ืคึผืจืึธื”ืึธืกื˜ืขืจ > ื‘ืœืึธื’ > ืึทื“ืžื™ื ื™ืกื˜ืจืึทืฆื™ืข > ืึธืคึผืฉืึทืฆื•ื ื’ ืคื•ืŸ ืคืจื™ื™ ืžื›ืฉื™ืจื™ื ืคึฟืึทืจ ืคึผืขื ื˜ืขืกื˜ื™ื ื’ ื•ื•ืขื‘ ืจืขืกื•ืจืกืŸ ืื•ืŸ ืžืขืจ ื•ื• 2

ืึธืคึผืฉืึทืฆื•ื ื’ ืคื•ืŸ ืคืจื™ื™ ืžื›ืฉื™ืจื™ื ืคึฟืึทืจ ืคึผืขื ื˜ืขืกื˜ื™ื ื’ ื•ื•ืขื‘ ืจืขืกื•ืจืกืŸ ืื•ืŸ ืžืขืจ ื•ื• 2

ืขื˜ืœืขื›ืข ืžืึธืœ ืฆื•ืจื™ืง ืื™ืš ื’ืขืฉืจื™ื‘ืŸ ื•ื•ืขื’ืŸ this, ืึธื‘ืขืจ ืึท ื‘ื™ืกืœ ืงื ืึทืคึผ ืื•ืŸ ื›ืึทืึธื˜ื™ืฉ. ื“ืขืจื ืึธื›ื“ืขื, ืื™ืš ื‘ืึทืฉืœืึธืกืŸ ืฆื• ื™ืงืกืคึผืึทื ื“ ื“ื™ ืจืฉื™ืžื” ืคื•ืŸ ืžื›ืฉื™ืจื™ื ืื™ืŸ ื“ื™ ืจืขืฆืขื ื–ื™ืข, ืœื™ื™ื’ืŸ ืกื˜ืจื•ืงื˜ื•ืจ ืฆื• ื“ืขื ืึทืจื˜ื™ืงืœ, ืื•ืŸ ื ืขืžืขืŸ ืงืจื™ื˜ื™ืง ืื™ืŸ ื—ืฉื‘ื•ืŸ (ืคื™ืœืข ื“ืึทื ืงืขืŸ) ืœืขืคื˜ื™ ืคึฟืึทืจ ืขืฆื”) ืื•ืŸ ื’ืขืฉื™ืงื˜ ืขืก ืฆื• ืึท ืคืึทืจืžืขืกื˜ ืื•ื™ืฃ SecLab (ืื•ืŸ ืืจื•ื™ืก ืจื•ื ื’, ืื‘ืข ืจ ืคื• ืŸ ืืœ ืข ืคืืจืฉื˜ืฒ ื˜ ื–ื™ ืš ืงืฒ ืŸ ื– ืฒ ื ื™ืฉ ื˜ ื’ืขื–ืขืŸ). ื“ื™ ืคืึทืจืžืขืกื˜ ืื™ื– ืื™ื‘ืขืจ, ื“ื™ ืจืขื–ื•ืœื˜ืื˜ืŸ ื–ืขื ืขืŸ ืžื•ื“ื™ืข ืื•ืŸ ืžื™ื˜ ืึท ืงืœืึธืจ ื’ืขื•ื•ื™ืกืŸ ืื™ืš ืงืขื ืขืŸ ืึทืจื•ื™ืกื’ืขื‘ืŸ ืขืก (ื“ืขืจ ืึทืจื˜ื™ืงืœ) ืื•ื™ืฃ Habrรฉ.

Free ื•ื•ืขื‘ ืึทืคึผืคึผืœื™ืงืึทื˜ื™ืึธืŸ ืคึผืขื ื˜ืขืกื˜ืขืจ ืžื›ืฉื™ืจื™ื

ืื™ืŸ ื“ืขื ืึทืจื˜ื™ืงืœ ืื™ืš ื•ื•ืขืœ ืจืขื“ืŸ ื•ื•ืขื’ืŸ ื“ื™ ืžืขืจืกื˜ ืคืึธืœืงืก ืžื›ืฉื™ืจื™ื ืคึฟืึทืจ ืคึผืขื ื˜ืขืกื˜ื™ื ื’ (ื“ื•ืจื›ื“ืจื•ื ื’ ื˜ืขืกืฅ) ืคื•ืŸ ื•ื•ืขื‘ ืึทืคึผืœืึทืงื™ื™ืฉืึทื ื– ื ื™ืฆืŸ ื“ื™ "ืฉื•ื•ืึทืจืฅ ืงืขืกื˜ืœ" ืกื˜ืจืึทื˜ืขื’ื™ืข.
ืฆื• ื˜ืึธืŸ ื“ืึธืก, ืžื™ืจ ื•ื•ืขืœืŸ ืงื•ืงืŸ ืื™ืŸ ื™ื•ื˜ื™ืœืึทื˜ื™ื– ื•ื•ืึธืก ื•ื•ืขื˜ ื”ืขืœืคึฟืŸ ืžื™ื˜ ื“ืขื ื˜ื™ืคึผ ืคื•ืŸ ื˜ืขืกื˜ื™ื ื’. ื‘ืึทื˜ืจืึทื›ื˜ืŸ ื“ื™ ืคืืœื’ืขื ื“ืข ืคึผืจืึธื“ื•ืงื˜ ืงืึทื˜ืขื’ืึธืจื™ืขืก:

  1. ื ืขืฅ ืกืงืึทื ืขืจื–
  2. ื•ื•ืขื‘ ืฉืจื™ืคื˜ ื‘ืจื™ื˜ืฉ ืกืงืึทื ืขืจื–
  3. ืขืงืกืคึผืœืึธื™ื˜ืึทื˜ื™ืึธืŸ
  4. ืึธื˜ืึทืžื™ื™ืฉืึทืŸ ืคื•ืŸ ื™ื ื“ื–ืฉืขืงืฉืึทื ื–
  5. ื“ื™ื‘ื•ื’ืขืจื– (ืกื ื™ืคืขืจืก, ื”ื™ื’ืข ืคึผืจืึทืงืกื™ื–, ืืื–"ื• ื•)


