{"id":34646,"date":"2019-10-31T21:59:35","date_gmt":"2019-10-31T18:59:35","guid":{"rendered":"https:\/\/prohoster.info\/blog\/web-tools-ili-s-chego-nachat-pentesteru\/"},"modified":"2019-10-31T21:59:35","modified_gmt":"2019-10-31T18:59:35","slug":"web-tools-ili-s-chego-nachat-pentesteru","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/web-tools-ili-s-chego-nachat-pentesteru","title":{"rendered":"Mjetet Web, ose nga ku t\u00eb nisin p\u00ebntester\u00ebt?","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/dsec\/blog\/447882\/\">Vazhdojm\u00eb<\/a><\/noindex> t\u00eb flasim p\u00ebr mjetet e dobishme p\u00ebr pen-testuesit. N\u00eb artikullin e ri do t\u00eb shqyrtojm\u00eb mjetet p\u00ebr analizimin e siguris\u00eb s\u00eb aplikacioneve web.<\/p>\n<p>Kolegu yn\u00eb <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/users\/belove\/\" class=\"user_link\">BeLove<\/a><\/noindex> ka b\u00ebr\u00eb nj\u00eb p\u00ebrzgjedhje t\u00eb till\u00eb <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/post\/125317\/\">rreth shtat\u00eb vjet m\u00eb par\u00eb. \u00cbsht\u00eb interessante t\u00eb shohim se cilat mjete e ruajt\u00ebn dhe forcuan pozitat e tyre, dhe cilat jan\u00eb futur n\u00eb planin e dyt\u00eb dhe tani p\u00ebrdoren rrall\u00eb.<\/a><\/noindex> Vlen t\u00eb theksohet se k\u00ebtu p\u00ebrfshihet edhe Burp Suite, por p\u00ebr t\u00eb dhe p\u00ebr pluginet e tij t\u00eb dobishme do t\u00eb kemi nj\u00eb publikim t\u00eb ve\u00e7ant\u00eb.<br \/>\n<img decoding=\"async\" alt=\"Mjetet Web, ose nga ku t\u00eb nisin p\u00ebntester\u00ebt?\" src=\"\/wp-content\/uploads\/2019\/05\/a6d02b9593ebdbe1b11ccc38e6357b2f.gif\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><br \/>\nAmass<\/p>\n<h2>P\u00ebrmbajtja:<\/h2>\n<p><\/p>\n<ul>\n<li> <noindex><a rel=\"nofollow\" href=\"#Amass\">Altdns<\/a><\/noindex><\/li>\n<li> <noindex><a rel=\"nofollow\" href=\"#Altdns\">aquatone<\/a><\/noindex><\/li>\n<li> <noindex><a rel=\"nofollow\" href=\"#aquatone\">MassDNS<\/a><\/noindex><\/li>\n<li> <noindex><a rel=\"nofollow\" href=\"#MassDNS\">nsec3map<\/a><\/noindex><\/li>\n<li> <noindex><a rel=\"nofollow\" href=\"#nsec3map\">Acunetix<\/a><\/noindex><\/li>\n<li> <noindex><a rel=\"nofollow\" href=\"#Acunetix\">Dirsearch<\/a><\/noindex><\/li>\n<li> <noindex><a rel=\"nofollow\" href=\"#Dirsearch\">wfuzz<\/a><\/noindex><\/li>\n<li> <noindex><a rel=\"nofollow\" href=\"#wfuzz\">ffuf<\/a><\/noindex><\/li>\n<li> <noindex><a rel=\"nofollow\" href=\"#ffuf\">gobuster<\/a><\/noindex><\/li>\n<li> <noindex><a rel=\"nofollow\" href=\"#gobuster\">Arjun<\/a><\/noindex><\/li>\n<li> <noindex><a rel=\"nofollow\" href=\"#Arjun\">LinkFinder<\/a><\/noindex><\/li>\n<li> <noindex><a rel=\"nofollow\" href=\"#LinkFinder\">JSParser<\/a><\/noindex><\/li>\n<li> <noindex><a rel=\"nofollow\" href=\"#JSParser\">NoSQLMap<\/a><\/noindex><\/li>\n<li> <noindex><a rel=\"nofollow\" href=\"#sqlmap\">sqlmap<\/a><\/noindex><\/li>\n<li> <noindex><a rel=\"nofollow\" href=\"#NoSQLMap\">oxml_xxe<\/a><\/noindex><\/li>\n<li> <noindex><a rel=\"nofollow\" href=\"#oxml_xxe\">tplmap<\/a><\/noindex><\/li>\n<li> <noindex><a rel=\"nofollow\" href=\"#tplmap\">Weakpass<\/a><\/noindex><\/li>\n<li> <noindex><a rel=\"nofollow\" href=\"#CeWL\">CeWL<\/a><\/noindex><\/li>\n<li> <noindex><a rel=\"nofollow\" href=\"#Weakpass\">AEM_hacker<\/a><\/noindex><\/li>\n<li> <noindex><a rel=\"nofollow\" href=\"#AEM_hacker\">JoomScan<\/a><\/noindex><\/li>\n<li> <noindex><a rel=\"nofollow\" href=\"#JoomScan\">WPScan<\/a><\/noindex><\/li>\n<li> <noindex><a rel=\"nofollow\" href=\"#WPScan\">\u2014 nj\u00eb mjet n\u00eb Go p\u00ebr gjetjen dhe enumerimin e n\u00ebn-domen\u00ebve DNS dhe p\u00ebr hartimin e rrjetit t\u00eb jasht\u00ebm. Amass \u00ebsht\u00eb nj\u00eb projekt OWASP, i krijuar p\u00ebr t\u00eb treguar se si duken organizatat n\u00eb internet p\u00ebr nj\u00eb v\u00ebzhgues t\u00eb jasht\u00ebm. Emrat e n\u00ebn-domen\u00ebve Amass i merr n\u00eb m\u00ebnyra t\u00eb ndryshme, duke p\u00ebrdorur si enumerimin rekurziv t\u00eb n\u00ebn-domen\u00ebve ashtu edhe k\u00ebrkimin n\u00eb burime t\u00eb hapura.<\/a><\/noindex><\/li>\n<\/ul>\n<p><\/p>\n<h2><noindex><a rel=\"nofollow\" name=\"Amass\"><\/a><\/noindex>Altdns<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/OWASP\/Amass\">Altdns<\/a><\/noindex> P\u00ebr t\u00eb zbuluar segmente t\u00eb lidhura t\u00eb rrjetit dhe numra t\u00eb sistemeve autonome, Amass p\u00ebrdor adresat IP t\u00eb marra gjat\u00eb funksionimit. T\u00eb gjitha informacionet e gjetura p\u00ebrdoren p\u00ebr t\u00eb nd\u00ebrtuar nj\u00eb hart\u00eb t\u00eb rrjetit.<\/p>\n<p>Teknikat e mbledhjes s\u00eb informacionit p\u00ebrfshijn\u00eb:<\/p>\n<h4>Avantazhet:<\/h4>\n<p><\/p>\n<ul>\n<li>* DNS \u2014 enumerimi i n\u00ebn-domen\u00ebve nga nj\u00eb fjalor, bruteforce t\u00eb n\u00ebn-domen\u00ebve, enumerim \u201cinteligjent\u201d duke p\u00ebrdorur mutacione t\u00eb bazuara n\u00eb n\u00ebn-domen\u00ebt e gjetur, k\u00ebrkesa t\u00eb prapme DNS dhe k\u00ebrkimin e server\u00ebve DNS n\u00eb t\u00eb cil\u00ebt \u00ebsht\u00eb e mundur t\u00eb b\u00ebhet k\u00ebrkes\u00eb p\u00ebr transferimin e zon\u00ebs (AXFR);<br \/>\n * K\u00ebrkimi n\u00eb burime t\u00eb hapura \u2014 Ask, Baidu, Bing, CommonCrawl, DNSDB, DNSDumpster, DNSTable, Dogpile, Exalead, FindSubdomains, Google, IPv4Info, Netcraft, PTRArchive, Riddler, SiteDossier, ThreatCrowd, VirusTotal, Yahoo; <\/p>\n<p>* K\u00ebrkimi n\u00eb bazat e t\u00eb dh\u00ebnave t\u00eb certifikatave TLS \u2014 Censys, CertDB, CertSpotter, Crtsh, Entrust;<\/p>\n<p>* P\u00ebrdorimi i API-t\u00eb t\u00eb motor\u00ebve t\u00eb k\u00ebrkimit \u2014 BinaryEdge, BufferOver, CIRCL, HackerTarget, PassiveTotal, Robtex, SecurityTrails, Shodan, Twitter, Umbrella, URLScan;<\/p>\n<p>* K\u00ebrkimi n\u00eb arkivat e web-it: ArchiveIt, ArchiveToday, Arquivo, LoCArchive, OpenUKArchive, UKGovArchive, Wayback;<\/p>\n<p>Integrimi me Maltego;<\/li>\n<li>Siguron mbulimin m\u00eb t\u00eb plot\u00eb t\u00eb detyr\u00ebs p\u00ebr k\u00ebrkimin e n\u00ebn-domen\u00ebve DNS. <\/li>\n<li>Kujdes me amass.netdomains \u2014 ai do t\u00eb p\u00ebrpiqet t\u00eb lidhet me \u00e7do adres\u00eb IP n\u00eb infrastrukturen e identifikuar dhe t\u00eb marr\u00eb emrat e domeve nga k\u00ebrkesat e prapme DNS dhe certifikatave TLS. Kjo \u00ebsht\u00eb nj\u00eb teknik\u00eb \"e zhurmshme\", e cila mund t\u00eb zbuloj\u00eb veprimet tuaja t\u00eb zbuluara n\u00eb organizat\u00ebn q\u00eb po shqyrtohet.