{"id":31811,"date":"2019-10-31T21:43:17","date_gmt":"2019-10-31T18:43:17","guid":{"rendered":"https:\/\/prohoster.info\/blog\/network-tools-ili-s-chego-nachat-pentesteru\/"},"modified":"2019-10-31T21:43:17","modified_gmt":"2019-10-31T18:43:17","slug":"network-tools-ili-s-chego-nachat-pentesteru","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/network-tools-ili-s-chego-nachat-pentesteru","title":{"rendered":"Network tools, ose nga ku t\u00eb filloj\u00eb nj\u00eb p\u00ebntester?","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Toolkit-i testerit fillestar: paraqitni nj\u00eb p\u00ebrmbledhje t\u00eb shkurt\u00ebr t\u00eb mjeteve kryesore q\u00eb do t\u00eb jen\u00eb t\u00eb dobishme gjat\u00eb testimit t\u00eb penetrimit n\u00eb rrjetin e brendsh\u00ebm. K\u00ebto mjete tashm\u00eb p\u00ebrdoren aktivisht nga nj\u00eb gam\u00eb t\u00eb gjer\u00eb specialist\u00ebsh, prandaj \u00ebsht\u00eb e dobishme q\u00eb t\u00eb njihni mund\u00ebsit\u00eb e tyre dhe t\u00eb zot\u00ebroni ato n\u00eb m\u00ebnyr\u00eb t\u00eb p\u00ebrsosur. <\/p>\n<p><img decoding=\"async\" alt=\"Network tools, ose nga ku t\u00eb filloj\u00eb nj\u00eb p\u00ebntester?\" src=\"\/wp-content\/uploads\/2019\/04\/a6846992cd5eb7769c87bbfb5aaaabbc.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<h2>P\u00ebrmbajtja:<\/h2>\n<p><\/p>\n<ul>\n<li> <noindex><a rel=\"nofollow\" href=\"#Nmap\">Nmap<\/a><\/noindex><\/li>\n<li> <noindex><a rel=\"nofollow\" href=\"#Zmap\">Zmap<\/a><\/noindex><\/li>\n<li> <noindex><a rel=\"nofollow\" href=\"#Masscan\">Masscan<\/a><\/noindex><\/li>\n<li> <noindex><a rel=\"nofollow\" href=\"#Nessus\">Nessus<\/a><\/noindex><\/li>\n<li> <noindex><a rel=\"nofollow\" href=\"#Net-Creds\">Net-Creds<\/a><\/noindex><\/li>\n<li> <noindex><a rel=\"nofollow\" href=\"#network-miner\">network-miner<\/a><\/noindex><\/li>\n<li> <noindex><a rel=\"nofollow\" href=\"#mitm6\">mitm6<\/a><\/noindex><\/li>\n<li> <noindex><a rel=\"nofollow\" href=\"#Responder\">Responder<\/a><\/noindex><\/li>\n<li> <noindex><a rel=\"nofollow\" href=\"#Evil_Foca\">Evil_Foca<\/a><\/noindex><\/li>\n<li> <noindex><a rel=\"nofollow\" href=\"#Bettercap\">Bettercap<\/a><\/noindex><\/li>\n<li> <noindex><a rel=\"nofollow\" href=\"#gateway_finder\">gateway_finder<\/a><\/noindex><\/li>\n<li> <noindex><a rel=\"nofollow\" href=\"#mitmproxy\">mitmproxy<\/a><\/noindex><\/li>\n<li> <noindex><a rel=\"nofollow\" href=\"#SIET\">SIET<\/a><\/noindex><\/li>\n<li> <noindex><a rel=\"nofollow\" href=\"#yersinia\">yersinia<\/a><\/noindex><\/li>\n<li> <noindex><a rel=\"nofollow\" href=\"#proxychains\">proxychains<\/a><\/noindex><\/li>\n<\/ul>\n<p><\/p>\n<h2><noindex><a rel=\"nofollow\" name=\"Nmap\"><\/a><\/noindex>Nmap<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/nmap.org\/\">Nmap<\/a><\/noindex> Nmap \u00ebsht\u00eb nj\u00eb utilitar me burim t\u00eb hapur p\u00ebr skanimin e rrjeteve dhe \u00ebsht\u00eb nj\u00eb nga mjetet m\u00eb t\u00eb njohura n\u00eb komunitetin e siguris\u00eb dhe administrat\u00ebs s\u00eb sistemeve. Ai p\u00ebrdoret kryesisht p\u00ebr skanimin e porteve, por ka gjithashtu nj\u00eb s\u00ebr\u00eb funksionesh t\u00eb dobishme, duke e b\u00ebr\u00eb Nmap nj\u00eb <b>super-komandant<\/b> p\u00ebr hulumtimin e rrjeteve.<\/p>\n<p>P\u00ebrve\u00e7 kontrollimit t\u00eb porteve t\u00eb hapura\/ t\u00eb mbyllura, Nmap mund t\u00eb identifikoj\u00eb sh\u00ebrbimin q\u00eb po d\u00ebgjon n\u00eb portin e hapur dhe versionin e tij, dhe ndonj\u00ebher\u00eb ndihmon n\u00eb p\u00ebrcaktimin e sistemit operativ. Nmap ka mb\u00ebshtetje p\u00ebr skriptet e skanimit (NSE \u2014 Nmap Scripting Engine). Me p\u00ebrdorimin e skripteve, \u00ebsht\u00eb e mundur t\u00eb kontrolloni vulnerabilitetet p\u00ebr sh\u00ebrbime t\u00eb ndryshme (n\u00ebse, sigurisht, ekziston nj\u00eb skript p\u00ebr to, ose gjithmon\u00eb mund t\u00eb shkruani t\u00eb tuajin) ose t\u00eb provoni t\u00eb zgjidhni fjal\u00ebkalimet p\u00ebr sh\u00ebrbime t\u00eb ndryshme. <\/p>\n<p>K\u00ebshtu, Nmap lejon q\u00eb t\u00eb p\u00ebrgatitet nj\u00eb hart\u00eb e detajuar e rrjetit, p\u00ebr t\u00eb marr\u00eb sa m\u00eb shum\u00eb informacion rreth sh\u00ebrbimeve t\u00eb aktivizuara n\u00eb hostet n\u00eb rrjet, si dhe p\u00ebr t\u00eb kontrolluar parandaluesh\u00ebm disa vulnerabilitete. Nmap gjithashtu ka konfigurime t\u00eb fleksibla skanimi, \u00ebsht\u00eb e mundur t\u00eb konfigurohet shpejt\u00ebsia e skanimit, numri i fazave, numri i grupeve p\u00ebr skanimin, etj.<br \/>\nE p\u00ebrshtatshme p\u00ebr skanimin e rrjeteve t\u00eb vogla dhe e paz\u00ebvend\u00ebsueshme p\u00ebr skanimin e pjessh\u00ebm t\u00eb hosteve t\u00eb ve\u00e7ant\u00eb.