ืขื˜ืœืขื›ืข ืคึผืจืึธื“ื•ืงื˜ืŸ ื”ืึธื‘ืŸ ืึท ื•ื ื™ื•ื•ืขืจืกืึทืœ "ื›ืึทืจืึทืงื˜ืขืจ", ืึทื–ื•ื™ ืื™ืš ื•ื•ืขืœ ืงืœืึทืกื™ืคื™ืฆื™ืจืŸ ื–ื™ื™ ืื™ืŸ ื“ืขืจ ืงืึทื˜ืขื’ืึธืจื™ืข ืื™ืŸ ื•ื•ืึธืก ื–ื™ื™ ื”ืึธื‘ืŸ ืึทะพื‘ืขืกืขืจ ืจืขื–ื•ืœื˜ืึทื˜ (ืกืึทื‘ื“ื–ืฉืขืงื˜ื™ื•ื• ืžื™ื™ื ื•ื ื’).

ื ืขืฅ ืกืงืึทื ืขืจื–.

ื“ื™ ื”ื•ื™ืคึผื˜ ืึทืจื‘ืขื˜ ืื™ื– ืฆื• ืึทื ื˜ื“ืขืงืŸ ื‘ื ื™ืžืฆื ื ืขืฅ ื‘ืึทื“ื™ื ื•ื ื’ืก, ื™ื ืกื˜ืึทืœื™ืจืŸ ื–ื™ื™ืขืจ ื•ื•ืขืจืกื™ืขืก, ื‘ืึทืฉื˜ื™ืžืขืŸ ื“ื™ ืึทืก, ืืื–"ื• ื•.

ื ืžืึทืคึผืึธืคึผืฉืึทืฆื•ื ื’ ืคื•ืŸ ืคืจื™ื™ ืžื›ืฉื™ืจื™ื ืคึฟืึทืจ ืคึผืขื ื˜ืขืกื˜ื™ื ื’ ื•ื•ืขื‘ ืจืขืกื•ืจืกืŸ ืื•ืŸ ืžืขืจ ื•ื• 2
ื ืžืึทืคึผ ("ื ืขื˜ื•ื•ืึธืจืง ืžืึทืคึผืขืจ") ืื™ื– ืึท ืคืจื™ื™ ืื•ืŸ ืึธืคึฟืŸ ืžืงื•ืจ ื ื•ืฆืŸ ืคึฟืึทืจ ื ืขืฅ ืึทื ืึทืœื™ืกื™ืก ืื•ืŸ ืกื™ืกื˜ืขื ื–ื™ื›ืขืจื”ื™ื™ื˜ ืึทื“ืึทื˜ื™ื ื’. ื”ื™ืฆื™ืง ืงืขื’ื ืขืจืก ืคื•ืŸ ื“ื™ ืงืึทื ืกืึธื•ืœ ืงืขื ืขืŸ ื ื•ืฆืŸ Zenmap, ื•ื•ืึธืก ืื™ื– ืึท GUI ืคึฟืึทืจ Nmap.
ื“ืึธืก ืื™ื– ื ื™ืฉื˜ ื‘ืœื•ื™ื– ืึท "ืงืœื•ื’" ืกืงืึทื ื ืขืจ, ืขืก ืื™ื– ืึท ืขืจื ืกื˜ ืขืงืกื˜ืขื ืกื™ื‘ืœืข ื’ืขืฆื™ื™ึทื’ (ืื™ื™ื ืขืจ ืคื•ืŸ ื“ื™ "ืื•ืžื’ืขื•ื•ื™ื™ื ืœืขืš ืคึฟืขื™ึดืงื™ื™ื˜ืŸ" ืื™ื– ื“ื™ ื‘ื™ื™ึทื–ื™ื™ึทืŸ ืคื•ืŸ ืึท ืฉืจื™ืคื˜ ืคึฟืึทืจ ืงืึธื ื˜ืจืึธืœื™ืจื•ื ื’ ืึท ื ืึธื“ืข ืคึฟืึทืจ ื“ื™ ื‘ื™ื™ึทื–ื™ื™ึทืŸ ืคื•ืŸ ืึท ื•ื•ืึธืจืขื "ืกื˜ื•ืงืกื ืขื˜" (ื“ืขืจืžืื ื˜ ื“ืึธ). ื˜ื™ืคึผื™ืฉ ื ื•ืฆืŸ ื‘ื™ื™ืฉืคึผื™ืœ:

nmap -A -T4 localhost

-ื ืคึฟืึทืจ ืึทืก ื•ื•ืขืจืกื™ืข ื“ื™ื˜ืขืงืฉืึทืŸ, ืฉืจื™ืคื˜ ืกืงืึทื ื™ื ื’ ืื•ืŸ ื˜ืจื™ื™ืกื™ื ื’
- T4 ืฆื™ื™ื˜ ืงืึธื ื˜ืจืึธืœ ื‘ืึทืฉื˜ืขื˜ื™ืงืŸ (ืžืขืจ ืื™ื– ืคืึทืกื˜ืขืจ, ืคึฟื•ืŸ 0 ืฆื• 5)
localhost - ืฆื™ืœ ื‘ืึทืœืขื‘ืึธืก
ืขืคึผืขืก ื”ืึทืจื“ืขืจ?

nmap -sS -sU -T4 -A -v -PE -PP -PS21,22,23,25,80,113,31339 -PA80,113,443,10042 -PO --script all localhost