<\/li>\n<\/ul>\n<p><\/p>\n<h4>Disavantazhet:<\/h4>\n<p><\/p>\n<ul>\n<li>Kujdes t\u00eb shtuar kur p\u00ebrdorni amass.netdomains \u2014 ai do t\u00eb p\u00ebrpiqet t\u00eb adresoj\u00eb \u00e7do IP n\u00eb infrastruktur\u00ebn e identifikuar dhe t\u00eb marr\u00eb emrat e domain-eve nga k\u00ebrkesat e DNS t\u00eb kund\u00ebrt dhe certifikatat TLS. Kjo \u00ebsht\u00eb nj\u00eb teknik\u00eb 'e zhurmshme', e cila mund t\u00eb zbuloj\u00eb aktivitetet tuaja t\u00eb intelijenc\u00ebs n\u00eb organizat\u00ebn q\u00eb po hetoni. <\/li>\n<li>Konsumimi i lart\u00eb i memories, mund t\u00eb konsumoj\u00eb deri n\u00eb 2 GB RAM n\u00eb konfigurime t\u00eb ndryshme, gj\u00eb q\u00eb nuk do t\u00eb lejoj\u00eb q\u00eb ky mjet t\u00eb ekzekutohet n\u00eb cloud n\u00eb nj\u00eb VDS t\u00eb lir\u00eb.<\/li>\n<\/ul>\n<p>\n<img decoding=\"async\" alt=\"Mjetet Web, ose nga ku t\u00eb nisin p\u00ebntester\u00ebt?\" src=\"\/wp-content\/uploads\/2019\/05\/37e1dd6c273eaef2c7c979a57f98c0d9.gif\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h2><noindex><a rel=\"nofollow\" name=\"Altdns\"><\/a><\/noindex>aquatone<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/infosec-au\/altdns\">aquatone<\/a><\/noindex> \u2014 nj\u00eb mjet n\u00eb Python p\u00ebr krijimin e fjalor\u00ebve p\u00ebr zbulimin e DNS-n\u00ebnshkrimeve. Lejon gjenerimin e shum\u00eb varianteve t\u00eb n\u00ebnshkrimeve p\u00ebrmes mutacioneve dhe permutimeve. P\u00ebr k\u00ebt\u00eb p\u00ebrdoren fjal\u00ebt q\u00eb gjenden shpesh n\u00eb n\u00ebnshkrime (p.sh.: test, dev, staging), t\u00eb gjitha mutacionet dhe permutimet aplikohen n\u00eb n\u00ebnshkrimet e njohura, t\u00eb cilat mund t\u00eb p\u00ebrdoren si input p\u00ebr Altdns. N\u00eb dalje, krijohet nj\u00eb list\u00eb me variante n\u00ebnshkrimesh q\u00eb mund t\u00eb ekzistojn\u00eb, dhe kjo list\u00eb mund t\u00eb p\u00ebrdoret m\u00eb pas p\u00ebr sulme brute n\u00eb DNS.<\/p>\n<h4>Avantazhet:<\/h4>\n<p><\/p>\n<ul>\n<li>Punon mir\u00eb me grupe t\u00eb m\u00ebdha t\u00eb t\u00eb dh\u00ebnave.<\/li>\n<\/ul>\n<p><\/p>\n<h2><noindex><a rel=\"nofollow\" name=\"aquatone\"><\/a><\/noindex>MassDNS<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/michenriksen\/aquatone\">MassDNS<\/a><\/noindex> \u2014 m\u00eb par\u00eb ishte m\u00eb i njohur si nj\u00eb tjet\u00ebr mjet p\u00ebr gjetjen e n\u00ebnshkrimeve, por autori e braktisi k\u00ebt\u00eb n\u00eb favor t\u00eb mjetit t\u00eb p\u00ebrmendur m\u00eb sip\u00ebr, Amass. Tani aquatone \u00ebsht\u00eb shkruar n\u00eb Go dhe \u00ebsht\u00eb m\u00eb i p\u00ebrshtatur p\u00ebr zbulimin paraprak t\u00eb faqeve n\u00eb internet. P\u00ebr k\u00ebt\u00eb, aquatone kalon p\u00ebrmes domain-eve t\u00eb specifikuara dhe k\u00ebrkon faqe n\u00eb internet n\u00eb porte t\u00eb ndryshme, pas s\u00eb cil\u00ebs grumbullon t\u00eb gjitha informacionet mbi faqen dhe merr nj\u00eb screenshot. I p\u00ebrshtatsh\u00ebm p\u00ebr nj\u00eb zbulim t\u00eb shpejt\u00eb paraprak t\u00eb faqeve n\u00eb internet, pas s\u00eb cil\u00ebs mund t\u00eb zgjidhni q\u00ebllimet prioritare p\u00ebr sulme.<\/p>\n<h4>Avantazhet:<\/h4>\n<p><\/p>\n<ul>\n<li>N\u00eb dalje krijon nj\u00eb grup skedash dhe dosjesh q\u00eb jan\u00eb t\u00eb lehta p\u00ebr t'u p\u00ebrdorur n\u00eb pun\u00ebn e m\u00ebtejshme me mjete t\u00eb tjera:<br \/>\n * Raport HTML me screenshot-e t\u00eb mbledhura dhe me tituj p\u00ebrgjigjesh t\u00eb grumbulluar sipas ngjashm\u00ebris\u00eb;<\/p>\n<p>* File me t\u00eb gjitha URL-t\u00eb ku jan\u00eb gjetur faqe n\u00eb internet;<\/p>\n<p> * File me statistikat dhe t\u00eb dh\u00ebnat e faqes;<\/p>\n<p>* Dosje me skedar\u00eb q\u00eb p\u00ebrmbajn\u00eb titujt e p\u00ebrgjigjeve nga objektivat e gjetura; <\/p>\n<p>* Dosje me skedar\u00eb q\u00eb p\u00ebrmbajn\u00eb trupin e p\u00ebrgjigjeve nga objektivat e gjetura;<\/p>\n<p>* Screenshot-e t\u00eb faqeve n\u00eb internet t\u00eb gjetura;<\/li>\n<li>Mb\u00ebshtet pun\u00ebn me raporte XML nga Nmap dhe Masscan;<\/li>\n<li>P\u00ebrdor headless Chrome\/Chromium p\u00ebr renderimin e screenshot-eve. <\/li>\n<\/ul>\n<p><\/p>\n<h4>Disavantazhet:<\/h4>\n<p><\/p>\n<ul>\n<li> Mund t\u00eb t\u00ebrheq\u00eb v\u00ebmendjen e sistemeve t\u00eb zbulimit t\u00eb dep\u00ebrtimeve, prandaj k\u00ebrkon konfigurim.<\/li>\n<\/ul>\n<p>\nScreenshot-i \u00ebsht\u00eb marr\u00eb p\u00ebr nj\u00eb nga versionet e vjetra t\u00eb aquatone (v0.5.0), n\u00eb t\u00eb cilin ishte realizuar k\u00ebrkimi i n\u00ebnshkrimeve t\u00eb DNS. Versionet e vjetra mund t\u00eb gjenden n\u00eb <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/michenriksen\/aquatone\/releases\">faqen e l\u00ebshimeve<\/a><\/noindex>.<br \/>\n<img decoding=\"async\" alt=\"Mjetet Web, ose nga ku t\u00eb nisin p\u00ebntester\u00ebt?\" src=\"\/wp-content\/uploads\/2019\/05\/42cf06a7d2ea19f973f76dccd0442bb8.gif\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h2><noindex><a rel=\"nofollow\" name=\"MassDNS\"><\/a><\/noindex>nsec3map<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/blechschmidt\/massdns\">nsec3map<\/a><\/noindex> \u2014 nj\u00eb tjet\u00ebr mjet p\u00ebr gjetjen e n\u00ebnshkrimeve t\u00eb DNS. Dallimi kryesor \u00ebsht\u00eb se b\u00ebn k\u00ebrkesa DNS direkt n\u00eb nj\u00eb shum\u00ebllojshm\u00ebri t\u00eb ndryshme t\u00eb DNS-resolverseve dhe e b\u00ebn k\u00ebt\u00eb me nj\u00eb shpejt\u00ebsi t\u00eb konsiderueshme. <\/p>\n<h4>Avantazhet:<\/h4>\n<p><\/p>\n<ul>\n<li>Shpejt \u2014 mund t\u00eb zgjidh\u00eb m\u00eb shum\u00eb se 350,000 emra n\u00eb sekond\u00eb.