<\/p>\n<h4>Avantazhet:<\/h4>\n<ul>\n<li>Punon shpejt me nj\u00eb gam\u00eb t\u00eb vog\u00ebl hostesh;<\/li>\n<li>Fleksibiliteti i konfigurimeve \u2014 mund t\u00eb kombinoni opsionet n\u00eb nj\u00eb m\u00ebnyr\u00eb q\u00eb t\u00eb merrni informacione sa m\u00eb informative n\u00eb nj\u00eb koh\u00eb t\u00eb pranueshme; <\/li>\n<li>Skanimi paralel \u2014 lista e hosteve t\u00eb synuar ndahet n\u00eb grupe, dhe pastaj \u00e7do grup skanohet me rend, brenda grupit p\u00ebrdoret skanimi paralel. Megjithat\u00eb, ndarja n\u00eb grupe \u00ebsht\u00eb nj\u00eb disavantazh i vog\u00ebl (shih m\u00eb posht\u00eb);<\/li>\n<li>Setet e paracaktuara t\u00eb skripteve p\u00ebr detyra t\u00eb ndryshme \u2014 mund t\u00eb mos e humbni shum\u00eb koh\u00eb n\u00eb gjetjen e skripteve specifike, por t\u00eb tregoni grupe skriptesh;<\/li>\n<li>Shfaqja e rezultateve \u2014 5 formate t\u00eb ndryshme, p\u00ebrfshir\u00eb XML, i cili mund t\u00eb importohet n\u00eb mjete t\u00eb tjera;<\/li>\n<\/ul>\n<p><\/p>\n<h4>Disavantazhet:<\/h4>\n<p><\/p>\n<ul>\n<li>Skandimi i grupit t\u00eb hosteve - informacioni mbi ndonj\u00eb host nuk \u00ebsht\u00eb i disponuesh\u00ebm derisa t\u00eb p\u00ebrfundoj\u00eb skandimi i t\u00eb gjith\u00eb grupit. Kjo zgjidhet duke vendosur n\u00eb opsione madh\u00ebsin\u00eb maksimale t\u00eb grupit dhe intervalin maksimaal t\u00eb koh\u00ebs gjat\u00eb t\u00eb cilit do t\u00eb pritet p\u00ebrgjigja p\u00ebr k\u00ebrkes\u00ebn, para se t\u00eb nd\u00ebrpriten p\u00ebrpjekjet ose t\u00eb kryhet nj\u00eb tjet\u00ebr;<\/li>\n<li>Gjat\u00eb skanimit, Nmap d\u00ebrgon paketat SYN n\u00eb portin e synuar dhe pret ndonj\u00eb paket\u00eb p\u00ebrgjigjeje ose kalimin e koh\u00ebs, n\u00eb rast se nuk ka p\u00ebrgjigje. Kjo ndikon negativisht n\u00eb performanc\u00ebn e skanerit n\u00eb t\u00ebr\u00ebsi, krahasuar me skanerat asinkron\u00eb (p.sh., zmap ose masscan);<\/li>\n<li>Kur skanoni rrjete t\u00eb m\u00ebdha duke p\u00ebrdorur flamuj p\u00ebr t\u00eb p\u00ebrshpejtuar skanimin (\u2013min-rate, \u2013min-parallelism), mund t\u00eb jepni rezultate false-negative, duke kaluar portat e hapura n\u00eb host. Gjithashtu, p\u00ebrdorimi i k\u00ebtyre opcioneve duhet t\u00eb b\u00ebhet me kujdes, duke pasur parasysh q\u00eb nj\u00eb norm\u00eb e madhe pakete mund t\u00eb \u00e7oj\u00eb n\u00eb nj\u00eb DoS t\u00eb paqen\u00eb. <\/li>\n<\/ul>\n<p>\n<img decoding=\"async\" alt=\"Network tools, ose nga ku t\u00eb filloj\u00eb nj\u00eb p\u00ebntester?\" src=\"\/wp-content\/uploads\/2019\/04\/189c9a5145449871571ad11d8b0be9c2.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h2><noindex><a rel=\"nofollow\" name=\"Zmap\"><\/a><\/noindex>Zmap<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/zmap\/zmap\">Zmap<\/a><\/noindex> (mos ngat\u00ebrroni me ZenMap) - gjithashtu \u00ebsht\u00eb nj\u00eb skaner me burim t\u00eb hapur, krijuar si nj\u00eb alternativ\u00eb m\u00eb t\u00eb shpejt\u00eb p\u00ebr Nmap.<\/p>\n<p>N\u00eb ndryshim nga nmap - Zmap gjat\u00eb d\u00ebrgimit t\u00eb paketave SYN nuk pret q\u00eb p\u00ebrgjigjja t\u00eb kthehet, por vazhdon skanimin, duke pritur p\u00ebrgjigjet nga t\u00eb gjith\u00eb hostet, k\u00ebshtu q\u00eb n\u00eb thelb nuk mb\u00ebshtet gjendjen e lidhjes. Kur p\u00ebrgjigjia p\u00ebr paket\u00ebn SYN arrin, Zmap me p\u00ebrmbajtjen e paket\u00ebs kupton cilin port dhe n\u00eb cilin host \u00ebsht\u00eb hapur. P\u00ebr m\u00eb tep\u00ebr, Zmap d\u00ebrgon vet\u00ebm nj\u00eb paket\u00eb SYN n\u00eb portin e skanuar. Gjithashtu ka mund\u00ebsin\u00eb e p\u00ebrdorimit t\u00eb PF_RING p\u00ebr skanimin e shpejt\u00eb t\u00eb rrjeteve t\u00eb m\u00ebdha, n\u00ebse ndonj\u00ebher\u00eb keni n\u00eb duar nj\u00eb nd\u00ebrfaqe 10-gigabit\u00ebsh dhe nj\u00eb kart\u00eb rrjeti t\u00eb p\u00ebrshtatshme.<\/p>\n<h4>Avantazhet:<\/h4>\n<p><\/p>\n<ul>\n<li>Shpejt\u00ebsia e skanimit;<\/li>\n<li>Zmap gjeneron frame Ethernet duke anashkaluar stek\u00ebn sistemike TCP\/IP;<\/li>\n<li>Mund\u00ebsia e p\u00ebrdorimit t\u00eb PF_RING;<\/li>\n<li>ZMap randomizon objektivat p\u00ebr shp\u00ebrndarjen e barabart\u00eb t\u00eb ngarkes\u00ebs n\u00eb an\u00ebn e skanuar;<\/li>\n<li>Mund\u00ebsia e integrimit me ZGrab (instrument p\u00ebr mbledhjen e informacionit mbi sh\u00ebrbimet n\u00eb nivelin aplikativ L7).<\/li>\n<\/ul>\n<p><\/p>\n<h4>Disavantazhet:<\/h4>\n<p><\/p>\n<ul>\n<li>Mund t\u00eb shkaktoj\u00eb nj\u00eb pezullim t\u00eb sh\u00ebrbimit t\u00eb pajisjeve rrjet\u00ebsore, p\u00ebr shembull, t\u00eb nxjerr\u00eb jasht\u00eb funksionit ruterat e nd\u00ebrmjet\u00ebm, megjith\u00ebse ngarkesa \u00ebsht\u00eb e shp\u00ebrndar\u00eb, pasi t\u00eb gjitha paketat do t\u00eb kalojn\u00eb p\u00ebrmes nj\u00eb ruteriku.