ื“ืึธืก ืื™ื– ืึท ื’ืึทื ื’ ืคื•ืŸ ืึธืคึผืฆื™ืขืก ืคื•ืŸ ื“ื™ "ืคึผืึทืžืขืœืขืš ืคื•ืœืฉื˜ืขื ื“ื™ืง ื™ื‘ืขืจืงื•ืงืŸ" ืคึผืจืึธืคื™ืœ ืื™ืŸ Zenmap. ืขืก ื ืขืžื˜ ื’ืึทื ืฅ ืึท ืœืึทื ื’ ืฆื™ื™ึทื˜ ืฆื• ืคืึทืจืขื ื“ื™ืงืŸ, ืึธื‘ืขืจ ืœืขืกืึธืฃ ื’ื™ื˜ ืžืขืจ ื“ื™ื˜ื™ื™ืœื“ ืื™ื ืคึฟืึธืจืžืึทืฆื™ืข ื•ื•ืึธืก ืงืขื ืขืŸ ื–ื™ื™ืŸ ื’ืขืคื•ื ืขืŸ ื•ื•ืขื’ืŸ ื“ื™ ืฆื™ืœ ืกื™ืกื˜ืขื. ื”ื™ืœืฃ ื’ื™ื™ื“ ืื™ืŸ ืจื•ืกื™ืฉ, ืื•ื™ื‘ ืื™ืจ ื‘ืึทืฉืœื™ืกืŸ ืฆื• ื’ื™ื™ืŸ ื“ื™ืคึผืขืจ, ืื™ืš ืื•ื™ืš ืจืขืงืึธืžืขื ื“ื™ืจืŸ ืื™ื‘ืขืจื–ืขืฆืŸ ื“ืขื ืึทืจื˜ื™ืงืœ ืึธื ื”ื™ื™ื‘ืขืจ ืก ื’ื™ื™ื“ ืฆื• ื ืžืึทืคึผ.
ื ืžืึทืคึผ ื”ืื˜ ื‘ืืงื•ืžืขืŸ "ื–ื™ื›ืขืจื”ื™ื™ื˜ ืคึผืจืึธื“ื•ืงื˜ ืคื•ืŸ ื“ื™ ื™ืึธืจ" ืกื˜ืึทื˜ื•ืก ืคื•ืŸ ืžืึทื’ืึทื–ื™ื ื– ืื•ืŸ ืงื”ื™ืœื•ืช ืึทื–ืึท ื•ื•ื™ ืœื™ื ื•ืงืก ื“ื–ืฉืึธื•ืจื ืึทืœ, ืื™ื ืคึฟืึธืจืžืึทืฆื™ืข ื•ื•ืขืœื˜, LinuxQuestions.Org ืื•ืŸ Codetalker Digest.
ืึท ื˜ืฉื™ืงืึทื•ื•ืข ืคื•ื ื˜, ื ืžืึทืคึผ ืงืขื ืขืŸ ื–ื™ื™ืŸ ื’ืขื–ืขืŸ ืื™ืŸ ื“ื™ ืคื™ืœืžืก "ื“ื™ ืžืึทื˜ืจื™ืฅ ืจืขืœืึธืึทื“ืขื“", "ื“ื™ ื”ืึทืจื“ 4", "ื“ื™ ื‘ืึธื•ืจื ืข ื•ืœื˜ื™ืžืึทื˜ื•ื", "ื”ืึธื˜ื˜ืึทื•ื•ื™ื˜ืฉ" ืื•ืŸ ืึทื ื“ืขืจืขืจ.

IP-ืžื›ืฉื™ืจื™ืืึธืคึผืฉืึทืฆื•ื ื’ ืคื•ืŸ ืคืจื™ื™ ืžื›ืฉื™ืจื™ื ืคึฟืึทืจ ืคึผืขื ื˜ืขืกื˜ื™ื ื’ ื•ื•ืขื‘ ืจืขืกื•ืจืกืŸ ืื•ืŸ ืžืขืจ ื•ื• 2
IP-ืžื›ืฉื™ืจื™ื - ืึท ืžื™ืŸ ืคื•ืŸ ื’ืึทื ื’ ืคื•ืŸ ืคืึทืจืฉื™ื“ืขื ืข ื ืขืฅ ื™ื•ื˜ื™ืœืึทื˜ื™ื–, ืงื•ืžื˜ ืžื™ื˜ ืึท GUI, "ื“ืขื“ืึทืงื™ื™ื˜ืึทื“" ืฆื• Windows ื ื™ืฆืขืจืก.
ืคึผืึธืจื˜ ืกืงืึทื ื ืขืจ, ืฉืขืจื“ ืจืขืกื•ืจืกืŸ (ืฉืขืจื“ ืคึผืจื™ื ื˜ืขืจืก / ืคืึธืœื“ืขืจืก), ื•ื•ื”ืึธื™ืก / ืคื™ื ื’ืขืจ / ืœื•ืงืึทืคึผ, ื˜ืขืœื ืขื˜ ืงืœื™ืขื ื˜ ืื•ืŸ ืคื™ืœ ืžืขืจ. ื ืึธืจ ืึท ื‘ืึทืงื•ื•ืขื, ืฉื ืขืœ, ืคืึทื ื’ืงืฉืึทื ืึทืœ ื’ืขืฆื™ื™ึทื’.

ืขืก ืื™ื– ืงื™ื™ืŸ ื‘ืึทื–ื•ื ื“ืขืจ ืคื•ื ื˜ ืฆื• ื‘ืึทื˜ืจืึทื›ื˜ืŸ ืื ื“ืขืจืข ืคึผืจืึธื“ื•ืงื˜ืŸ, ื•ื•ื™ื™ึทืœ ืขืก ื–ืขื ืขืŸ ืคื™ืœืข ื™ื•ื˜ื™ืœืึทื˜ื™ื– ืื™ืŸ ื“ืขื ื’ืขื’ื ื˜ ืื•ืŸ ื–ื™ื™ ืึทืœืข ื”ืึธื‘ืŸ ืขื ืœืขืš ืึทืคึผืขืจื™ื™ื˜ื™ื ื’ ืคึผืจื™ื ืกืึทืคึผืึทืœื– ืื•ืŸ ืคืึทื ื’ืงืฉืึทื ืึทืœื™ื˜ื™. ื ืึธืš, nmap ืื™ื– ื“ื™ ืžืขืจืกื˜ ืึธืคื˜ ื’ืขื ื™ืฆื˜.