<\/li>\n<\/ul>\n<p><\/p>\n<h4>Disavantazhet:<\/h4>\n<p><\/p>\n<ul>\n<li>MassDNS mund t\u00eb shkaktoj\u00eb nj\u00eb ngarkes\u00eb t\u00eb konsiderueshme n\u00eb rezolutor\u00ebt DNS q\u00eb p\u00ebrdoren, gj\u00eb q\u00eb mund t\u00eb rezultoj\u00eb n\u00eb bllokimin e k\u00ebtyre server\u00ebve ose ankesa p\u00ebr ofruesin tuaj. P\u00ebrve\u00e7 k\u00ebsaj, do t\u00eb shkaktoj\u00eb ngarkes\u00eb t\u00eb madhe n\u00eb server\u00ebt DNS t\u00eb kompanis\u00eb, n\u00ebse ata e kan\u00eb at\u00eb dhe n\u00ebse jan\u00eb p\u00ebrgjegj\u00ebs p\u00ebr domenet q\u00eb po p\u00ebrpiqeni t\u00eb zgjidhni. <\/li>\n<li> Lista e rezolutor\u00ebve aktualisht \u00ebsht\u00eb e vjetruar, megjithat\u00eb, n\u00ebse eliminohen rezolutor\u00ebt DNS q\u00eb nuk punojn\u00eb dhe shtohen t\u00eb rinj t\u00eb njohur \u2014 gjith\u00e7ka do t\u00eb jet\u00eb n\u00eb rregull.<\/li>\n<\/ul>\n<p>\n<img decoding=\"async\" alt=\"Mjetet Web, ose nga ku t\u00eb nisin p\u00ebntester\u00ebt?\" src=\"\/wp-content\/uploads\/2019\/05\/a53181d6982b8d115ec5ece79fbca157.gif\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<i>Screenshot i aquatone v0.5.0<\/i><\/p>\n<h2><noindex><a rel=\"nofollow\" name=\"nsec3map\"><\/a><\/noindex>Acunetix<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/anonion0\/nsec3map\">Acunetix<\/a><\/noindex> \u2014 nj\u00eb mjet n\u00eb Python p\u00ebr t\u00eb marr\u00eb nj\u00eb list\u00eb t\u00eb plot\u00eb t\u00eb domen\u00ebve t\u00eb mbrojtur nga DNSSEC.<\/p>\n<h4>Avantazhet:<\/h4>\n<p><\/p>\n<ul>\n<li>Shpejt zbulojn\u00eb hostet n\u00eb zonat DNS me nj\u00eb num\u00ebr minimal k\u00ebrkesash, n\u00ebse zona mb\u00ebshtet DNSSEC;<\/li>\n<li>N\u00eb p\u00ebrb\u00ebrje ka nj\u00eb plugin p\u00ebr John the Ripper, i cili mund t\u00eb p\u00ebrdoret p\u00ebr t\u00eb thyer hash-e t\u00eb marra NSEC3.<\/li>\n<\/ul>\n<p><\/p>\n<h4>Disavantazhet:<\/h4>\n<p><\/p>\n<ul>\n<li>Shum\u00eb gabime DNS trajtohen n\u00eb m\u00ebnyr\u00eb t\u00eb pasakt\u00eb;<\/li>\n<li>Nuk ka automatizim t\u00eb p\u00ebrpunimit t\u00eb regjistrave NSEC \u2014 duhet t\u00eb ndani manualisht hap\u00ebsir\u00ebn e emrave;<\/li>\n<li>Konsum i lart\u00eb i memories.<\/li>\n<\/ul>\n<p><\/p>\n<h2><noindex><a rel=\"nofollow\" name=\"Acunetix\"><\/a><\/noindex>Dirsearch<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/www.acunetix.com\/\">Dirsearch<\/a><\/noindex> \u2014 nj\u00eb skaner i dob\u00ebsive n\u00eb web q\u00eb automatizon procesin e verifikimit t\u00eb siguris\u00eb s\u00eb aplikacioneve web. Teston aplikacionin p\u00ebr SQL injeksione, XSS, XXE, SSRF dhe shum\u00eb dob\u00ebsi t\u00eb tjera n\u00eb web. Megjithat\u00eb, si \u00e7do skaner tjet\u00ebr p\u00ebr dob\u00ebsi t\u00eb shumta web-i, nuk z\u00ebvend\u00ebson nj\u00eb testues t\u00eb penetrimit, pasi zinxhir\u00ebt kompleks\u00eb t\u00eb dob\u00ebsive ose dob\u00ebsit\u00eb n\u00eb logjik\u00eb nuk do t\u00eb mund t\u00eb zbuloheshin. Megjithat\u00eb, ai mbulon shum\u00eb dob\u00ebsi t\u00eb ndryshme, duke p\u00ebrfshir\u00eb dhe CVE t\u00eb ndryshme q\u00eb testuesi mund t\u00eb ket\u00eb harruar, prandaj \u00ebsht\u00eb shum\u00eb i dobish\u00ebm p\u00ebr t\u00eb \u00e7liruar nga verifikimet rutin\u00eb.<\/p>\n<h4>Avantazhet:<\/h4>\n<p><\/p>\n<ul>\n<li>Nivel i ul\u00ebt i alarmeve t\u00eb rreme;<\/li>\n<li>Rezultatet mund t\u00eb eksportohen n\u00eb form\u00eb raportesh;<\/li>\n<li>Kryen nj\u00eb num\u00ebr t\u00eb madh verifikimesh p\u00ebr dob\u00ebsi t\u00eb ndryshme;<\/li>\n<li>Skanime paralel t\u00eb disa hosteve. <\/li>\n<\/ul>\n<p><\/p>\n<h4>Disavantazhet:<\/h4>\n<p><\/p>\n<ul>\n<li>Nuk ka algorit\u00ebm dedublikimi (faqet me funksionalitet t\u00eb ngjash\u00ebm Acunetix do ti konsideroj\u00eb t\u00eb ndryshme, pasi ato drejtojn\u00eb URL t\u00eb ndryshme), por zhvilluesit po punojn\u00eb mbi k\u00ebt\u00eb;<\/li>\n<li>K\u00ebrkon instalim n\u00eb nj\u00eb server t\u00eb ve\u00e7ant\u00eb web, q\u00eb e komplikon testimin e sistemeve t\u00eb klient\u00ebve me lidhje p\u00ebrmes VPN dhe p\u00ebrdorimin e skanerit n\u00eb nj\u00eb segment t\u00eb izoluar t\u00eb rrjetit lokal t\u00eb klientit;<\/li>\n<li>Mund t\u00eb \u201czhurmoj\u00eb\u201d sh\u00ebrbimin e k\u00ebrkuar, p\u00ebr shembull, duke d\u00ebrguar n\u00eb form\u00ebn e kontaktit n\u00eb ueb faqe shum\u00eb vektor\u00eb sulmi, duke e b\u00ebr\u00eb k\u00ebshtu t\u00eb komplikuar procesin e biznesit.<\/li>\n<li>\u00ebsht\u00eb nj\u00eb zgjidhje pron\u00ebsore dhe, p\u00ebr rrjedhoj\u00eb, jo falas.<\/li>\n<\/ul>\n<p>\n<img decoding=\"async\" alt=\"Mjetet Web, ose nga ku t\u00eb nisin p\u00ebntester\u00ebt?\" src=\"\/wp-content\/uploads\/2019\/05\/3756cfae6f3cbf221c42c8a439f6ee86.gif\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h2><noindex><a rel=\"nofollow\" name=\"Dirsearch\"><\/a><\/noindex>wfuzz<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/maurosoria\/dirsearch\">wfuzz<\/a><\/noindex> \u2014 nj\u00eb mjet n\u00eb Python p\u00ebr bruteforcing drejtorish dhe skedar\u00ebsh n\u00eb faqe interneti. <\/p>\n<h4>Avantazhet:<\/h4>\n<p><\/p>\n<ul>\n<li>Mund t\u00eb dalloj\u00eb faqet e v\u00ebrteta \"200 OK\" nga faqet \"200 OK\" por me tekstin \"faqja nuk u gjend\";<\/li>\n<li>Vjen me nj\u00eb fjalor t\u00eb p\u00ebrshtatsh\u00ebm q\u00eb ka nj\u00eb balancim t\u00eb mir\u00eb midis madh\u00ebsis\u00eb dhe efikasitetit t\u00eb k\u00ebrkimit. P\u00ebrmban rrug\u00ebt standarde, karakteristike p\u00ebr shum\u00eb CMS dhe stk teknologjish;<\/li>\n<li>Formati i tij i fjalorit q\u00eb lejon arritjen e efikasitetit dhe fleksibilitetit t\u00eb mir\u00eb p\u00ebr k\u00ebrkimin e skedar\u00ebve dhe drejtorive;<\/li>\n<li>Dalja e leht\u00eb \u2014 tekst i thjesht\u00eb, JSON;<\/li>\n<li>D\u00ebshiron t\u00eb b\u00ebj\u00eb throttling \u2014 nj\u00eb pauz\u00eb midis k\u00ebrkesave, e cila \u00ebsht\u00eb jetike p\u00ebr \u00e7do sh\u00ebrbim t\u00eb dob\u00ebt.