li>Format zajetih hash-ev pri NTLM-avtentikaciji je zdru\u017eljiv z John the Ripper in Hashcat.<\/li>\n<\/ul>\n<p><\/p>\n<h4>Mane:<\/h4>\n<p><\/p>\n<ul>\n<li>Ob zagonu v sistemu Windows je vezava na 445. vrata (SMB) povezana z nekaterimi te\u017eavami (potrebno je ustaviti ustrezne storitve in ponovno zagnati);<\/li>\n<\/ul>\n<p>\n<img decoding=\"async\" alt=\"Orodja za omre\u017eje, ali kako za\u010deti s pentestiranjem?\" src=\"\/wp-content\/uploads\/2019\/04\/ebe0c72c960bb3f6cfa6e6f34b5d2ec9.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<img decoding=\"async\" alt=\"Orodja za omre\u017eje, ali kako za\u010deti s pentestiranjem?\" src=\"\/wp-content\/uploads\/2019\/04\/477fe7559f446176ae8c6fc3c351b769.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h2><noindex><a rel=\"nofollow\" name=\"Evil_Foca\"><\/a><\/noindex>Evil_Foca<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/ElevenPaths\/EvilFOCA\">Evil Foca<\/a><\/noindex> \u2014 orodje za preverjanje razli\u010dnih omre\u017enih napadov v omre\u017ejih IPv4 in IPv6. Skenira lokalno omre\u017eje, identificira naprave, usmerjevalnike in njihove omre\u017ene vmesnike, nato pa lahko izvajate razli\u010dne napade na udele\u017eence omre\u017eja.<\/p>\n<h4>Prednosti:<\/h4>\n<p><\/p>\n<ul>\n<li>Prikladno za izvajanje MITM napadov (ARP prevarant, DHCP ACK-injekcije, SLAAC napadi, DHCP prevarant);<\/li>\n<li>Mo\u017eno je izvesti DoS napade \u2014 z ARP prevarantom za IPv4 omre\u017eja, s SLAAC DoS v IPv6 omre\u017ejih;<\/li>\n<li>Izvedba DNS hijackinga je mogo\u010da;<\/li>\n<li>Enostaven za uporabo, udoben grafi\u010dni vmesnik.<\/li>\n<\/ul>\n<p><\/p>\n<h4>Mane:<\/h4>\n<p><\/p>\n<ul>\n<li>Deluje samo v sistemu Windows.<\/li>\n<\/ul>\n<p>\n<img decoding=\"async\" alt=\"Orodja za omre\u017eje, ali kako za\u010deti s pentestiranjem?\" src=\"\/wp-content\/uploads\/2019\/04\/f9ae7134162a703ad6fd1bdc05667a95.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h2><noindex><a rel=\"nofollow\" name=\"Bettercap\"><\/a><\/noindex>Bettercap<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/bettercap\/bettercap\">Bettercap<\/a><\/noindex> \u2014 zmogljiv okvir za analizo in napade na omre\u017eja, vklju\u010dno z napadi na brez\u017ei\u010dna omre\u017eja, BLE (bluetooth low energy) in celo napadi MouseJack na brez\u017ei\u010dne HID naprave. Poleg tega vklju\u010duje funkcionalnost za zbiranje informacij iz prometa (podobno net-creds). Na splo\u0161no gre za \u0161vicarski no\u017e (vse v enem). Z nedavnim posodobitvami ima tudi <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/bettercap\/hydra\">grafi\u010dni spletni vmesnik<\/a><\/noindex>.<\/p>\n<h4>Prednosti:<\/h4>\n<p><\/p>\n<ul>\n<li>Sniffer za poverilnice \u2014 lahko zajemate obiskane URL-je in HTTPS gostitelje, HTTP avtentikacijo, poverilnice preko razli\u010dnih protokolov;<\/li>\n<li>Veliko vgrajenih MITM napadov;<\/li>\n<li>Modularni HTTP(S) transparentni proxy \u2014 mo\u017eno je upravljati promet glede na potrebe;<\/li>\n<li>Vgrajen HTTP stre\u017enik;<\/li>\n<li>Podpora za caplete \u2014 datoteke, ki omogo\u010dajo opisovanje zapletenih in avtomatiziranih napadov s skriptnim jezikom.<\/li>\n<\/ul>\n<p><\/p>\n<h4>Mane:<\/h4>\n<p><\/p>\n<ul>\n<li>Nekateri moduli \u2014 na primer, ble.enum \u2014 delno niso podprti na macOS in Windows, nekateri so zasnovani samo za Linux \u2014 packet.proxy.<\/li>\n<\/ul>\n<p>\n<img decoding=\"async\" alt=\"Orodja za omre\u017eje, ali kako za\u010deti s pentestiranjem?\" src=\"\/wp-content\/uploads\/2019\/04\/68f5b6ccd737b3fa0ee5235f31dde4d3.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h2><noindex><a rel=\"nofollow\" name=\"gateway_finder\"><\/a><\/noindex>gateway_finder<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/pentestmonkey\/gateway-finder\">iskalnik prehodov <\/a><\/noindex> \u2014 skript v Pythonu, ki pomaga dolo\u010diti morebitne prehode v omre\u017eju. Prikladno za preverjanje segmentacije ali iskanje gostiteljev, ki lahko usmerjajo v zahtevano podomre\u017eje ali Internet. Primerno za notranje penteste, ko je potrebno hitro preveriti prisotnost nepoobla\u0161\u010denih poti ali poti do drugih notranjih lokalnih omre\u017eij. <\/p>\n<h4>Prednosti:<\/h4>\n<p><\/p>\n<ul>\n<li>Enostaven za uporabo in prilagajanje.