ื•ื•ืขื‘ ืฉืจื™ืคื˜ ื‘ืจื™ื˜ืฉ ืกืงืึทื ืขืจื–

ื˜ืจื™ื™ื ื’ ืฆื• ื’ืขืคึฟื™ื ืขืŸ ืคืึธืœืงืก ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ื– (SQL ื™ื ื“ื–ืฉ, XSS, LFI / RFI, ืืื–"ื• ื•) ืึธื“ืขืจ ืขืจืจืึธืจืก (ื ื™ื˜ ืื•ื™ืกื’ืขืžืขืงื˜ ืฆื™ื™ึทื˜ื•ื•ื™ื™ึทืœื™ืง ื˜ืขืงืขืก, Directory ื™ื ื“ืขืงืกื™ื ื’, ืืื–"ื• ื•)

ืึทืงื•ื ืขื˜ื™ืงืก ื•ื•ืขื‘ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ ืกืงืึทื ื ืขืจืึธืคึผืฉืึทืฆื•ื ื’ ืคื•ืŸ ืคืจื™ื™ ืžื›ืฉื™ืจื™ื ืคึฟืึทืจ ืคึผืขื ื˜ืขืกื˜ื™ื ื’ ื•ื•ืขื‘ ืจืขืกื•ืจืกืŸ ืื•ืŸ ืžืขืจ ื•ื• 2
ืึทืงื•ื ืขื˜ื™ืงืก ื•ื•ืขื‘ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ ืกืงืึทื ื ืขืจ - ืคึฟื•ืŸ ื“ื™ ืœื™ื ืง ืื™ืจ ืงืขื ืขืŸ ื–ืขืŸ ืึทื– ื“ืึธืก ืื™ื– ืึทืŸ xss ืกืงืึทื ื ืขืจ, ืึธื‘ืขืจ ื“ืึธืก ืื™ื– ื ื™ืฉื˜ ืœืขื’ืึทืžืจืข ืืžืช. ื“ื™ ืคืจื™ื™ ื•ื•ืขืจืกื™ืข, ื‘ื ื™ืžืฆื ื“ืึธ, ื’ื™ื˜ ืึท ืคึผืœืึทืฅ ืคื•ืŸ ืคืึทื ื’ืงืฉืึทื ืึทืœื™ื˜ื™. ื’ืขื•ื•ืขื ืœื™ืš, ื“ืขืจ ืžืขื ื˜ืฉ ื•ื•ืืก ืœื•ื™ืคื˜ ื“ืขื ืกืงืึทื ื ืขืจ ืฆื•ื ืขืจืฉื˜ืŸ ืžืึธืœ ืื•ืŸ ื ืขืžื˜ ืฆื•ื ืขืจืฉื˜ืŸ ืžืึธืœ ืึท ื‘ืืจื™ื›ื˜ ืื™ื‘ืขืจ ื–ื™ื™ืขืจ ืžื™ื˜ืœ, ื“ืขืจืœืขื‘ื˜ ื ืงืœื™ื™ืŸ ืฉืืงืœ, ืื•ืŸ ืื™ืจ ื•ื•ืขื˜ ืคืืจืฉื˜ื™ื™ืŸ ืคืืจื•ื•ืืก ื•ื•ืขืŸ ืžืขืŸ ื˜ื•ื˜ ื“ืืก. ื“ืึธืก ืื™ื– ืึท ื–ื™ื™ืขืจ ืฉื˜ืึทืจืง ืคึผืจืึธื“ื•ืงื˜ ืคึฟืึทืจ ืึทื ืึทืœื™ื™ื–ื™ื ื’ ืึทืœืข ืžื™ื ื™ื ืคื•ืŸ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ื– ืื•ื™ืฃ ืึท ื•ื•ืขื‘ื–ื™ื™ื˜ืœ ืื•ืŸ ืึทืจื‘ืขื˜ ื ื™ื˜ ื‘ืœื•ื™ื– ืžื™ื˜ ื“ื™ ื’ืขื•ื•ื™ื™ื ื˜ืœืขืš PHP ื•ื•ืขื‘ืกื™ื˜ืขืก, ืึธื‘ืขืจ ืื•ื™ืš ืื™ืŸ ืื ื“ืขืจืข ืฉืคึผืจืึทื›ืŸ (ื›ืึธื˜ืฉ ื“ื™ ื—ื™ืœื•ืง ืื™ืŸ ืฉืคึผืจืึทืš ืื™ื– ื ื™ืฉื˜ ืึท ื’ืจืื“ืŸ). ืขืก ืื™ื– ืงื™ื™ืŸ ื‘ืึทื–ื•ื ื“ืขืจ ืคื•ื ื˜ ืื™ืŸ ื“ื™ืกืงืจื™ื™ื‘ื™ื ื’ ื“ื™ ื™ื ืกื˜ืจืึทืงืฉืึทื ื–, ื•ื•ื™ื™ึทืœ ื“ื™ ืกืงืึทื ืขืจ ืคืฉื•ื˜ "ืคึผื™ืงืก ืึทืจื•ื™ืฃ" ื“ื™ ืึทืงืฉืึทื ื– ืคื•ืŸ ื“ื™ ื‘ืึทื ื™ืฆืขืจ. ืขืคึผืขืก ืขื ืœืขืš ืฆื• "ื•ื•ื™ื™ึทื˜ืขืจ, ื•ื•ื™ื™ึทื˜ืขืจ, ื•ื•ื™ื™ึทื˜ืขืจ, ื’ืจื™ื™ื˜" ืื™ืŸ ืึท ื˜ื™ืคึผื™ืฉ ื•ื•ื™ื™ื›ื•ื•ืืจื’ ื™ื ืกื˜ืึทืœื™ืจื•ื ื’.