<\/li>\n<\/ul>\n<p><\/p>\n<h4>Disavantazhet:<\/h4>\n<p><\/p>\n<ul>\n<li>Zgjidhjet duhet t\u00eb kalojn\u00eb si nj\u00eb varg, q\u00eb \u00ebsht\u00eb e padobishme, n\u00ebse duhet t\u00eb kalosh shum\u00eb zgjidhje menj\u00ebher\u00eb;<\/li>\n<li>P\u00ebr t\u00eb p\u00ebrdorur fjalorin t\u00ebnd, do t\u00eb duhet ta p\u00ebrpunosh disi n\u00eb formatin e fjalor\u00ebve Dirsearch p\u00ebr efikasitetin maksimal.<\/li>\n<\/ul>\n<p>\n<img decoding=\"async\" alt=\"Mjetet Web, ose nga ku t\u00eb nisin p\u00ebntester\u00ebt?\" src=\"\/wp-content\/uploads\/2019\/05\/00676a0d7916ecc4cc521a3a5e8607e5.gif\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h2><noindex><a rel=\"nofollow\" name=\"wfuzz\"><\/a><\/noindex>ffuf<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/xmendez\/wfuzz\">ffuf<\/a><\/noindex> \u2014 nj\u00eb web fuzzer n\u00eb Python. Ndoshta nj\u00eb nga fuzzers m\u00eb t\u00eb njohur n\u00eb internet. Parimi \u00ebsht\u00eb i thjesht\u00eb: wfuzz lejon fuzzing n\u00eb \u00e7do vend n\u00eb k\u00ebrkes\u00ebn HTTP, duke dh\u00ebn\u00eb mund\u00ebsin\u00eb p\u00ebr fuzzing GET\/POST parametra, headers HTTP, duke p\u00ebrfshir\u00eb Cookie dhe headers tjera p\u00ebr autentifikim. N\u00eb t\u00eb nj\u00ebjt\u00ebn koh\u00eb \u00ebsht\u00eb i p\u00ebrshtatsh\u00ebm p\u00ebr bruteforcing drejtorish dhe skedar\u00ebsh, p\u00ebr t\u00eb cilat nevojitet nj\u00eb fjalor i mir\u00eb. Ka gjithashtu nj\u00eb sistem fleksib\u00ebl filtrimesh, me ndihm\u00ebn e t\u00eb cilave mund t\u00eb filtrohen p\u00ebrgjigjet nga faqja n\u00eb internet p\u00ebr parametra t\u00eb ndrysh\u00ebm, q\u00eb lejon arritjen e rezultateve efektive. <\/p>\n<h4>Avantazhet:<\/h4>\n<p><\/p>\n<ul>\n<li>Multifunksional \u2014 struktura modulare, nd\u00ebrtimi zgjat disa minuta;<\/li>\n<li>Mekanizmi i leht\u00eb i filtrimit dhe fuzzing;<\/li>\n<li>Mund t\u00eb fuzionosh \u00e7do metod\u00eb HTTP, si dhe \u00e7do vend n\u00eb k\u00ebrkes\u00ebn HTTP.<\/li>\n<\/ul>\n<p><\/p>\n<h4>Disavantazhet:<\/h4>\n<p><\/p>\n<ul>\n<li>N\u00eb faz\u00ebn e zhvillimit.<\/li>\n<\/ul>\n<p>\n<img decoding=\"async\" alt=\"Mjetet Web, ose nga ku t\u00eb nisin p\u00ebntester\u00ebt?\" src=\"\/wp-content\/uploads\/2019\/05\/f3b2ae5036eb8b8032f16516e78c82d0.gif\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h2><noindex><a rel=\"nofollow\" name=\"ffuf\"><\/a><\/noindex>gobuster<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/ffuf\/ffuf\">gobuster<\/a><\/noindex> \u2014 nj\u00eb web fuzzer n\u00eb Go, krijuar sipas 'modelit' t\u00eb wfuzz, lejon bruteforcing skedar\u00ebsh, drejtorish, rrug\u00ebsh URL, emra dhe vlera t\u00eb parametrave GET\/POST, headers HTTP, duke p\u00ebrfshir\u00eb header-in Host p\u00ebr bruteforcing virtual hostesh. Nga homologu i tij wfuzz, dallohet p\u00ebr shpejt\u00ebsi m\u00eb t\u00eb lart\u00eb dhe disa ve\u00e7ori t\u00eb reja, p\u00ebr shembull, mb\u00ebshtet fjalor\u00ebt e formatit Dirsearch.<\/p>\n<h4>Avantazhet:<\/h4>\n<p><\/p>\n<ul>\n<li>Filtrat jan\u00eb t\u00eb ngjash\u00ebm me filtrat e wfuzz, lejojn\u00eb t\u00eb rregullohet fleksib\u00ebl bruteforcing;<\/li>\n<li>Lejon fuzzing t\u00eb vlerave t\u00eb headers HTTP, t\u00eb dh\u00ebnat e k\u00ebrkesave POST dhe pjes\u00eb t\u00eb ndryshme t\u00eb URL-s\u00eb, duke p\u00ebrfshir\u00eb emrat dhe vlerat e parametrave GET;<\/li>\n<li>Mund t\u00eb specifikosh \u00e7do metod\u00eb HTTP.<\/li>\n<\/ul>\n<p><\/p>\n<h4>Disavantazhet:<\/h4>\n<p><\/p>\n<ul>\n<li>N\u00eb faz\u00ebn e zhvillimit.<\/li>\n<\/ul>\n<p>\n<img decoding=\"async\" alt=\"Mjetet Web, ose nga ku t\u00eb nisin p\u00ebntester\u00ebt?\" src=\"\/wp-content\/uploads\/2019\/05\/f432340ca10a6d834d01be4577f65fe2.gif\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h2><noindex><a rel=\"nofollow\" name=\"gobuster\"><\/a><\/noindex>Arjun<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/OJ\/gobuster\">Arjun<\/a><\/noindex> \u2014 nj\u00eb mjet n\u00eb Go p\u00ebr hulumtim, ka dy m\u00ebnyra funksionimi. E para p\u00ebrdoret p\u00ebr bruteforce t\u00eb skedar\u00ebve dhe direktorive n\u00eb nj\u00eb uebfaqe, e dyta \u2014 p\u00ebr enumerimin e subdomen\u00ebve DNS. Mjeti fillimisht nuk mb\u00ebshtet enumerimin rekurziv t\u00eb skedar\u00ebve dhe direktorive, gj\u00eb q\u00eb natyrisht kursen koh\u00eb, por n\u00eb an\u00ebn tjet\u00ebr, duhet t\u00eb nisni veprimet bruteforce p\u00ebr \u00e7do endpoint t\u00eb ri n\u00eb uebfaqe ve\u00e7mas.<\/p>\n<h4>Avantazhet:<\/h4>\n<p><\/p>\n<ul>\n<li>Shpejt\u00ebsi e lart\u00eb t\u00eb operimit si p\u00ebr enumerimin e subdomen\u00ebve DNS ashtu edhe p\u00ebr bruteforce t\u00eb skedar\u00ebve dhe direktorive.<\/li>\n<\/ul>\n<p><\/p>\n<h4>Disavantazhet:<\/h4>\n<p><\/p>\n<ul>\n<li>N\u00eb versionin aktual nuk mb\u00ebshtet vendosjen e header-ave HTTP;<\/li>\n<li>Default konsideron t\u00eb vlefshme vet\u00ebm disa nga kodet e statusit HTTP (200, 204, 301, 302, 307).<\/li>\n<\/ul>\n<p>\n<img decoding=\"async\" alt=\"Mjetet Web, ose nga ku t\u00eb nisin p\u00ebntester\u00ebt?