<\/li>\n<\/ul>\n<p>\n<img decoding=\"async\" alt=\"Network tools, ose nga ku t\u00eb filloj\u00eb nj\u00eb p\u00ebntester?\" src=\"\/wp-content\/uploads\/2019\/04\/474b04785f27540510421d4fb715d4b4.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h2><noindex><a rel=\"nofollow\" name=\"Masscan\"><\/a><\/noindex>Masscan<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/robertdavidgraham\/masscan\">Masscan<\/a><\/noindex> \u2014 e \u00e7uditshme, por gjithashtu \u00ebsht\u00eb nj\u00eb skaner me burim t\u00eb hapur, i krijuar me nj\u00eb q\u00ebllim \u2014 p\u00ebr t\u00eb skanuar Internetin edhe m\u00eb shpejt (m\u00eb pak se 6 minuta me shpejt\u00ebsi ~10 milion paketash\/s). N\u00eb thelb punon pothuajse si Zmap, vet\u00ebm edhe m\u00eb shpejt.<\/p>\n<h4>Avantazhet:<\/h4>\n<p><\/p>\n<ul>\n<li>Sintaksia \u00ebsht\u00eb e ngjashme me Nmap, dhe gjithashtu programi mb\u00ebshtet disa mund\u00ebsi t\u00eb p\u00ebrputhshme me Nmap.<\/li>\n<li>Shpejt\u00ebsia e pun\u00ebs \u2014 nj\u00eb nga skaneret m\u00eb t\u00eb shpejt\u00eb asinkron\u00eb.<\/li>\n<li>Mekanizmi fleksib\u00ebl i skanimit \u2014 rikthimi i skanimit t\u00eb nd\u00ebrprer\u00eb, shp\u00ebrndarja e ngarkes\u00ebs n\u00eb disa pajisje (ashtu si te Zmap).<\/li>\n<\/ul>\n<p><\/p>\n<h4>Disavantazhet:<\/h4>\n<p><\/p>\n<ul>\n<li>Nj\u00eblloj si me Zmap, ngarkesa n\u00eb vet\u00eb rrjetin \u00ebsht\u00eb jasht\u00ebzakonisht e lart\u00eb, gj\u00eb q\u00eb mund t\u00eb \u00e7oj\u00eb n\u00eb DoS.<\/li>\n<li>N\u00eb m\u00ebnyr\u00eb t\u00eb paracaktuar, nuk ka mund\u00ebsi p\u00ebr t\u00eb skanuar n\u00eb nivelin e aplikacionit L7.<\/li>\n<\/ul>\n<p>\n<img decoding=\"async\" alt=\"Network tools, ose nga ku t\u00eb filloj\u00eb nj\u00eb p\u00ebntester?\" src=\"\/wp-content\/uploads\/2019\/04\/cc919cc2dfd848594f4d8d6a35f9c1cf.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h2><noindex><a rel=\"nofollow\" name=\"Nessus\"><\/a><\/noindex>Nessus<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/www.tenable.com\/products\/nessus\/nessus-professional\">Nessus<\/a><\/noindex> \u2014 nj\u00eb skaner p\u00ebr automatikisht verifikimin dhe zbulimin e vulnerabiliteteve t\u00eb njohura n\u00eb sistem. Kodi burimor \u00ebsht\u00eb i mbyllur, ekziston nj\u00eb version falas Nessus Home, i cili lejon skanimin deri n\u00eb 16 adresa IP me t\u00eb nj\u00ebjt\u00ebn shpejt\u00ebsi dhe analiz\u00eb t\u00eb detajuar si n\u00eb versionin e paguar.<\/p>\n<p>Ajo \u00ebsht\u00eb n\u00eb gjendje t\u00eb identifikoj\u00eb versione t\u00eb cenueshme t\u00eb sh\u00ebrbimeve ose server\u00ebve, t\u00eb zbuloj\u00eb gabime n\u00eb konfigurimin e sistemit, dhe t\u00eb kryej\u00eb bruteforce p\u00ebr fjal\u00ebkalimet e fjal\u00ebve. Mund t\u00eb p\u00ebrdoret p\u00ebr t\u00eb p\u00ebrcaktuar sakt\u00ebsin\u00eb e cil\u00ebsimeve t\u00eb sh\u00ebrbimeve (posta, azhurnimet, etj.), si dhe gjat\u00eb p\u00ebrgatitjes p\u00ebr auditimin PCI DSS. P\u00ebr m\u00eb tep\u00ebr, n\u00eb Nessus mund t\u00eb jepen akreditime p\u00ebr host (SSH ose llogari domene n\u00eb Active Directory) dhe skaneri do t\u00eb ket\u00eb qasje n\u00eb hostin dhe do t\u00eb kryej\u00eb kontrollime direkt n\u00eb t\u00eb, kjo opsion quhet skanimi i akreditimeve. E mira p\u00ebr kompanit\u00eb q\u00eb kryejn\u00eb auditime t\u00eb rrjeteve t\u00eb tyre.<\/p>\n<h4>Avantazhet:<\/h4>\n<p><\/p>\n<ul>\n<li>Skenar\u00eb t\u00eb ve\u00e7ant\u00eb p\u00ebr \u00e7do vulnerabilitet, baza e t\u00eb cilave p\u00ebrdit\u00ebsohet vazhdimisht.<\/li>\n<li>Shfaqja e rezultateve \u2014 tekst i thjesht\u00eb, XML, HTML dhe LaTeX.<\/li>\n<li>API Nessus \u2014 lejon automatizimin e proceseve t\u00eb skanimit dhe marrjen e rezultateve.<\/li>\n<li>Skanimi i Akreditimeve, mund t\u00eb p\u00ebrdoren akreditime Windows ose Linux p\u00ebr t\u00eb kontrolluar azhurnimet ose vulnerabilitetet e tjera.<\/li>\n<li>Mund\u00ebsia p\u00ebr t\u00eb shkruar module t\u00eb siguris\u00eb t\u00eb integruara \u2014 skaneri ka nj\u00eb gjuh\u00eb skenari t\u00eb vetin NASL (Nessus Attack Scripting Language).<\/li>\n<li>Mund t\u00eb caktoni koh\u00ebn p\u00ebr skanim t\u00eb rregullt t\u00eb rrjetit lokal \u2014 k\u00ebshtu Sh\u00ebrbimi i Siguris\u00eb s\u00eb Informacionit do t\u00eb jet\u00eb n\u00eb dijeni t\u00eb t\u00eb gjitha ndryshimeve n\u00eb konfigurimin e siguris\u00eb, shfaqjes s\u00eb hosteve t\u00eb rinj dhe p\u00ebrdorimit t\u00eb fjal\u00ebkalimeve t\u00eb zakonshme ose fjal\u00ebkalimeve t\u00eb paracaktuara.