<\/li>\n<\/ul>\n<p><img decoding=\"async\" alt=\"Orodja za omre\u017eje, ali kako za\u010deti s pentestiranjem?\" src=\"\/wp-content\/uploads\/2019\/04\/dee33c0d4426c3b98e89dd726c5b647c.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h2><noindex><a rel=\"nofollow\" name=\"mitmproxy\"><\/a><\/noindex>mitmproxy<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/mitmproxy\/mitmproxy\">mitmproxy<\/a><\/noindex> \u2014 orodje odprte kode za analizo prometa za\u0161\u010ditenega s SSL\/TLS. mitmproxy omogo\u010da prestrezanje in spreminjanje za\u0161\u010ditenega prometa, seveda z nekaterimi opozorili; orodje ne izvaja napadov na de\u0161ifriranje SSL\/TLS. Uporablja se, ko je treba prestre\u010di in zabele\u017eiti spremembe v prometu, za\u0161\u010ditenem s SSL\/TLS. Sestavljen je iz Mitmproxy \u2014 za posredovanje prometa, mitmdump \u2014 podoben tcpdumpu, vendar za HTTP(S) promet, in mitmweb \u2014 spletnega vmesnika za Mitmproxy.<\/p>\n<h4>Prednosti:<\/h4>\n<p><\/p>\n<ul>\n<li>Dela z razli\u010dnimi protokoli in podpira spreminjanje razli\u010dnih formatov, od HTML do Protobuf;<\/li>\n<li>API za Python \u2014 omogo\u010da pisanje skript za nestandardne naloge;<\/li>\n<li>Lahko deluje v na\u010dinu prozornega proxyja s prestrezanjem prometa.<\/li>\n<\/ul>\n<p><\/p>\n<h4>Mane:<\/h4>\n<p><\/p>\n<ul>\n<li>Format izpisa ni zdru\u017eljiv z ni\u010demer \u2014 te\u017eko ga je uporabiti z grepom, potrebno je pisati skripte;<\/li>\n<\/ul>\n<p>\n<img decoding=\"async\" alt=\"Orodja za omre\u017eje, ali kako za\u010deti s pentestiranjem?\" src=\"\/wp-content\/uploads\/2019\/04\/2049cb5c62067cd65b07abdb1a2d40a5.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<img decoding=\"async\" alt=\"Orodja za omre\u017eje, ali kako za\u010deti s pentestiranjem?\" src=\"\/wp-content\/uploads\/2019\/04\/a37457f2faafae55f333b4d6839d5254.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h2><noindex><a rel=\"nofollow\" name=\"SIET\"><\/a><\/noindex>SIET<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/Sab0tag3d\/SIET\">SIET<\/a><\/noindex> \u2014 orodje za izkori\u0161\u010danje mo\u017enosti protokola Cisco Smart Install. Mo\u017ena je pridobitev in sprememba konfiguracije ter prevzem nadzora nad napravo Cisco. \u010ce ste uspeli pridobiti konfiguracijo naprave Cisco, jo lahko preverite s pomo\u010djo <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/cisco-config-analysis-tool\/ccat\">CCAT<\/a><\/noindex>, to orodje je koristno za analizo varnosti konfiguracije naprav Cisco.<\/p>\n<h4>Prednosti:<\/h4>\n<p>\nUporaba protokola Cisco Smart Install omogo\u010da:<\/p>\n<ul>\n<li>Spremeniti naslov tftp stre\u017enika na odjemalski napravi, tako da po\u0161ljete en potvorjen paket TCP;<\/li>\n<li>Kopirati konfiguracijsko datoteko naprave;<\/li>\n<li>Zamenjati konfiguracijo naprave, na primer, dodati novega uporabnika;<\/li>\n<li>Posodobiti iOS sliko na napravi;<\/li>\n<li>Izvesti poljuben niz ukazov na napravi. To je nova funkcija, ki deluje le v razli\u010dicah 3.6.0E in 15.2 (2) E iOS;<\/li>\n<\/ul>\n<p><\/p>\n<h4>Mane:<\/h4>\n<p><\/p>\n<ul>\n<li>Deluje z omejenim \u0161tevilom naprav Cisco, prav tako je potrebna \"bela\" IP naslov za prejemanje odgovora od naprave, ali pa mora biti naprava v isti omre\u017eni skupini;<\/li>\n<\/ul>\n<p>\n<img decoding=\"async\" alt=\"Orodja za omre\u017eje, ali kako za\u010deti s pentestiranjem?\" src=\"\/wp-content\/uploads\/2019\/04\/643e5511c44940d1f9c313347c74029a.