ื ื™ืงื˜ืึธืึธืคึผืฉืึทืฆื•ื ื’ ืคื•ืŸ ืคืจื™ื™ ืžื›ืฉื™ืจื™ื ืคึฟืึทืจ ืคึผืขื ื˜ืขืกื˜ื™ื ื’ ื•ื•ืขื‘ ืจืขืกื•ืจืกืŸ ืื•ืŸ ืžืขืจ ื•ื• 2
ื ื™ืงื˜ืึธ ื“ืึธืก ืื™ื– ืึทืŸ ืขืคึฟืŸ ืžืงื•ืจ (GPL) ื•ื•ืขื‘ ืงืจื™ื›ืขืจ. ื™ืœื™ืžืึทื ื™ื™ืฅ ืจื•ื˜ื™ืŸ ืžืึทื ื•ืึทืœ ืึทืจื‘ืขื˜. ื–ื•ื›ืŸ ื“ื™ ืฆื™ืœ ืคึผืœืึทืฅ ืคึฟืึทืจ ืึทื ื“ืขืœืขื˜ื™ื“ ืกืงืจื™ืคึผืก (ืขื˜ืœืขื›ืข test.php, index_.php, ืืื–"ื• ื•), ื“ืึทื˜ืึทื‘ื™ื™ืก ืึทื“ืžื™ื ื™ืกื˜ืจืึทืฆื™ืข ืžื›ืฉื™ืจื™ื (/phpmyadmin/, /pma ืื•ืŸ ื“ื™ ื•ื•ื™), ืืื–"ื• ื•, ื“ืึธืก ืื™ื–, ื˜ืฉืขืง ื“ื™ ืžื™ื˜ืœ ืคึฟืึทืจ ื“ื™ ืžืขืจืกื˜ ืคึผืจืึธืกื˜ ืขืจืจืึธืจืก ื™ื•ื–ืฉืึทื•ื•ืึทืœื™ ื’ืขืคึฟื™ืจื˜ ื“ื•ืจืš ืžืขื ื˜ืฉ ืกื™ื‘ื•ืช.
ืคึผืœื•ืก, ืื•ื™ื‘ ืขืก ื’ืขืคื™ื ื˜ ืขื˜ืœืขื›ืข ืคืึธืœืงืก ืฉืจื™ืคื˜, ืขืก ื˜ืฉืขืงืก ืขืก ืคึฟืึทืจ ืจืขืœืขืึทืกืขื“ ืขืงืกืคึผืœื•ื™ืฅ (ื•ื•ืึธืก ื–ืขื ืขืŸ ืื™ืŸ ื“ื™ ื“ืึทื˜ืึทื‘ื™ื™ืก).
ืจืขืคึผืึธืจืฅ ื‘ื ื™ืžืฆื "ืึทื ื•ื•ืึธื ื˜ื™ื“" ืžืขื˜ื”ืึธื“ืก ืึทื–ืึท ื•ื•ื™ PUT ืื•ืŸ TRACE
ืื•ืŸ ืื–ื•ื™ ื•ื•ื™ื™ื˜ืขืจ. ืขืก ืื™ื– ื–ื™ื™ืขืจ ื‘ืึทืงื•ื•ืขื ืื•ื™ื‘ ืื™ืจ ืึทืจื‘ืขื˜ ื•ื•ื™ ืึทืŸ ืึธื“ื™ื˜ืึธืจ ืื•ืŸ ืึทื ืึทืœื™ื™ื– ื•ื•ืขื‘ืกื™ื˜ืขืก ื™ืขื“ืขืจ ื˜ืึธื’.
ืคื•ืŸ ื“ื™ ืžื™ื ื•ืกื™ื, ืื™ืš ื•ื•ืึธืœื˜ ื•ื•ื™ ืฆื• ื˜ืึธืŸ ื“ื™ ื”ื•ื™ืš ืคึผืจืึธืฆืขื ื˜ ืคื•ืŸ ืคืึทืœืฉ ืคึผืึทื–ืึทื˜ื™ื•ื•ื–. ืคึฟืึทืจ ื‘ื™ื™ึทืฉืคึผื™ืœ, ืื•ื™ื‘ ื“ื™ื™ืŸ ืคึผืœืึทืฅ ืฉื˜ืขื ื“ื™ืง ื’ื™ื˜ ื“ื™ ื”ื•ื™ืคึผื˜ ื˜ืขื•ืช ืึทื ืฉื˜ืึธื˜ ืคื•ืŸ ืึท 404 ื˜ืขื•ืช (ื•ื•ืขืŸ ืขืก ื–ืึธืœ ืคึผืึทืกื™ืจืŸ), ื“ืขืจ ืกืงืึทื ื ืขืจ ื•ื•ืขื˜ ื–ืึธื’ืŸ ืึทื– ื“ื™ื™ืŸ ืคึผืœืึทืฅ ื›ึผื•ืœืœ ืึทืœืข ื“ื™ ืกืงืจื™ืคึผืก ืื•ืŸ ืึทืœืข ื“ื™ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ื– ืคื•ืŸ ื–ื™ื™ืŸ ื“ืึทื˜ืึทื‘ื™ื™ืก. ืื™ืŸ ืคื™ืจ, ื“ืึธืก ื˜ื•ื˜ ื ื™ืฉื˜ ืคึผืึทืกื™ืจืŸ ืึทื–ื•ื™ ืึธืคื˜, ืึธื‘ืขืจ ื•ื•ื™ ืึท ืคืึทืงื˜, ืึท ืคึผืœืึทืฅ ื“ืขืคึผืขื ื“ืก ืื•ื™ืฃ ื“ื™ ืกื˜ืจื•ืงื˜ื•ืจ ืคื•ืŸ ื“ื™ื™ืŸ ืคึผืœืึทืฅ.
ืงืœืึทืกื™ืฉ ื‘ืึทื ื™ืฅ:

./nikto.pl -host localhost

ืื•ื™ื‘ ืื™ืจ ื“ืึทืจืคึฟืŸ ืฆื• ื–ื™ื™ืŸ ืึธื˜ืขืจื™ื™ื–ื“ ืื•ื™ืฃ ื“ืขื ืคึผืœืึทืฅ, ืื™ืจ ืงืขื ืขืŸ ืฉื˜ืขืœืŸ ืึท ืงื™ื›ืœ ืื™ืŸ ื“ื™ nikto.conf ื˜ืขืงืข, ื“ื™ STATIC-COOKIE ื‘ื™ื™ึทื˜ืขื•ื•ื“ื™ืง.