\" src=\"\/wp-content\/uploads\/2019\/05\/2ce6c6ae6bbd0d2dc851ed632b5bc309.gif\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h2><noindex><a rel=\"nofollow\" name=\"Arjun\"><\/a><\/noindex>LinkFinder<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/s0md3v\/Arjun\">LinkFinder<\/a><\/noindex> \u2014 nj\u00eb mjet p\u00ebr bruteforce t\u00eb parametrave t\u00eb fshehur HTTP n\u00eb GET\/POST parametrat, si dhe n\u00eb JSON. Fjalori i nd\u00ebrtuar ka 25,980 fjal\u00eb, t\u00eb cilat Ajrun i kontrollon n\u00eb pothuajse 30 sekonda. Thelbi \u00ebsht\u00eb se Ajrun nuk kontrollon \u00e7do paramet\u00ebr ve\u00e7mas, por kontrollon menj\u00ebher\u00eb ~1000 parametra dhe sheh n\u00ebse \u00ebsht\u00eb ndryshuar p\u00ebrgjigjja. N\u00ebse p\u00ebrgjigjja \u00ebsht\u00eb ndryshuar, at\u00ebher\u00eb e ndan k\u00ebt\u00eb 1000 parametrash n\u00eb dy pjes\u00eb dhe kontrollon se cila nga k\u00ebto pjes\u00eb ndikon n\u00eb p\u00ebrgjigje. K\u00ebshtu, p\u00ebrmes nj\u00eb k\u00ebrkimi t\u00eb thjesht\u00eb binar, gjen parametrin ose disa parametra t\u00eb fshehur q\u00eb ndikonin n\u00eb p\u00ebrgjigje dhe, p\u00ebr rrjedhoj\u00eb, mund t\u00eb ekzistojn\u00eb. <\/p>\n<h4>Avantazhet:<\/h4>\n<p><\/p>\n<ul>\n<li>Shpejt\u00ebsi e lart\u00eb operimi p\u00ebrmes k\u00ebrkimit binar;<\/li>\n<li>Mb\u00ebshtetje p\u00ebr parametrat GET\/POST, si dhe parametrat n\u00eb form\u00eb JSON;<\/li>\n<\/ul>\n<p>\nM\u00ebnyr\u00eb e ngjashme funksionon dhe plugin-i p\u00ebr Burp Suite \u2014 <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/PortSwigger\/param-miner\"><b>param-miner<\/b><\/a><\/noindex>, i cili gjithashtu \u00ebsht\u00eb shum\u00eb i mir\u00eb n\u00eb k\u00ebrkimin e parametrave t\u00eb fshehur HTTP. M\u00eb shum\u00eb do t\u00eb flasim p\u00ebr t\u00eb n\u00eb artikullin e ardhsh\u00ebm rreth Burp dhe plugin-eve t\u00eb tij.<br \/>\n<img decoding=\"async\" alt=\"Mjetet Web, ose nga ku t\u00eb nisin p\u00ebntester\u00ebt?\" src=\"\/wp-content\/uploads\/2019\/05\/9571552d9954c5d9902ab658ecb77bbb.gif\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h2><noindex><a rel=\"nofollow\" name=\"LinkFinder\"><\/a><\/noindex>JSParser<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/GerbenJavado\/LinkFinder\">JSParser<\/a><\/noindex> \u2014 nj\u00eb skript n\u00eb Python p\u00ebr k\u00ebrkimin e lidhjeve n\u00eb skedar\u00ebt JavaScript. Ndonj\u00ebher\u00eb \u00ebsht\u00eb e dobishme p\u00ebr t\u00eb gjetur endpoint-et\/URL t\u00eb fshehura ose t\u00eb harruara n\u00eb nj\u00eb aplikacion uebi.<\/p>\n<h4>Avantazhet:<\/h4>\n<p><\/p>\n<ul>\n<li>I shpejt\u00eb;<\/li>\n<li>Ka nj\u00eb plugin t\u00eb ve\u00e7ant\u00eb p\u00ebr Chrome t\u00eb bazuar n\u00eb LinkFinder.<\/li>\n<\/ul>\n<p>.<\/p>\n<h4>Disavantazhet:<\/h4>\n<p><\/p>\n<ul>\n<li>P\u00ebrfundim i pak\u00ebndsh\u00ebm;<\/li>\n<li>Nuk analizon JavaScript n\u00eb dinamik\u00eb;<\/li>\n<li>Logjika e thjesht\u00eb e k\u00ebrkimit t\u00eb lidhjeve \u2014 n\u00ebse JavaScript \u00ebsht\u00eb ndonj\u00ebher\u00eb i obfuscizuar, ose lidhjet fillimisht mungojn\u00eb dhe gjenerohen n\u00eb dinamik\u00eb, nuk do t\u00eb jet\u00eb n\u00eb gjendje t\u00eb gjej\u00eb asgj\u00eb. <\/li>\n<\/ul>\n<p>\n<img decoding=\"async\" alt=\"Mjetet Web, ose nga ku t\u00eb nisin p\u00ebntester\u00ebt?\" src=\"\/wp-content\/uploads\/2019\/05\/4cbb12ad81b249cdb21a2f4861acc346.gif\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h2><noindex><a rel=\"nofollow\" name=\"JSParser\"><\/a><\/noindex>NoSQLMap<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/nahamsec\/JSParser\">NoSQLMap<\/a><\/noindex> \u2014 nj\u00eb skript n\u00eb Python q\u00eb p\u00ebrdor <noindex><a rel=\"nofollow\" href=\"https:\/\/www.tornadoweb.org\/en\/stable\/\">Tornado<\/a><\/noindex> dhe <noindex><a rel=\"nofollow\" href=\"https:\/\/beautifier.io\/\">JSBeautifier<\/a><\/noindex> p\u00ebr t\u00eb analizuar URL-t\u00eb relative nga skedar\u00ebt JavaScript. Shum\u00eb e dobishme p\u00ebr t\u00eb zbuluar k\u00ebrkesat AJAX dhe p\u00ebr t\u00eb hartuar nj\u00eb list\u00eb t\u00eb metodave API me t\u00eb cilat aplikacioni nd\u00ebrvepron. Punon efikasitet me LinkFinder. <\/p>\n<h4>Avantazhet:<\/h4>\n<p><\/p>\n<ul>\n<li>Parsing i shpejt\u00eb i skedar\u00ebve JavaScript.<\/li>\n<\/ul>\n<p>\n<img decoding=\"async\" alt=\"Mjetet Web, ose nga ku t\u00eb nisin p\u00ebntester\u00ebt?\" src=\"\/wp-content\/uploads\/2019\/05\/20812f77021319d9d1d7eafd5d394383.gif\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h2><noindex><a rel=\"nofollow\" name=\"sqlmap\"><\/a><\/noindex>sqlmap<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/sqlmapproject\/sqlmap\">sqlmap<\/a><\/noindex> \u2014 ndoshta nj\u00eb nga mjetet m\u00eb t\u00eb njohura p\u00ebr analizimin e aplikacioneve n\u00eb web. Sqlmap automatizon k\u00ebrkimin dhe shfryt\u00ebzimin e SQL-injeksioneve, punon me disa dialekte SQL dhe ka nj\u00eb arsenal t\u00eb madh teknikash, duke filluar nga thjesht\u00ebsit\u00eb si \u201ccitatet e drejtp\u00ebrdrejta\u201d deri te vektor\u00ebt kompleks\u00eb p\u00ebr SQL-injeksione t\u00eb bazuara n\u00eb koh\u00eb. P\u00ebr m\u00eb tep\u00ebr, ka shum\u00eb teknika p\u00ebr shfryt\u00ebzim t\u00eb m\u00ebtejsh\u00ebm p\u00ebr DBMS t\u00eb ndryshme, k\u00ebshtu q\u00eb \u00ebsht\u00eb i dobish\u00ebm jo vet\u00ebm si skaner p\u00ebr SQL-injeksione, por gjithashtu si nj\u00eb mjet i fuqish\u00ebm p\u00ebr shfryt\u00ebzimin e SQL-injeksioneve t\u00eb gjetura m\u00eb par\u00eb.<\/p>\n<h4>Avantazhet:<\/h4>\n<p><\/p>\n<ul>\n<li>Numri i madh i teknikave dhe vektor\u00ebve t\u00eb ndrysh\u00ebm;<\/li>\n<li>Numri i ul\u00ebt i alarmeve false;<\/li>\n<li>Shum\u00eb mund\u00ebsi p\u00ebr konfigurim t\u00eb sakt\u00eb, teknika t\u00eb ndryshme, DB e cibl\u00ebs, skenat p\u00ebr t\u00eb anashkaluar WAF;<\/li>\n<li>Mund\u00ebsia e krijimit t\u00eb nj\u00eb dump-i t\u00eb t\u00eb dh\u00ebnave t\u00eb daljes;<\/li>\n<li>Shum\u00eb mund\u00ebsi t\u00eb ndryshme p\u00ebr shfryt\u00ebzim, p\u00ebr shembull, p\u00ebr disa DB \u2014 ngarkim\/zhbllokim automatik i skedar\u00ebve, marrja e mund\u00ebsis\u00eb p\u00ebr ekzekutimin e komandave (RCE) dhe t\u00eb tjera;<\/li>\n<li>Mb\u00ebshtetje p\u00ebr lidhje t\u00eb drejtp\u00ebrdrejta me DB duke p\u00ebrdorur t\u00eb dh\u00ebnat e marra gjat\u00eb sulmit;<\/li>\n<li>Mund t\u00eb pranoj\u00eb nj\u00eb skedar tekstual me rezultatet e pun\u00ebs s\u00eb Burp \u2014 nuk \u00ebsht\u00eb e nevojshme t\u00eb krijoni manualisht t\u00eb gjitha atributet e komand\u00ebs.