<\/li>\n<\/ul>\n<p><\/p>\n<h4>Disavantazhet:<\/h4>\n<p><\/p>\n<ul>\n<li>Mund t\u00eb ket\u00eb nd\u00ebrprerje n\u00eb pun\u00ebn e sistemeve t\u00eb skanuara - me opsionin e sigurt\u00eb t\u00eb \u00e7aktivizuar duhet t\u00eb punoni me kujdes;<\/li>\n<li>Versioni q\u00eb lejon p\u00ebrdorim komercial nuk \u00ebsht\u00eb falas.<\/li>\n<\/ul>\n<p>\n<img decoding=\"async\" alt=\"Network tools, ose nga ku t\u00eb filloj\u00eb nj\u00eb p\u00ebntester?\" src=\"\/wp-content\/uploads\/2019\/04\/07117e6a14a384a1ce2d285a19ca08fb.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h2><noindex><a rel=\"nofollow\" name=\"Net-Creds\"><\/a><\/noindex>Net-Creds<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/DanMcInerney\/net-creds\">Net-Creds<\/a><\/noindex> \u2014 nj\u00eb mjet n\u00eb gjuh\u00ebn Python p\u00ebr grumbullimin e fjal\u00ebkalimeve dhe hash-eve, si dhe informacion tjet\u00ebr, p\u00ebr shembull, URL-t\u00eb e vizituara, skedar\u00ebt e ngitur dhe informacion tjet\u00ebr nga trafiku, si n\u00eb koh\u00eb reale gjat\u00eb kryerjes s\u00eb nj\u00eb sulmi MiTM, ashtu edhe nga skedar\u00ebt PCAP t\u00eb ruajtur paraprakisht. P\u00ebrshtatet p\u00ebr analiz\u00ebn e shpejt\u00eb dhe sip\u00ebrfaq\u00ebsore t\u00eb sasis\u00eb s\u00eb madhe t\u00eb trafikut, p\u00ebr shembull, gjat\u00eb sulmeve t\u00eb MiTM n\u00eb rrjet, kur koha \u00ebsht\u00eb e kufizuar dhe analiza manuale me Wireshark k\u00ebrkon shum\u00eb koh\u00eb.<\/p>\n<h4>Avantazhet:<\/h4>\n<p><\/p>\n<ul>\n<li>Identifikimi i sh\u00ebrbimeve \u00ebsht\u00eb i bazuar n\u00eb analiz\u00ebn e pakove n\u00eb vend t\u00eb p\u00ebrcaktimit t\u00eb sh\u00ebrbimit sipas numrit t\u00eb portit t\u00eb p\u00ebrdorur;<\/li>\n<li>I leht\u00eb p\u00ebr t'u p\u00ebrdorur;<\/li>\n<li>Nj\u00eb gam\u00eb t\u00eb gjer\u00eb t\u00eb t\u00eb dh\u00ebnave t\u00eb nxjerra - p\u00ebrfshir\u00eb identifikuesit dhe fjal\u00ebkalimet p\u00ebr FTP, POP, IMAP, SMTP, protokollet NTLMv1\/v2, si dhe informacion nga k\u00ebrkesat HTTP, p\u00ebr shembull, formularet e login dhe basic auth;<\/li>\n<\/ul>\n<p><img decoding=\"async\" alt=\"Network tools, ose nga ku t\u00eb filloj\u00eb nj\u00eb p\u00ebntester?\" src=\"\/wp-content\/uploads\/2019\/04\/45048ea241e42fe7008bf5a8f81c2efe.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h2><noindex><a rel=\"nofollow\" name=\"network-miner\"><\/a><\/noindex>network-miner<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/www.netresec.com\/?page=networkminer\">network-miner<\/a><\/noindex> \u2014 analog i Net-Creds sipas parimit t\u00eb funksionimit, megjithat\u00eb ka nj\u00eb funksionalitet m\u00eb t\u00eb madh, p\u00ebr shembull, ka mund\u00ebsin\u00eb e nxjerrjes s\u00eb skedar\u00ebve t\u00eb transferuar p\u00ebrmes protokolleve SMB. Ashtu si Net-Creds, \u00ebsht\u00eb i p\u00ebrshtatsh\u00ebm kur nevojitet t\u00eb analizohet shpejt nj\u00eb sasi e madhe trafiku. Po ashtu ka nj\u00eb nd\u00ebrfaqe grafike t\u00eb p\u00ebrshtatshme.<\/p>\n<h4>Avantazhet:<\/h4>\n<p><\/p>\n<ul>\n<li>Nd\u00ebrfaqja grafike;<\/li>\n<li>Vizualizimi dhe klasifikimi i t\u00eb dh\u00ebnave n\u00eb grupe - thjeshton analiz\u00ebn e trafikut dhe e b\u00ebn at\u00eb t\u00eb shpejt\u00eb.<\/li>\n<\/ul>\n<p><\/p>\n<h4>Disavantazhet:<\/h4>\n<p><\/p>\n<ul>\n<li>Versioni i demo ka disa funksione t\u00eb kufizuara.<\/li>\n<\/ul>\n<p>\n<img decoding=\"async\" alt=\"Network tools, ose nga ku t\u00eb filloj\u00eb nj\u00eb p\u00ebntester?\" src=\"\/wp-content\/uploads\/2019\/04\/4e3a8c72150e3e9a4aceeff0ac7bd5db.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h2><noindex><a rel=\"nofollow\" name=\"mitm6\"><\/a><\/noindex>mitm6<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/fox-it\/mitm6\">mitm6 <\/a><\/noindex> \u2014 nj\u00eb mjet p\u00ebr kryerjen e sulmeve n\u00eb IPv6 (sulmi SLAAC). IPv6 \u00ebsht\u00eb prioritet n\u00eb sistemin operativ Windows (n\u00eb p\u00ebrgjith\u00ebsi, dhe n\u00eb sistemet e tjera gjithashtu), dhe n\u00eb konfigurimin e paracaktuar, nd\u00ebrfaqja IPv6 \u00ebsht\u00eb e aktivizuar, kjo lejon sulmuesin t\u00eb vendos\u00eb serverin e tij DNS p\u00ebr viktim\u00ebn, duke p\u00ebrdorur paketat Router Advertisement, pas s\u00eb cil\u00ebs sulmuesi merr mund\u00ebsin\u00eb t\u00eb ndrroj\u00eb DNS-in e viktim\u00ebs. P\u00ebrshtatet n\u00eb m\u00ebnyr\u00eb t\u00eb shk\u00eblqyer p\u00ebr kryerjen e sulmeve Relay s\u00eb bashku me utilitarin ntlmrelayx, q\u00eb lejon sulmimin e rrjeteve Windows. <\/p>\n<h4>Avantazhet:<\/h4>\n<p><\/p>\n<ul>\n<li>Funksionon shk\u00eblqyer n\u00eb shum\u00eb rrjete p\u00ebr shkak t\u00eb konfigurimeve standarde t\u00eb hosteve dhe rrjeteve Windows;<\/li>\n<\/ul>\n<p><\/p>\n<h2><noindex><a