Wiktoืึธืคึผืฉืึทืฆื•ื ื’ ืคื•ืŸ ืคืจื™ื™ ืžื›ืฉื™ืจื™ื ืคึฟืึทืจ ืคึผืขื ื˜ืขืกื˜ื™ื ื’ ื•ื•ืขื‘ ืจืขืกื•ืจืกืŸ ืื•ืŸ ืžืขืจ ื•ื• 2
Wikto - Nikto ืคึฟืึทืจ Windows, ืึธื‘ืขืจ ืžื™ื˜ ืขื˜ืœืขื›ืข ืึทื“ื™ืฉืึทื ื–, ืึทื–ืึท ื•ื•ื™ "ืคืึทื–ื™" ืœืึธื’ื™ืง ื•ื•ืขืŸ ืงืึธื ื˜ืจืึธืœื™ืจื•ื ื’ ืงืึธื“ ืคึฟืึทืจ ืขืจืจืึธืจืก, ื ื™ืฆืŸ GHDB, ื‘ืึทืงื•ืžืขืŸ ืœื™ื ืงืก ืื•ืŸ ืžื™ื˜ืœ ืคืึธืœื“ืขืจืก, ืคืึทืงื˜ื™ืฉ-ืฆื™ื™ื˜ ืžืึธื ื™ื˜ืึธืจื™ื ื’ ืคื•ืŸ ื”ื˜ื˜ืคึผ ืจื™ืงื•ื•ืขืก / ืจืขืกืคึผืึธื ืกืขืก. Wikto ืื™ื– ื’ืขืฉืจื™ื‘ืŸ ืื™ืŸ C # ืื•ืŸ ืจื™ืงื•ื•ื™ื™ืขืจื– ื“ื™. ื ืขืฅ ืคืจื™ื™ืžื•ื•ืขืจืง.

ืกืงื™ืคึผืคื™ืฉืึธืคึผืฉืึทืฆื•ื ื’ ืคื•ืŸ ืคืจื™ื™ ืžื›ืฉื™ืจื™ื ืคึฟืึทืจ ืคึผืขื ื˜ืขืกื˜ื™ื ื’ ื•ื•ืขื‘ ืจืขืกื•ืจืกืŸ ืื•ืŸ ืžืขืจ ื•ื• 2
ืกืงื™ืคึผืคื™ืฉ - ื•ื•ืขื‘ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ ืกืงืึทื ื ืขืจ ืคึฟื•ืŸ ืžื™ื›ืœ ื–ืืœืขื•ื•ืกืงื™ (ื‘ืืงืื ื˜ ืืœืก ืœืงืžื˜ื•ืฃ). ื’ืขืฉืจื™ื‘ืŸ ืื™ืŸ C, ืงืจื™ื™ึทื–-ืคึผืœืึทื˜ืคืึธืจืžืข (Win ืจื™ืงื•ื•ื™ื™ืขืจื– Cygwin). ืจืขืงื•ืจืกื™ื•ื•ืขืœื™ (ืื•ืŸ ืคึฟืึทืจ ืึท ื–ื™ื™ืขืจ ืœืึทื ื’ ืฆื™ื™ึทื˜, ื•ื•ืขื’ืŸ 20 ~ 40 ืฉืขื”, ื›ืึธื˜ืฉ ื“ื™ ืœืขืฆื˜ืข ืžืึธืœ ืขืก ื’ืขืืจื‘ืขื˜ ืคึฟืึทืจ ืžื™ืจ ืื™ื– ื’ืขื•ื•ืขืŸ 96 ืฉืขื”) ืขืก ืงืจืึธืœื– ื“ื™ ื’ืื ืฆืข ืคึผืœืึทืฅ ืื•ืŸ ื’ืขืคื™ื ื˜ ืึทืœืข ืกืึธืจืฅ ืคื•ืŸ ื–ื™ื›ืขืจื”ื™ื™ื˜ ื”ืึธืœืขืก. ืขืก ืื•ื™ืš ื“ื–ืฉืขื ืขืจื™ื™ืฅ ืึท ืคึผืœืึทืฅ ืคื•ืŸ ืคืึทืจืงืขืจ (ืขื˜ืœืขื›ืข ื’ื™ื’ืื‘ื™ื™ื˜ ื™ื ืงืึทืžื™ื ื’ / ืึทื•ื˜ื’ืึธื•ื™ื ื’). ืึธื‘ืขืจ ืึทืœืข ืžื™ื˜ืœืขืŸ ื–ืขื ืขืŸ ื’ื•ื˜, ืกืคึผืขืฆื™ืขืœ ืื•ื™ื‘ ืื™ืจ ื”ืึธื‘ืŸ ืฆื™ื™ื˜ ืื•ืŸ ืจืขืกื•ืจืกืŸ.
ื˜ื™ืคึผื™ืฉ ื ื•ืฆืŸ:

./skipfish -o /home/reports www.example.com

ืื™ืŸ ื“ืขืจ ื˜ืขืงืข "ืจื™ืคึผืึธืจืฅ" ืขืก ื•ื•ืขื˜ ื–ื™ื™ืŸ ืึท ื‘ืึทืจื™ื›ื˜ ืื™ืŸ HTML, ื‘ื™ื™ึทืฉืคึผื™ืœ.