<\/li>\n<\/ul>\n<p><\/p>\n<h4>Disavantazhet:<\/h4>\n<p><\/p>\n<ul>\n<li>E v\u00ebshtir\u00eb p\u00ebr tu personalizuar, p\u00ebr shembull, t\u00eb shkruani disa kontrolle t\u00eb veta p\u00ebr shkak t\u00eb dokumentacionit t\u00eb varf\u00ebr p\u00ebr k\u00ebt\u00eb;<\/li>\n<li>Pa konfigurimet p\u00ebrkat\u00ebse, kryen nj\u00eb grup t\u00eb paplot\u00eb kontrollesh, gj\u00eb q\u00eb mund t\u00eb jdhe iluzion.<\/li>\n<\/ul>\n<p>\n<img decoding=\"async\" alt=\"Mjetet Web, ose nga ku t\u00eb nisin p\u00ebntester\u00ebt?\" src=\"\/wp-content\/uploads\/2019\/05\/f99ac42bd3139894668353924112d416.gif\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h2><noindex><a rel=\"nofollow\" name=\"NoSQLMap\"><\/a><\/noindex>oxml_xxe<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/codingo\/NoSQLMap\">oxml_xxe<\/a><\/noindex> \u2014 nj\u00eb mjet n\u00eb Python p\u00ebr automatizimin e k\u00ebrkimit dhe shfryt\u00ebzimit t\u00eb NoSQL-injeksioneve. E p\u00ebrshtatshme p\u00ebr t'u p\u00ebrdorur jo vet\u00ebm n\u00eb bazat e t\u00eb dh\u00ebnave NoSQL, por gjithashtu gjat\u00eb auditeve t\u00eb aplikacioneve n\u00eb web q\u00eb p\u00ebrdorin NoSQL.<\/p>\n<h4>Avantazhet:<\/h4>\n<p><\/p>\n<ul>\n<li>Ashtu si sqlmap, jo vet\u00ebm q\u00eb gjen nj\u00eb potencial t\u00eb dob\u00ebsie, por gjithashtu kontrollet mund\u00ebsin\u00eb e shfryt\u00ebzimit t\u00eb saj p\u00ebr MongoDB dhe CouchDB.<\/li>\n<\/ul>\n<p><\/p>\n<h4>Disavantazhet:<\/h4>\n<p><\/p>\n<ul>\n<li>Nuk mb\u00ebshtet NoSQL p\u00ebr Redis, Cassandra, ky drejtim \u00ebsht\u00eb n\u00eb zhvillim.<\/li>\n<\/ul>\n<h2><noindex><a rel=\"nofollow\" name=\"oxml_xxe\"><\/a><\/noindex>tplmap<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/BuffaloWill\/oxml_xxe\">tplmap<\/a><\/noindex> \u2014 nj\u00eb mjet p\u00ebr integrimin e eksploitave XXE XML n\u00eb lloje t\u00eb ndryshme skedar\u00ebsh, n\u00eb t\u00eb cilat n\u00eb ndonj\u00eb form\u00eb p\u00ebrdoret formati XML.<\/p>\n<h4>Avantazhet:<\/h4>\n<p><\/p>\n<ul>\n<li>Mb\u00ebshtet shum\u00eb formate t\u00eb njohura, si DOCX, ODT, SVG, XML.<\/li>\n<\/ul>\n<p><\/p>\n<h4>Disavantazhet:<\/h4>\n<p><\/p>\n<ul>\n<li>Mb\u00ebshtetje p\u00ebr PDF, JPEG, GIF nuk \u00ebsht\u00eb plot\u00ebsisht e realizuar;<\/li>\n<li>Krijon vet\u00ebm nj\u00eb skedar. P\u00ebr t\u00eb zgjidhur k\u00ebt\u00eb problem, mund t\u00eb p\u00ebrdorni mjetin <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/BuffaloWill\/oxml_xxe\">docem<\/a><\/noindex>, q\u00eb mund t\u00eb krijoj\u00eb nj\u00eb num\u00ebr t\u00eb madh skedar\u00ebsh me payloads n\u00eb vende t\u00eb ndryshme. <\/li>\n<\/ul>\n<p>\nUtilitatet e p\u00ebrmendura m\u00eb sip\u00ebr b\u00ebjn\u00eb nj\u00eb pun\u00eb t\u00eb shk\u00eblqyer n\u00eb testimin e XXE n\u00eb rastin e ngarkimit t\u00eb dokumenteve q\u00eb p\u00ebrmbajn\u00eb XML. Por gjithashtu mos harroni se trajtuesit e formateve XML mund t\u00eb gjejm\u00eb n\u00eb shum\u00eb raste t\u00eb tjera, p\u00ebr shembull, XML mund t\u00eb p\u00ebrdoret si nj\u00eb format t\u00eb dh\u00ebnash n\u00eb vend t\u00eb JSON-it.<\/p>\n<p>Prandaj, rekomandojm\u00eb t\u00eb kushtoni v\u00ebmendje k\u00ebtij depoziti, q\u00eb p\u00ebrmban nj\u00eb num\u00ebr t\u00eb madh payload-esh t\u00eb ndryshme: <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/swisskyrepo\/PayloadsAllTheThings\">PayloadsAllTheThings<\/a><\/noindex>.<\/p>\n<h2><noindex><a rel=\"nofollow\" name=\"tplmap\"><\/a><\/noindex>Weakpass<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/epinna\/tplmap\">Weakpass<\/a><\/noindex> \u2014 nj\u00eb mjet n\u00eb Python p\u00ebr identifikimin automatik dhe shfryt\u00ebzimin e dob\u00ebsive t\u00eb Server-Side Template Injection, ka cil\u00ebsime dhe flaga t\u00eb ngjashme me sqlmap. P\u00ebrdor disa teknika dhe vektora t\u00eb ndrysh\u00ebm, duke p\u00ebrfshir\u00eb injeksionet blind, si dhe ka teknika p\u00ebr ekzekutimin e kodit dhe ngarkimin\/d\u00ebshkarkimin e skedar\u00ebve t\u00eb rast\u00ebsish\u00ebm. P\u00ebr m\u00eb tep\u00ebr, ka n\u00eb arsenalin e vet teknika p\u00ebr nj\u00eb duzin\u00eb motor\u00ebsh t\u00eb ndrysh\u00ebm t\u00eb shabloneve dhe disa teknika p\u00ebr k\u00ebrkimin e injeksioneve t\u00eb kodit t\u00eb ngjash\u00ebm me eval() n\u00eb Python, Ruby, PHP, JavaScript. N\u00eb rastin e shfryt\u00ebzimit t\u00eb suksessh\u00ebm, hap nj\u00eb konsol interaktive.<\/p>\n<h4>Avantazhet:<\/h4>\n<p><\/p>\n<ul>\n<li>Numri i madh i teknikave dhe vektor\u00ebve t\u00eb ndrysh\u00ebm; <\/li>\n<li>Mb\u00ebshtet shum\u00eb motor\u00eb p\u00ebr renderimin e shabloneve;<\/li>\n<li>Shum\u00eb teknika shfryt\u00ebzimi.<\/li>\n<\/ul>\n<p><\/p>\n<h2><noindex><a rel=\"nofollow\" name=\"CeWL\"><\/a><\/noindex>CeWL<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/digininja\/CeWL\">CeWL<\/a><\/noindex> \u2014 nj\u00eb gjenerues fjalor\u00ebsh n\u00eb Ruby, e krijuar p\u00ebr t\u00eb nxjerr\u00eb fjal\u00eb unike nga nj\u00eb sit t\u00eb dh\u00ebnash t\u00eb caktuar, kalon n\u00ebp\u00ebr lidhjet n\u00eb sit me thell\u00ebsin\u00eb e specifikuar. Fjalori i p\u00ebrpiluar nga fjal\u00ebt unike m\u00eb pas mund t\u00eb p\u00ebrdoret p\u00ebr t\u00eb kryer brute force n\u00eb sh\u00ebrbime ose brute force p\u00ebr skedar\u00eb dhe direktor\u00eb n\u00eb t\u00eb nj\u00ebjtin sit, ose p\u00ebr t\u00eb sulmuar hash-\u00ebt e marr\u00eb me hashcat ose John the Ripper. E dobishme p\u00ebr p\u00ebrpilimin e nj\u00eb liste \"target\" t\u00eb fjal\u00ebve t\u00eb mundshme t\u00eb fjal\u00ebve kaluese.<\/p>\n<h4>Avantazhet:<\/h4>\n<p><\/p>\n<ul>\n<li>E leht\u00eb p\u00ebr tu p\u00ebrdorur.<\/li>\n<\/ul>\n<p><\/p>\n<h4>Disavantazhet:<\/h4>\n<p><\/p>\n<ul>\n<li>Duhet t\u00eb jeni t\u00eb kujdessh\u00ebm me thell\u00ebsin\u00eb e k\u00ebrkimit p\u00ebr t\u00eb mos kapur domain t\u00eb tep\u00ebrt.