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h2><noindex><a rel=\"nofollow\" name=\"yersinia\"><\/a><\/noindex>yersinia<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/tomac\/yersinia\">yersinia<\/a><\/noindex> \u2014 okvir za L2 napade, ustvarjen za izkori\u0161\u010danje varnostnih pomanjkljivosti v razli\u010dnih L2 omre\u017enih protokolih.<\/p>\n<h4>Prednosti:<\/h4>\n<p><\/p>\n<ul>\n<li>Omogo\u010da izvajanje napadov na protokole STP, CDP, DTP, DHCP, HSRP, VTP in druge.<\/li>\n<\/ul>\n<p><\/p>\n<h4>Mane:<\/h4>\n<p><\/p>\n<ul>\n<li>Nima najbolj uporabniku prijaznega vmesnika.<\/li>\n<\/ul>\n<p>\n<img decoding=\"async\" alt=\"Orodja za omre\u017eje, ali kako za\u010deti s pentestiranjem?\" src=\"\/wp-content\/uploads\/2019\/04\/d0cb4b5fac1fc0e5c302ad133d5b4504.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h2><noindex><a rel=\"nofollow\" name=\"proxychains\"><\/a><\/noindex>proxychains<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/haad\/proxychains\">proxychains<\/a><\/noindex> \u2014 orodje, ki omogo\u010da preusmerjanje prometa aplikacij skozi dolo\u010den SOCKS proxy.<\/p>\n<h4>Prednosti:<\/h4>\n<p><\/p>\n<ul>\n<li>Pomaga preusmeriti promet nekaterih aplikacij, ki privzeto ne podpirajo delovanja s proxyjem;<\/li>\n<\/ul>\n<p>\n<img decoding=\"async\" alt=\"Orodja za omre\u017eje, ali kako za\u010deti s pentestiranjem?\" src=\"\/wp-content\/uploads\/2019\/04\/d09dcdaf7429ea29ff70fb682e7cd590.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nV tem \u010dlanku smo na kratko pregledali prednosti in slabosti glavnih orodij za pentest notranje mre\u017ee. Spremljajte na\u0161e novice, na\u010drtujemo, da bomo tudi v prihodnje objavljali take zbire: Web, baze podatkov, mobilne aplikacije \u2014 o tem bomo prav tako nujno pisali.<\/p>\n<p>Delite svoje najljub\u0161e pripomo\u010dke v komentarjih!<br \/>\n<br \/>Izvor: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/dsec\/blog\/447882\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>Toolkit \u043d\u0430\u0447\u0438\u043d\u0430\u044e\u0449\u0435\u0433\u043e \u043f\u0435\u043d\u0442\u0435\u0441\u0442\u0435\u0440\u0430: \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u043c \u043a\u0440\u0430\u0442\u043a\u0438\u0439 \u0434\u0430\u0439\u0434\u0436\u0435\u0441\u0442 \u0433\u043b\u0430\u0432\u043d\u044b\u0445 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u0440\u0438\u0433\u043e\u0434\u044f\u0442\u0441\u044f \u043f\u0440\u0438 \u043f\u0435\u043d\u0442\u0435\u0441\u0442\u0435 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0439 \u0441\u0435\u0442\u0438. \u042d\u0442\u0438 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u044b \u0443\u0436\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0448\u0438\u0440\u043e\u043a\u0438\u043c \u043a\u0440\u0443\u0433\u043e\u043c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u043e\u0432, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u0437\u043d\u0430\u0442\u044c \u043e\u0431 \u0438\u0445 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044f\u0445 \u0438 \u0432\u043b\u0430\u0434\u0435\u0442\u044c \u0432 \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0441\u0442\u0432\u0435 \u0431\u0443\u0434\u0435\u0442 \u043f\u043e\u043b\u0435\u0437\u043d\u043e \u043a\u0430\u0436\u0434\u043e\u043c\u0443. \u0421\u043e\u0434\u0435\u0440\u0436\u0430\u043d\u0438\u0435: Nmap Zmap Masscan Nessus Net-Creds network-miner mitm6 Responder Evil_Foca Bettercap gateway_finder mitmproxy SIET yersinia proxychains Nmap Nmap \u2013 opensource \u0443\u0442\u0438\u043b\u0438\u0442\u0430 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":23689,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-31811","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.4 - aioseo.com -->\n\t<meta name=\"description\" content=\"Toolkit \u043d\u0430\u0447\u0438\u043d\u0430\u044e\u0449\u0435\u0433\u043e \u043f\u0435\u043d\u0442\u0435\u0441\u0442\u0435\u0440\u0430: \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u043c \u043a\u0440\u0430\u0442\u043a\u0438\u0439 \u0434\u0430\u0439\u0434\u0436\u0435\u0441\u0442 \u0433\u043b\u0430\u0432\u043d\u044b\u0445 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u0440\u0438\u0433\u043e\u0434\u044f\u0442\u0441\u044f \u043f\u0440\u0438 \u043f\u0435\u043d\u0442\u0435\u0441\u0442\u0435 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0439 \u0441\u0435\u0442\u0438.