rel=\"nofollow\" name=\"Responder\"><\/a><\/noindex>Responder<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/SpiderLabs\/Responder\">Responder<\/a><\/noindex> \u2014 nj\u00eb mjet p\u00ebr spufimin e protokolleve t\u00eb em\u00ebrimit t\u00eb transmetimeve (LLMNR, NetBIOS, MDNS). Nj\u00eb mjet i paz\u00ebvend\u00ebsuesh\u00ebm n\u00eb rrjetet Active Directory. P\u00ebrve\u00e7 spufimit, ai di t\u00eb kap\u00eb NTLM-autentikimin, me nj\u00eb paket\u00eb gjithashtu shkon nj\u00eb grup mjetesh p\u00ebr grumbullimin e informacionit dhe realizimin e sulmeve NTLM-Relay. <\/p>\n<h4>Avantazhet:<\/h4>\n<p><\/p>\n<ul>\n<li> N\u00eb m\u00ebnyr\u00eb default, ngre shum\u00eb servera me mb\u00ebshtetje p\u00ebr autentifikimin NTLM: SMB, MSSQL, HTTP, HTTPS, LDAP, FTP, POP3, IMAP, SMTP;<\/li>\n<li>Lejon z\u00ebvend\u00ebsimin e DNS n\u00eb rastin e sulmeve MITM (ARP spoofing dhe t\u00eb tjera); <\/li>\n<li>Identifikimi i hosteve q\u00eb kan\u00eb b\u00ebr\u00eb k\u00ebrkes\u00eb t\u00eb p\u00ebrhapur;<\/li>\n<li>Analiza e modit \u2014 p\u00ebr v\u00ebzhgim pasiv t\u00eb k\u00ebrkesave;<\/li>\n<li>Formati i hash-eve t\u00eb kapura gjat\u00eb autentifikimit NTLM \u00ebsht\u00eb kompatibel me John the Ripper dhe Hashcat.<\/li>\n<\/ul>\n<p><\/p>\n<h4>Disavantazhet:<\/h4>\n<p><\/p>\n<ul>\n<li>Kur ekzekutohet n\u00eb Windows, lidhja e portit 445 (SMB) ka disa v\u00ebshtir\u00ebsi (k\u00ebrkon ndalimin e sh\u00ebrbimeve p\u00ebrkat\u00ebse dhe ri-ngarkimin);<\/li>\n<\/ul>\n<p>\n<img decoding=\"async\" alt=\"Network tools, ose nga ku t\u00eb filloj\u00eb nj\u00eb p\u00ebntester?\" src=\"\/wp-content\/uploads\/2019\/04\/ebe0c72c960bb3f6cfa6e6f34b5d2ec9.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<img decoding=\"async\" alt=\"Network tools, ose nga ku t\u00eb filloj\u00eb nj\u00eb p\u00ebntester?\" src=\"\/wp-content\/uploads\/2019\/04\/477fe7559f446176ae8c6fc3c351b769.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h2><noindex><a rel=\"nofollow\" name=\"Evil_Foca\"><\/a><\/noindex>Evil_Foca<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/ElevenPaths\/EvilFOCA\">Evil Foca<\/a><\/noindex> \u2014 nj\u00eb mjet p\u00ebr kontrollin e sulmeve t\u00eb ndryshme n\u00eb rrjetet IPv4 dhe IPv6. Skanohet rrjeti lokal, duke identifikuar pajisjet, router\u00ebt dhe nd\u00ebrfaqet e tyre rrjetore, dhe m\u00eb pas \u00ebsht\u00eb e mundur t\u00eb kryhen sulme t\u00eb ndryshme ndaj pjes\u00ebmarr\u00ebsve n\u00eb rrjet.<\/p>\n<h4>Avantazhet:<\/h4>\n<p><\/p>\n<ul>\n<li>I dobish\u00ebm p\u00ebr kryerjen e sulmeve MITM (ARP spoofing, injeksione DHCP ACK, sulmi SLAAC, DHCP spoofing);<\/li>\n<li>Mund t\u00eb kryhen sulme DoS \u2014 me ARP spoofing p\u00ebr rrjetet IPv4, me SLAAC DoS n\u00eb rrjetet IPv6;<\/li>\n<li>Mund t\u00eb realizohet DNS hijacking;<\/li>\n<li>I thjesht\u00eb p\u00ebr t'u p\u00ebrdorur, me nj\u00eb nd\u00ebrfaqe grafike t\u00eb p\u00ebrshtatshme.<\/li>\n<\/ul>\n<p><\/p>\n<h4>Disavantazhet:<\/h4>\n<p><\/p>\n<ul>\n<li>Punon vet\u00ebm n\u00eb Windows.<\/li>\n<\/ul>\n<p>\n<img decoding=\"async\" alt=\"Network tools, ose nga ku t\u00eb filloj\u00eb nj\u00eb p\u00ebntester?\" src=\"\/wp-content\/uploads\/2019\/04\/f9ae7134162a703ad6fd1bdc05667a95.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h2><noindex><a rel=\"nofollow\" name=\"Bettercap\"><\/a><\/noindex>Bettercap<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/bettercap\/bettercap\">Bettercap<\/a><\/noindex> \u2014 nj\u00eb framework i fuqish\u00ebm p\u00ebr analizimin dhe sulmin e rrjeteve, i cili gjithashtu p\u00ebrfshin sulme ndaj rrjeteve pa tel, BLE (bluetooth low energy) dhe sulme MouseJack ndaj pajisjeve HID pa tel. P\u00ebrve\u00e7 k\u00ebsaj, p\u00ebrmban funksionalitet p\u00ebr mbledhjen e informacionit nga trafik (analog me net-creds). N\u00eb p\u00ebrgjith\u00ebsi, nj\u00eb thik\u00eb zvicerane (all in one). S\u00eb fundmi, gjithashtu ka <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/bettercap\/hydra\">nj\u00eb nd\u00ebrfaqe grafike t\u00eb bazuar n\u00eb web<\/a><\/noindex>.<\/p>\n<h4>Avantazhet:<\/h4>\n<p><\/p>\n<ul>\n<li>Sniffer i kredencialeve \u2014 mund t\u00eb kap\u00eb URL-t\u00eb e vizituara dhe hostet HTTPS, autentikimin HTTP, kredencialet p\u00ebr shum\u00eb protokolle t\u00eb ndryshme;<\/li>\n<li>M\u00eb shum\u00eb sulme MITM t\u00eb integruara;<\/li>\n<li>Proxy transparent HTTP(S) modular \u2014 mund t\u00eb menaxhoj\u00eb trafikun sipas nevojave;<\/li>\n<li>Server HTTP t\u00eb integruar;<\/li>\n<li>Mb\u00ebshtetje p\u00ebr caplets \u2014 skedar\u00eb q\u00eb lejojn\u00eb p\u00ebrshkrimin e sulmeve komplekse dhe t\u00eb automatizuara me nj\u00eb gjuh\u00eb skenari.