<\/li>\n<\/ul>\n<p><\/p>\n<h2><noindex><a rel=\"nofollow\" name=\"Weakpass\"><\/a><\/noindex>AEM_hacker<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/weakpass.com\">AEM_hacker<\/a><\/noindex> \u2014 nj\u00eb sh\u00ebrbim q\u00eb p\u00ebrmban shum\u00eb fjalor\u00eb me fjal\u00ebkalime unike. Jasht\u00ebzakonisht e dobishme p\u00ebr detyra t\u00eb ndryshme q\u00eb lidhen me thyerjen e fjal\u00ebkalimeve, duke filluar nga brute force online t\u00eb llogarive n\u00eb sh\u00ebrbimet e synuara, deri te brute force offline t\u00eb hash-eve t\u00eb marra me <noindex><a rel=\"nofollow\" href=\"https:\/\/hashcat.net\/hashcat\/\">hashcat<\/a><\/noindex> ose <noindex><a rel=\"nofollow\" href=\"https:\/\/www.openwall.com\/john\/\">John The Ripper<\/a><\/noindex>. Ka rreth 8 miliard\u00eb fjal\u00eb kalimi me gjat\u00ebsi nga 4 n\u00eb 25 karaktere. <\/p>\n<h4>Avantazhet:<\/h4>\n<p><\/p>\n<ul>\n<li>P\u00ebrmban si fjalor\u00eb specifik\u00eb, ashtu dhe fjalor\u00eb me fjal\u00ebkalime m\u00eb t\u00eb zakonshme \u2014 mund t\u00eb zgjidhni nj\u00eb fjalor specifik p\u00ebr nevojat tuaja;<\/li>\n<li>Fjalor\u00ebt p\u00ebrdit\u00ebsohen dhe plot\u00ebsohen me fjal\u00ebkalime t\u00eb reja;<\/li>\n<li>Fjalor\u00ebt jan\u00eb renditur sipas efikasitetit. Mund t\u00eb zgjidhni mund\u00ebsin\u00eb si p\u00ebr nj\u00eb brut q\u00eb \u00ebsht\u00eb i shpejt\u00eb n\u00eb internet, ashtu edhe p\u00ebr p\u00ebrzgjedhjen e holl\u00ebsishme t\u00eb fjal\u00ebkalimeve nga nj\u00eb fjalor i gjer\u00eb me rrjedhjet m\u00eb t\u00eb fundit;<\/li>\n<li>Ka nj\u00eb kalkulator q\u00eb tregon koh\u00ebn e brut t\u00eb fjal\u00ebkalimeve n\u00eb pajisjen tuaj.<\/li>\n<\/ul>\n<p>\n<img decoding=\"async\" alt=\"Mjetet Web, ose nga ku t\u00eb nisin p\u00ebntester\u00ebt?\" src=\"\/wp-content\/uploads\/2019\/05\/1e9daeca2b42b5ba4dd7750bee2ef36c.gif\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nN\u00eb nj\u00eb grup t\u00eb ve\u00e7ant\u00eb d\u00ebshirojm\u00eb t\u00eb ndajm\u00eb mjetet p\u00ebr kontrollet e CMS: WPScan, JoomScan dhe AEM hacker. <\/p>\n<h2><noindex><a rel=\"nofollow\" name=\"AEM_hacker\"><\/a><\/noindex>JoomScan<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/0ang3el\/aem-hacker\">AEM hacker<\/a><\/noindex> \u2014 nj\u00eb mjet p\u00ebr identifikimin e dob\u00ebsive n\u00eb aplikacionet Adobe Experience Manager (AEM). <\/p>\n<h4>Avantazhet:<\/h4>\n<p><\/p>\n<ul>\n<li>Mund t\u00eb identifikoj\u00eb aplikacionet AEM nga lista e URL-ve q\u00eb i jepen;<\/li>\n<li>P\u00ebrmban skenar\u00eb p\u00ebr t\u00eb marr\u00eb RCE p\u00ebrmes ngarkimit t\u00eb JSP-shell dhe shfryt\u00ebzimit t\u00eb SSRF.<\/li>\n<\/ul>\n<p><\/p>\n<h2><noindex><a rel=\"nofollow\" name=\"JoomScan\"><\/a><\/noindex>WPScan<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/rezasp\/joomscan\">WPScan<\/a><\/noindex> \u2014 nj\u00eb mjet n\u00eb Perl p\u00ebr automatizimin e zbulimit t\u00eb dob\u00ebsive gjat\u00eb disavantazhimit t\u00eb Joomla CMS. <\/p>\n<h4>Avantazhet:<\/h4>\n<p><\/p>\n<ul>\n<li>I aft\u00eb t\u00eb gjej\u00eb mang\u00ebsi konfiguracioni dhe probleme t\u00eb cilat lidhen me cil\u00ebsimet e administrator\u00ebve;<\/li>\n<li>Enumeron versionet e Joomla dhe dob\u00ebsit\u00eb q\u00eb lidhen me to, po ashtu p\u00ebr komponent\u00ebt e ve\u00e7ant\u00eb;<\/li>\n<li>P\u00ebrmban m\u00eb shum\u00eb se 1000 eksploite p\u00ebr komponent\u00ebt Joomla;<\/li>\n<li>Shfaq raportet p\u00ebrfundimtare n\u00eb formate tekst dhe HTML.<\/li>\n<\/ul>\n<p>\n<img decoding=\"async\" alt=\"Mjetet Web, ose nga ku t\u00eb nisin p\u00ebntester\u00ebt?\" src=\"\/wp-content\/uploads\/2019\/05\/2f9561213895d338f8e88127bf02c3e6.gif\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h2><noindex><a rel=\"nofollow\" name=\"WPScan\"><\/a><\/noindex>\u2014 nj\u00eb mjet n\u00eb Go p\u00ebr gjetjen dhe enumerimin e n\u00ebn-domen\u00ebve DNS dhe p\u00ebr hartimin e rrjetit t\u00eb jasht\u00ebm. Amass \u00ebsht\u00eb nj\u00eb projekt OWASP, i krijuar p\u00ebr t\u00eb treguar se si duken organizatat n\u00eb internet p\u00ebr nj\u00eb v\u00ebzhgues t\u00eb jasht\u00ebm. Emrat e n\u00ebn-domen\u00ebve Amass i merr n\u00eb m\u00ebnyra t\u00eb ndryshme, duke p\u00ebrdorur si enumerimin rekurziv t\u00eb n\u00ebn-domen\u00ebve ashtu edhe k\u00ebrkimin n\u00eb burime t\u00eb hapura.<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/wpscanteam\/wpscan\">\u2014 nj\u00eb mjet n\u00eb Go p\u00ebr gjetjen dhe enumerimin e n\u00ebn-domen\u00ebve DNS dhe p\u00ebr hartimin e rrjetit t\u00eb jasht\u00ebm. Amass \u00ebsht\u00eb nj\u00eb projekt OWASP, i krijuar p\u00ebr t\u00eb treguar se si duken organizatat n\u00eb internet p\u00ebr nj\u00eb v\u00ebzhgues t\u00eb jasht\u00ebm. Emrat e n\u00ebn-domen\u00ebve Amass i merr n\u00eb m\u00ebnyra t\u00eb ndryshme, duke p\u00ebrdorur si enumerimin rekurziv t\u00eb n\u00ebn-domen\u00ebve ashtu edhe k\u00ebrkimin n\u00eb burime t\u00eb hapura.<\/a><\/noindex> \u2014 nj\u00eb mjet p\u00ebr skanimin e faqeve n\u00eb WordPress, ka n\u00eb arsenalin e tij dob\u00ebsi si p\u00ebr motorin WordPress vet\u00eb, ashtu edhe p\u00ebr disa plugina.<\/p>\n<h4>Avantazhet:<\/h4>\n<p><\/p>\n<ul>\n<li>I aft\u00eb t\u00eb enumeroj\u00eb jo vet\u00ebm pluginat dhe temat jo t\u00eb sigurta t\u00eb WordPress, por gjithashtu t\u00eb marr\u00eb nj\u00eb list\u00eb p\u00ebrdoruesish dhe skedar\u00eb TimThumb;<\/li>\n<li>Mund t\u00eb kryej\u00eb sulme brut-forcimi n\u00eb faqet e WordPress.<\/li>\n<\/ul>\n<p><\/p>\n<h4>Disavantazhet:<\/h4>\n<p><\/p>\n<ul>\n<li>Pa konfigurimet p\u00ebrkat\u00ebse, kryen nj\u00eb grup t\u00eb paplot\u00eb kontrollesh, gj\u00eb q\u00eb mund t\u00eb jdhe iluzion.<\/li>\n<\/ul>\n<p>\n<img decoding=\"async\" alt=\"Mjetet Web, ose nga ku t\u00eb nisin p\u00ebntester\u00ebt?