w3af ืึธืคึผืฉืึทืฆื•ื ื’ ืคื•ืŸ ืคืจื™ื™ ืžื›ืฉื™ืจื™ื ืคึฟืึทืจ ืคึผืขื ื˜ืขืกื˜ื™ื ื’ ื•ื•ืขื‘ ืจืขืกื•ืจืกืŸ ืื•ืŸ ืžืขืจ ื•ื• 2
w3af - ื•ื•ืขื‘ ืึทืคึผืคึผืœื™ืงืึทื˜ื™ืึธืŸ ืึทื˜ืึทืง ืื•ืŸ ืงืึธื ื˜ืจืึธืœื™ืจืŸ ืคืจืึทืžืขื•ื•ืึธืจืง, ืึธืคึฟืŸ-ืžืงื•ืจ ื•ื•ืขื‘ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ ืกืงืึทื ื ืขืจ. ืขืก ื”ืื˜ ืึท GUI, ืึธื‘ืขืจ ืื™ืจ ืงืขื ืขืŸ ืึทืจื‘ืขื˜ืŸ ืคึฟื•ืŸ ื“ื™ ืงืึทื ืกืึธื•ืœ. ืžืขืจ ื’ืขื ื•ื™, ืขืก ืื™ื– ืึท ืคืจื™ื™ืžื•ื•ืขืจืง ืžื™ื˜ ืึท ืคึผืœืึทืฅ ืคื•ืŸ ืคึผืœื•ื’ื™ื ืก.
ืื™ืจ ืงืขื ืขืŸ ืจืขื“ืŸ ื•ื•ืขื’ืŸ ื–ื™ื™ึทืŸ ืึทื“ื•ื•ืึทื ื˜ื™ื“ื–ืฉื™ื– ืคึฟืึทืจ ืึท ืœืึทื ื’ ืฆื™ื™ึทื˜, ืขืก ืื™ื– ื‘ืขืกืขืจ ืฆื• ืคึผืจื•ื‘ื™ืจืŸ ืขืก :] ื˜ื™ืคึผื™ืฉ ืึทืจื‘ืขื˜ ืžื™ื˜ ืขืก ืงื•ืžื˜ ืึทืจืึธืคึผ ืฆื• ื˜ืฉื•ื–ื™ื ื’ ืึท ืคึผืจืึธืคื™ืœ, ืกืคึผืขืฆื™ืคื™ืฆื™ืจืŸ ืึท ืฆื™ืœ ืื•ืŸ, ืื™ืŸ ืคืึทืงื˜, ืงืึทื˜ืขืจ ืขืก.

ืžืึทื ื˜ืจืึท ื–ื™ื›ืขืจื”ื™ื™ึทื˜ ืคืจืึทืžืขื•ื•ืึธืจืงืึธืคึผืฉืึทืฆื•ื ื’ ืคื•ืŸ ืคืจื™ื™ ืžื›ืฉื™ืจื™ื ืคึฟืึทืจ ืคึผืขื ื˜ืขืกื˜ื™ื ื’ ื•ื•ืขื‘ ืจืขืกื•ืจืกืŸ ืื•ืŸ ืžืขืจ ื•ื• 2
ืžืึทื ื˜ืจืึท ืื™ื– ืึท ื—ืœื•ื ื•ื•ืึธืก ืื™ื– ื’ืขื•ื•ืขืŸ ืืžืช. ื ื–ืึทืžืœื•ื ื’ ืคื•ืŸ ืคืจื™ื™ ืื•ืŸ ืึธืคึฟืŸ ืื™ื ืคึฟืึธืจืžืึทืฆื™ืข ื–ื™ื›ืขืจื”ื™ื™ื˜ ืžื›ืฉื™ืจื™ื ื’ืขื‘ื•ื™ื˜ ืื™ืŸ ืึท ื•ื•ืขื‘ ื‘ืœืขื˜ืขืจืขืจ.
ื–ื™ื™ืขืจ ื ื•ืฆื™ืง ื•ื•ืขืŸ ื˜ืขืกื˜ื™ื ื’ ื•ื•ืขื‘ ืึทืคึผืœืึทืงื™ื™ืฉืึทื ื– ืื™ืŸ ืึทืœืข ืกื˜ืึทื’ืขืก.
ื“ื™ ื ื•ืฆืŸ ื‘ื•ื™ืœื– ืึทืจืึธืคึผ ืฆื• ื™ื ืกื˜ืึทืœื™ืจืŸ ืื•ืŸ ืงืึทื˜ืขืจ ื“ืขื ื‘ืœืขื˜ืขืจืขืจ.

ืื™ืŸ ืคืึทืงื˜, ืขืก ื–ืขื ืขืŸ ืคื™ืœืข ื™ื•ื˜ื™ืœืึทื˜ื™ื– ืื™ืŸ ื“ืขื ืงืึทื˜ืขื’ืึธืจื™ืข ืื•ืŸ ืขืก ืื™ื– ื’ืึทื ืฅ ืฉื•ื•ืขืจ ืฆื• ืื•ื™ืกืงืœื™ื™ึทื‘ืŸ ืึท ืกืคึผืขืฆื™ืคื™ืฉ ืจืฉื™ืžื” ืคื•ืŸ ื–ื™ื™. ืจื•ื‘ึฟ ืึธืคื˜, ื™ืขื“ืขืจ ืคึผืขื ืกื˜ืขืจ ื–ื™ืš ื“ื™ื˜ืขืจืžืึทื ื– ื“ื™ ื’ืึทื ื’ ืคื•ืŸ ืžื›ืฉื™ืจื™ื ืขืจ ื“ืึทืจืฃ.

ืขืงืกืคึผืœืึธื™ื˜ืึทื˜ื™ืึธืŸ

ืคึฟืึทืจ ืึธื˜ืึทืžื™ื™ื˜ื™ื“ ืื•ืŸ ืžืขืจ ื‘ืึทืงื•ื•ืขื ืขืงืกืคึผืœื•ื™ื˜ื™ื™ืฉืึทืŸ ืคื•ืŸ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ื–, ืขืงืกืคึผืœื•ื™ืฅ ื–ืขื ืขืŸ ื’ืขืฉืจื™ื‘ืŸ ืื™ืŸ ื•ื•ื™ื™ื›ื•ื•ืืจื’ ืื•ืŸ ืกืงืจื™ืคึผืก, ื•ื•ืึธืก ื ืึธืจ ื“ืึทืจืคึฟืŸ ืฆื• ื–ื™ื™ืŸ ื“ื•ืจื›ื’ืขื’ืื ื’ืขืŸ ืคึผืึทืจืึทืžืขื˜ืขืจืก ืฆื• ื ื•ืฆืŸ ื“ื™ ื–ื™ื›ืขืจื”ื™ื™ื˜ ืœืึธืš. ืื•ืŸ ืขืก ื–ืขื ืขืŸ ืคึผืจืึธื“ื•ืงื˜ืŸ ื•ื•ืึธืก ืขืœื™ืžื™ื ื™ืจืŸ ื“ื™ ื ื•ื™ื˜ ืฆื• ืžืึทื ื™ื•ืึทืœื™ ื–ื•ื›ืŸ ืคึฟืึทืจ ืขืงืกืคึผืœื•ื™ืฅ ืื•ืŸ ืืคื™ืœื• ืฆื•ืœื™ื™ื’ืŸ ื–ื™ื™ ืื•ื™ืฃ ื“ื™ ืคืœื™ืขืŸ. ื“ื™ ืงืื˜ืขื’ืืจื™ืข ื•ื•ืขื˜ ืื™ืฆื˜ ื“ื™ืกืงื•ื˜ื™ืจื˜ ื•ื•ืขืจืŸ.