<\/li>\n<\/ul>\n<p><\/p>\n<h4>Disavantazhet:<\/h4>\n<p><\/p>\n<ul>\n<li>Disa module \u2014 p\u00ebr shembull, ble.enum \u2014 pjes\u00ebrisht nuk mb\u00ebshteten n\u00eb macOS dhe Windows, disa jan\u00eb t\u00eb dizajnuara vet\u00ebm p\u00ebr Linux \u2014 packet.proxy.<\/li>\n<\/ul>\n<p>\n<img decoding=\"async\" alt=\"Network tools, ose nga ku t\u00eb filloj\u00eb nj\u00eb p\u00ebntester?\" src=\"\/wp-content\/uploads\/2019\/04\/68f5b6ccd737b3fa0ee5235f31dde4d3.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h2><noindex><a rel=\"nofollow\" name=\"gateway_finder\"><\/a><\/noindex>gateway_finder<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/pentestmonkey\/gateway-finder\">gateway finder <\/a><\/noindex> \u2014 nj\u00eb skenar n\u00eb Python q\u00eb ndihmon n\u00eb identifikimin e mundsh\u00ebm t\u00eb gateway-\u00ebve n\u00eb rrjet. I p\u00ebrshtatsh\u00ebm p\u00ebr kontrollin e segmentimit ose k\u00ebrkimin e hosteve q\u00eb mund t\u00eb rutejn\u00eb n\u00eb subnetin e nevojsh\u00ebm ose n\u00eb Internet. I p\u00ebrshtatsh\u00ebm p\u00ebr testet e brendshme t\u00eb penetrimit, kur \u00ebsht\u00eb e nevojshme t\u00eb kontrollohet shpejt n\u00ebse ekzistojn\u00eb rrug\u00eb t\u00eb paautorizuara ose rrug\u00eb ndaj rrjeteve t\u00eb tjera lokale t\u00eb brendshme. <\/p>\n<h4>Avantazhet:<\/h4>\n<p><\/p>\n<ul>\n<li>E leht\u00eb p\u00ebr t'u p\u00ebrdorur dhe p\u00ebr ta personalizuar.<\/li>\n<\/ul>\n<p><img decoding=\"async\" alt=\"Network tools, ose nga ku t\u00eb filloj\u00eb nj\u00eb p\u00ebntester?\" src=\"\/wp-content\/uploads\/2019\/04\/dee33c0d4426c3b98e89dd726c5b647c.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h2><noindex><a rel=\"nofollow\" name=\"mitmproxy\"><\/a><\/noindex>mitmproxy<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/mitmproxy\/mitmproxy\">mitmproxy<\/a><\/noindex> \u2014 nj\u00eb mjet opensource p\u00ebr analizimin e trafikut t\u00eb mbrojtur me SSL\/TLS. mitmproxy \u00ebsht\u00eb i p\u00ebrshtatsh\u00ebm p\u00ebr kapjen dhe modifikimin e trafikut t\u00eb mbrojtur, natyrisht me disa rezerva; mjeti nuk kryen sulme p\u00ebr dekapsulimin e SSL\/TLS. P\u00ebrdoret kur \u00ebsht\u00eb e nevojshme t\u00eb kapet dhe t\u00eb registrohen ndryshimet n\u00eb trafik t\u00eb mbrojtur me SSL\/TLS. Konsiston n\u00eb Mitmproxy \u2014 p\u00ebr proksimin e trafikut, mitmdump \u2014 i ngjash\u00ebm me tcpdump, por p\u00ebr trafik HTTP(S), dhe mitmweb \u2014 nd\u00ebrfaqen web p\u00ebr Mitmproxy.<\/p>\n<h4>Avantazhet:<\/h4>\n<p><\/p>\n<ul>\n<li>Punon me protokolle t\u00eb ndryshme dhe gjithashtu mb\u00ebshtet modifikimin e formateve t\u00eb ndryshme, nga HTML deri n\u00eb Protobuf;<\/li>\n<li>API p\u00ebr Python \u2014 lejon t\u00eb shkruani skripta p\u00ebr detyra t\u00eb pazakonta;<\/li>\n<li>Mund t\u00eb punoj\u00eb n\u00eb m\u00ebnyr\u00eb transparente si proksi me kapjen e trafikut.<\/li>\n<\/ul>\n<p><\/p>\n<h4>Disavantazhet:<\/h4>\n<p><\/p>\n<ul>\n<li>Formati i dump-it nuk \u00ebsht\u00eb i pajtuesh\u00ebm me asgj\u00eb \u2014 e v\u00ebshtir\u00eb p\u00ebr t\u00eb p\u00ebrdorur grep, duhet t\u00eb shkruani skripta;<\/li>\n<\/ul>\n<p>\n<img decoding=\"async\" alt=\"Network tools, ose nga ku t\u00eb filloj\u00eb nj\u00eb p\u00ebntester?\" src=\"\/wp-content\/uploads\/2019\/04\/2049cb5c62067cd65b07abdb1a2d40a5.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<img decoding=\"async\" alt=\"Network tools, ose nga ku t\u00eb filloj\u00eb nj\u00eb p\u00ebntester?\" src=\"\/wp-content\/uploads\/2019\/04\/a37457f2faafae55f333b4d6839d5254.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h2><noindex><a rel=\"nofollow\" name=\"SIET\"><\/a><\/noindex>SIET<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/Sab0tag3d\/SIET\">SIET<\/a><\/noindex> \u2014 nj\u00eb mjet p\u00ebr shfryt\u00ebzimin e mund\u00ebsive t\u00eb protokollit Cisco Smart Install. \u00cbsht\u00eb e mundur t\u00eb merrni dhe t\u00eb modifikoni konfigurimin, si dhe t\u00eb kapni kontrollin mbi pajisjen Cisco. N\u00ebse keni arritur t\u00eb merrni konfiguracionin e pajisjes Cisco, mund ta kontrolloni at\u00eb me an\u00eb t\u00eb <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/cisco-config-analysis-tool\/ccat\">CCAT<\/a><\/noindex>, ky mjet \u00ebsht\u00eb i dobish\u00ebm p\u00ebr analizimin e siguris\u00eb s\u00eb konfiguracionit t\u00eb pajisjeve Cisco.