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sl\/blog\/administrirovanie\/network-tools-ili-s-chego-nachat-pentesteru\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.4\" \/>\n\t\t<meta property=\"og:locale\" content=\"sl_SI\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47Network tools, \u0438\u043b\u0438 \u0441 \u0447\u0435\u0433\u043e \u043d\u0430\u0447\u0430\u0442\u044c \u043f\u0435\u043d\u0442\u0435\u0441\u0442\u0435\u0440\u0443? | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"Toolkit \u043d\u0430\u0447\u0438\u043d\u0430\u044e\u0449\u0435\u0433\u043e \u043f\u0435\u043d\u0442\u0435\u0441\u0442\u0435\u0440\u0430: \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u043c \u043a\u0440\u0430\u0442\u043a\u0438\u0439 \u0434\u0430\u0439\u0434\u0436\u0435\u0441\u0442 \u0433\u043b\u0430\u0432\u043d\u044b\u0445 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u0440\u0438\u0433\u043e\u0434\u044f\u0442\u0441\u044f \u043f\u0440\u0438 \u043f\u0435\u043d\u0442\u0435\u0441\u0442\u0435 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0439 \u0441\u0435\u0442\u0438.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sl\/blog\/administrirovanie\/network-tools-ili-s-chego-nachat-pentesteru\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T18:43:17+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2019-10-31T18:43:17+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Network tools, ali kako za\u010deti pentester? | ProHoster","description":"Orodjarna za\u010detnika pentesterja: predstavljamo kratek povzetek glavnih orodij, ki bodo koristna pri pentestu notranje mre\u017ee.","canonical_url":"https:\/\/prohoster.info\/sl\/blog\/administrirovanie\/network-tools-ili-s-chego-nachat-pentesteru","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sl_SI","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Network tools, \u0438\u043b\u0438 \u0441 \u0447\u0435\u0433\u043e \u043d\u0430\u0447\u0430\u0442\u044c \u043f\u0435\u043d\u0442\u0435\u0441\u0442\u0435\u0440\u0443? | ProHoster","og:description":"Toolkit \u043d\u0430\u0447\u0438\u043d\u0430\u044e\u0449\u0435\u0433\u043e \u043f\u0435\u043d\u0442\u0435\u0441\u0442\u0435\u0440\u0430: \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u043c \u043a\u0440\u0430\u0442\u043a\u0438\u0439 \u0434\u0430\u0439\u0434\u0436\u0435\u0441\u0442 \u0433\u043b\u0430\u0432\u043d\u044b\u0445 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u0440\u0438\u0433\u043e\u0434\u044f\u0442\u0441\u044f \u043f\u0440\u0438 \u043f\u0435\u043d\u0442\u0435\u0441\u0442\u0435 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0439 \u0441\u0435\u0442\u0438.","og:url":"https:\/\/prohoster.info\/sl\/blog\/administrirovanie\/network-tools-ili-s-chego-nachat-pentesteru","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:43:17+00:00","article:modified_time":"2019-10-31T18:43:17+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"31811","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 07:57:22","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 03:10:46","updated":"2026-01-21 07:57:22","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/posts\/31811","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/comments?post=31811"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/posts\/31811\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/media\/23689"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/media?parent=31811"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/categories?post=31811"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/tags?post=31811"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}