\" src=\"\/wp-content\/uploads\/2019\/05\/eb391071eb62381da16c425d95e7cec5.gif\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nN\u00eb t\u00ebr\u00ebsi, njer\u00ebzit e ndrysh\u00ebm preferojn\u00eb mjete t\u00eb ndryshme p\u00ebr pun\u00eb: t\u00eb gjitha jan\u00eb t\u00eb mira n\u00eb m\u00ebnyr\u00ebn e tyre, dhe ajo q\u00eb i p\u00eblqen nj\u00eb personi mund t\u00eb mos i p\u00ebrshtatet aspak nj\u00eb tjetri. N\u00ebse mendoni se ne nuk e kemi konsideruar ndonj\u00eb utilit m\u00eb t\u00eb mir\u00eb, na shkruani n\u00eb komente!<br \/>\n<br \/>Burimi: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/dsec\/blog\/452836\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u043c \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u044b\u0432\u0430\u0442\u044c \u043e \u043f\u043e\u043b\u0435\u0437\u043d\u044b\u0445 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0445 \u0434\u043b\u044f \u043f\u0435\u043d\u0442\u0435\u0441\u0442\u0435\u0440\u0430. \u0412 \u043d\u043e\u0432\u043e\u0439 \u0441\u0442\u0430\u0442\u044c\u0435 \u043c\u044b \u0440\u0430\u0441\u0441\u043c\u043e\u0442\u0440\u0438\u043c \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u044b \u0434\u043b\u044f \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u043e\u0441\u0442\u0438 \u0432\u0435\u0431-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439. \u041d\u0430\u0448 \u043a\u043e\u043b\u043b\u0435\u0433\u0430 BeLove \u0443\u0436\u0435 \u0434\u0435\u043b\u0430\u043b \u043f\u043e\u0434\u043e\u0431\u043d\u0443\u044e \u043f\u043e\u0434\u0431\u043e\u0440\u043a\u0443 \u043e\u043a\u043e\u043b\u043e \u0441\u0435\u043c\u0438 \u043b\u0435\u0442 \u043d\u0430\u0437\u0430\u0434. \u0418\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u043e \u0432\u0437\u0433\u043b\u044f\u043d\u0443\u0442\u044c, \u043a\u0430\u043a\u0438\u0435 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u044b \u0441\u043e\u0445\u0440\u0430\u043d\u0438\u043b\u0438 \u0438 \u0443\u043a\u0440\u0435\u043f\u0438\u043b\u0438 \u0441\u0432\u043e\u0438 \u043f\u043e\u0437\u0438\u0446\u0438\u0438, \u0430 \u043a\u0430\u043a\u0438\u0435 \u043e\u0442\u043e\u0448\u043b\u0438 \u043d\u0430 \u0437\u0430\u0434\u043d\u0438\u0439 \u043f\u043b\u0430\u043d \u0438 \u0441\u0435\u0439\u0447\u0430\u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0440\u0435\u0434\u043a\u043e. \u041e\u0442\u043c\u0435\u0442\u0438\u043c, \u0447\u0442\u043e \u0441\u044e\u0434\u0430 \u0436\u0435 \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0441\u044f \u0438 Burp Suite, [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":26108,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-34646","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.2 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u043c \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u044b\u0432\u0430\u0442\u044c \u043e \u043f\u043e\u043b\u0435\u0437\u043d\u044b\u0445 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0445 \u0434\u043b\u044f \u043f\u0435\u043d\u0442\u0435\u0441\u0442\u0435\u0440\u0430.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/web-tools-ili-s-chego-nachat-pentesteru\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.2\" \/>\n\t\t<meta property=\"og:locale\" content=\"sq_AL\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47Web tools, \u0438\u043b\u0438 \u0441 \u0447\u0435\u0433\u043e \u043d\u0430\u0447\u0430\u0442\u044c \u043f\u0435\u043d\u0442\u0435\u0441\u0442\u0435\u0440\u0443? | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u043c \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u044b\u0432\u0430\u0442\u044c \u043e \u043f\u043e\u043b\u0435\u0437\u043d\u044b\u0445 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0445 \u0434\u043b\u044f \u043f\u0435\u043d\u0442\u0435\u0441\u0442\u0435\u0440\u0430.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/web-tools-ili-s-chego-nachat-pentesteru\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T18:59:35+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2019-10-31T18:59:35+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Mjetet n\u00eb internet, ose nga ku t\u00eb filloni p\u00ebr p\u00ebntesterin? | ProHoster","description":"Vazhdojm\u00eb t\u00eb tregojm\u00eb p\u00ebr mjete t\u00eb dobishme p\u00ebr p\u00ebntesterin.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/web-tools-ili-s-chego-nachat-pentesteru","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Web tools, \u0438\u043b\u0438 \u0441 \u0447\u0435\u0433\u043e \u043d\u0430\u0447\u0430\u0442\u044c \u043f\u0435\u043d\u0442\u0435\u0441\u0442\u0435\u0440\u0443? | ProHoster","og:description":"\u041f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u043c \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u044b\u0432\u0430\u0442\u044c \u043e \u043f\u043e\u043b\u0435\u0437\u043d\u044b\u0445 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0445 \u0434\u043b\u044f \u043f\u0435\u043d\u0442\u0435\u0441\u0442\u0435\u0440\u0430.","og:url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/web-tools-ili-s-chego-nachat-pentesteru","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:59:35+00:00","article:modified_time":"2019-10-31T18:59:35+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"34646","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 20:04:30","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 02:17:23","updated":"2026-01-21 20:04:30","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/34646","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=34646"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/34646\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media\/26108"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=34646"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=34646"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=34646"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}