<\/p>\n<h4>Avantazhet:<\/h4>\n<p>\nP\u00ebrdorimi i protokollit Cisco Smart Install lejon:<\/p>\n<ul>\n<li>T\u00eb ndryshoni adres\u00ebn e serverit tftp n\u00eb pajisjen klient, duke d\u00ebrguar nj\u00eb paket\u00eb TCP t\u00eb deformuar;<\/li>\n<li>T\u00eb kopjoni skedarin e konfiguracionit t\u00eb pajisjes;<\/li>\n<li>T\u00eb z\u00ebvend\u00ebsoni konfigurimin e pajisjes, p\u00ebr shembull, duke shtuar nj\u00eb p\u00ebrdorues t\u00eb ri;<\/li>\n<li>T\u00eb p\u00ebrdit\u00ebsoni imazhin e iOS n\u00eb pajisje;<\/li>\n<li>T\u00eb kryeni nj\u00eb grup komandash t\u00eb rast\u00ebsishme n\u00eb pajisje. Kjo \u00ebsht\u00eb nj\u00eb ve\u00e7ori e re q\u00eb funksionon vet\u00ebm n\u00eb versionet 3.6.0E dhe 15.2 (2) E iOS;<\/li>\n<\/ul>\n<p><\/p>\n<h4>Disavantazhet:<\/h4>\n<p><\/p>\n<ul>\n<li>Punon me nj\u00eb num\u00ebr t\u00eb kufizuar pajisjesh Cisco, gjithashtu k\u00ebrkohet nj\u00eb IP \"e bardh\u00eb\" p\u00ebr t\u00eb marr\u00eb p\u00ebrgjigje nga pajisja, ose duhet t\u00eb jeni n\u00eb t\u00eb nj\u00ebjt\u00ebn rrjet me pajisjen;<\/li>\n<\/ul>\n<p>\n<img decoding=\"async\" alt=\"Network tools, ose nga ku t\u00eb filloj\u00eb nj\u00eb p\u00ebntester?\" src=\"\/wp-content\/uploads\/2019\/04\/643e5511c44940d1f9c313347c74029a.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h2><noindex><a rel=\"nofollow\" name=\"yersinia\"><\/a><\/noindex>yersinia<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/tomac\/yersinia\">yersinia<\/a><\/noindex> \u2014 nj\u00eb korniz\u00eb p\u00ebr sulme L2, krijuar p\u00ebr t\u00eb shfryt\u00ebzuar dob\u00ebsit\u00eb e siguris\u00eb n\u00eb protokollet e ndryshme rrjet L2.<\/p>\n<h4>Avantazhet:<\/h4>\n<p><\/p>\n<ul>\n<li>Lejon t\u00eb kryhen sulme ndaj protokolleve STP, CDP, DTP, DHCP, HSRP, VTP dhe t\u00eb tjera.<\/li>\n<\/ul>\n<p><\/p>\n<h4>Disavantazhet:<\/h4>\n<p><\/p>\n<ul>\n<li>Nuk ka nj\u00eb nd\u00ebrfaqe shum\u00eb t\u00eb rehatshme.<\/li>\n<\/ul>\n<p>\n<img decoding=\"async\" alt=\"Network tools, ose nga ku t\u00eb filloj\u00eb nj\u00eb p\u00ebntester?\" src=\"\/wp-content\/uploads\/2019\/04\/d0cb4b5fac1fc0e5c302ad133d5b4504.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h2><noindex><a rel=\"nofollow\" name=\"proxychains\"><\/a><\/noindex>proxychains<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/haad\/proxychains\">proxychains<\/a><\/noindex> \u2014 nj\u00eb mjet q\u00eb lejon t\u00eb riorientohet trafiku i aplikacionit p\u00ebrmes nj\u00eb SOCKS-proxy t\u00eb caktuar.<\/p>\n<h4>Avantazhet:<\/h4>\n<p><\/p>\n<ul>\n<li>Ndihmon n\u00eb riorientimin e trafikut t\u00eb disa aplikacioneve q\u00eb p\u00ebr default nuk din\u00eb t\u00eb punojn\u00eb me proxy;<\/li>\n<\/ul>\n<p>\n<img decoding=\"async\" alt=\"Network tools, ose nga ku t\u00eb filloj\u00eb nj\u00eb p\u00ebntester?\" src=\"\/wp-content\/uploads\/2019\/04\/d09dcdaf7429ea29ff70fb682e7cd590.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nN\u00eb k\u00ebt\u00eb artikull ne shpjeguam n\u00eb m\u00ebnyr\u00eb t\u00eb shkurt\u00ebr avantazhet dhe disavantazhet e mjeteve kryesore p\u00ebr testimin e penetrimit n\u00eb rrjetin e brendsh\u00ebm. Ndiqni na p\u00ebrdit\u00ebsimet, planifikojm\u00eb t\u00eb publikojm\u00eb gjithashtu p\u00ebrmbajtje t\u00eb till\u00eb: Web, baza t\u00eb dh\u00ebnash, aplikacione mobile \u2014 p\u00ebr k\u00ebt\u00eb do t\u00eb shkruajm\u00eb me siguri.<\/p>\n<p>Ndani mjetet tuaja t\u00eb preferuara n\u00eb komentet!<br \/>\n<br \/>Burimi: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/dsec\/blog\/447882\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>Toolkit \u043d\u0430\u0447\u0438\u043d\u0430\u044e\u0449\u0435\u0433\u043e \u043f\u0435\u043d\u0442\u0435\u0441\u0442\u0435\u0440\u0430: \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u043c \u043a\u0440\u0430\u0442\u043a\u0438\u0439 \u0434\u0430\u0439\u0434\u0436\u0435\u0441\u0442 \u0433\u043b\u0430\u0432\u043d\u044b\u0445 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u0440\u0438\u0433\u043e\u0434\u044f\u0442\u0441\u044f \u043f\u0440\u0438 \u043f\u0435\u043d\u0442\u0435\u0441\u0442\u0435 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0439 \u0441\u0435\u0442\u0438. \u042d\u0442\u0438 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u044b \u0443\u0436\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0448\u0438\u0440\u043e\u043a\u0438\u043c \u043a\u0440\u0443\u0433\u043e\u043c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u043e\u0432, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u0437\u043d\u0430\u0442\u044c \u043e\u0431 \u0438\u0445 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044f\u0445 \u0438 \u0432\u043b\u0430\u0434\u0435\u0442\u044c \u0432 \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0441\u0442\u0432\u0435 \u0431\u0443\u0434\u0435\u0442 \u043f\u043e\u043b\u0435\u0437\u043d\u043e \u043a\u0430\u0436\u0434\u043e\u043c\u0443. \u0421\u043e\u0434\u0435\u0440\u0436\u0430\u043d\u0438\u0435: Nmap Zmap Masscan Nessus Net-Creds network-miner mitm6 Responder Evil_Foca Bettercap gateway_finder mitmproxy SIET yersinia proxychains Nmap Nmap \u2013 opensource \u0443\u0442\u0438\u043b\u0438\u0442\u0430 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":23689,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-31811","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.2 - aioseo.com -->\n\t<meta name=\"description\" content=\"Toolkit \u043d\u0430\u0447\u0438\u043d\u0430\u044e\u0449\u0435\u0433\u043e \u043f\u0435\u043d\u0442\u0435\u0441\u0442\u0435\u0440\u0430: \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u043c \u043a\u0440\u0430\u0442\u043a\u0438\u0439 \u0434\u0430\u0439\u0434\u0436\u0435\u0441\u0442 \u0433\u043b\u0430\u0432\u043d\u044b\u0445 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u0440\u0438\u0433\u043e\u0434\u044f\u0442\u0441\u044f \u043f\u0440\u0438 \u043f\u0435\u043d\u0442\u0435\u0441\u0442\u0435 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0439 \u0441\u0435\u0442\u0438.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/network-tools-ili-s-chego-nachat-pentesteru\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.2\" \/>\n\t\t<meta property=\"og:locale\" content=\"sq_AL\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47Network tools, \u0438\u043b\u0438 \u0441 \u0447\u0435\u0433\u043e \u043d\u0430\u0447\u0430\u0442\u044c \u043f\u0435\u043d\u0442\u0435\u0441\u0442\u0435\u0440\u0443? | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"Toolkit \u043d\u0430\u0447\u0438\u043d\u0430\u044e\u0449\u0435\u0433\u043e \u043f\u0435\u043d\u0442\u0435\u0441\u0442\u0435\u0440\u0430: \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u043c \u043a\u0440\u0430\u0442\u043a\u0438\u0439 \u0434\u0430\u0439\u0434\u0436\u0435\u0441\u0442 \u0433\u043b\u0430\u0432\u043d\u044b\u0445 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u0440\u0438\u0433\u043e\u0434\u044f\u0442\u0441\u044f \u043f\u0440\u0438 \u043f\u0435\u043d\u0442\u0435\u0441\u0442\u0435 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0439 \u0441\u0435\u0442\u0438.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/network-tools-ili-s-chego-nachat-pentesteru\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T18:43:17+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2019-10-31T18:43:17+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Mjetet e rrjetit, ose nga t\u00eb filloni me testimin e penetrimit? | ProHoster","description":"Toolkit i pentester\u00ebve fillestar: po paraqesim nj\u00eb p\u00ebrmbledhje t\u00eb shkurt\u00ebr t\u00eb mjeteve kryesore q\u00eb do t'ju nevojiten gjat\u00eb testimit t\u00eb penetrimit n\u00eb rrjetin e brendsh\u00ebm.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/network-tools-ili-s-chego-nachat-pentesteru","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Network tools, \u0438\u043b\u0438 \u0441 \u0447\u0435\u0433\u043e \u043d\u0430\u0447\u0430\u0442\u044c \u043f\u0435\u043d\u0442\u0435\u0441\u0442\u0435\u0440\u0443? | ProHoster","og:description":"Toolkit \u043d\u0430\u0447\u0438\u043d\u0430\u044e\u0449\u0435\u0433\u043e \u043f\u0435\u043d\u0442\u0435\u0441\u0442\u0435\u0440\u0430: \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u043c \u043a\u0440\u0430\u0442\u043a\u0438\u0439 \u0434\u0430\u0439\u0434\u0436\u0435\u0441\u0442 \u0433\u043b\u0430\u0432\u043d\u044b\u0445 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u0440\u0438\u0433\u043e\u0434\u044f\u0442\u0441\u044f \u043f\u0440\u0438 \u043f\u0435\u043d\u0442\u0435\u0441\u0442\u0435 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0439 \u0441\u0435\u0442\u0438.","og:url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/network-tools-ili-s-chego-nachat-pentesteru","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:43:17+00:00","article:modified_time":"2019-10-31T18:43:17+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"31811","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 07:57:22","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 03:10:46","updated":"2026-01-21 07:57:22","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/31811","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=31811"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/31811\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media\/23689"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=31811"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=31811"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=31811"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}