ืžืขื˜ืึทืกืคึผืœืึธื™ื˜ ืคืจืึทืžืขื•ื•ืึธืจืง ืึธืคึผืฉืึทืฆื•ื ื’ ืคื•ืŸ ืคืจื™ื™ ืžื›ืฉื™ืจื™ื ืคึฟืึทืจ ืคึผืขื ื˜ืขืกื˜ื™ื ื’ ื•ื•ืขื‘ ืจืขืกื•ืจืกืŸ ืื•ืŸ ืžืขืจ ื•ื• 2
ื“ื™ ืžืขื˜ืึทืกืคึผืœืึธื™ื˜ยฎ ืคืจืึทืžืขื•ื•ืึธืจืง - ืึท ืžื™ืŸ ืคื•ืŸ ืคืึทืจื–ืขืขื ื™ืฉ ืื™ืŸ ืื•ื ื“ื–ืขืจ ื’ืขืฉืขืคื˜. ืขืจ ืงืขืŸ ื˜ืึธืŸ ืึทื–ื•ื™ ืคื™ืœ ืึทื– ื“ื™ ื™ื ืกื˜ืจืึทืงืฉืึทื ื– ื•ื•ืขื˜ ื“ืขืงืŸ ืขื˜ืœืขื›ืข ืึทืจื˜ื™ืงืœืขืŸ. ืžื™ืจ ื•ื•ืขืœืŸ ืงื•ืงืŸ ืื™ืŸ ืึธื˜ืึทืžืึทื˜ื™ืง ืขืงืกืคึผืœื•ื™ื˜ื™ื™ืฉืึทืŸ (ื ืžืึทืคึผ + ืžืขื˜ืึทืกืคึผืœืึธื™ื˜). ื“ื™ ื“ื ืึธ ืฉื•ืจื” ืื™ื– ื“ืึธืก: Nmap ื•ื•ืขื˜ ืึทื ืึทืœื™ื™ื– ื“ื™ ืคึผืึธืจื˜ ื•ื•ืึธืก ืžื™ืจ ื“ืึทืจืคึฟืŸ, ื™ื ืกื˜ืึทืœื™ืจืŸ ื“ื™ ืกืขืจื•ื•ื™ืก, ืื•ืŸ ืžืขื˜ืึทืกืคึผืœืึธื™ื˜ ื•ื•ืขื˜ ืคึผืจื•ื‘ื™ืจืŸ ืฆื• ืฆื•ืœื™ื™ื’ืŸ ืขืงืกืคึผืœื•ื™ืฅ ืฆื• ืขืก ื‘ืื–ื™ืจื˜ ืื•ื™ืฃ ื“ื™ ืกืขืจื•ื•ื™ืก ืงืœืึทืก (ftp, ssh, ืืื–"ื• ื•). ืึทื ืฉื˜ืึธื˜ ื˜ืขืงืกื˜ ืื™ื ืกื˜ืจื•ืงืฆื™ืขืก, ืื™ืš ื•ื•ืขืœ ืึทืจื™ื™ึทื ืœื™ื™ื’ืŸ ืึท ื•ื•ื™ื“ืขื, ื’ืึทื ืฅ ืคืึธืœืงืก ืื•ื™ืฃ ื“ืขืจ ื˜ืขืžืข ืึทื•ื˜ืึธืคึผื•ืŸ

ืึธื“ืขืจ ืžื™ืจ ืงืขื ืขืŸ ืคืฉื•ื˜ ืึธื˜ืึทืžื™ื™ื˜ ื“ื™ ืึธืคึผืขืจืึทืฆื™ืข ืคื•ืŸ โ€‹โ€‹ื“ื™ ื ื•ืฆืŸ ื•ื•ืึธืก ืžื™ืจ ื“ืึทืจืคึฟืŸ. ืœืžืฉืœ:

msf > use auxiliary/admin/cisco/vpn_3000_ftp_bypass
msf auxiliary(vpn_3000_ftp_bypass) > set RHOST [TARGET IP] msf auxiliary(vpn_3000_ftp_bypass) > run

ืื™ืŸ ืคืึทืงื˜, ื“ื™ ืงื™ื™ืคึผืึทื‘ื™ืœืึทื˜ื™ื– ืคื•ืŸ ื“ืขื ืคืจื™ื™ืžื•ื•ืขืจืง ื–ืขื ืขืŸ ื–ื™ื™ืขืจ ื‘ืจื™ื™ื˜, ืึทื–ื•ื™ ืื•ื™ื‘ ืื™ืจ ื‘ืึทืฉืœื™ืกืŸ ืฆื• ื’ื™ื™ืŸ ื“ื™ืคึผืขืจ, ื’ื™ื™ืŸ ืฆื• ืจื•ื ื’

ืึทืจืžื™ื˜ืึทื’ืขืึธืคึผืฉืึทืฆื•ื ื’ ืคื•ืŸ ืคืจื™ื™ ืžื›ืฉื™ืจื™ื ืคึฟืึทืจ ืคึผืขื ื˜ืขืกื˜ื™ื ื’ ื•ื•ืขื‘ ืจืขืกื•ืจืกืŸ ืื•ืŸ ืžืขืจ ื•ื• 2
ืึทืจืžื™ื˜ืึทื’ืข - OVA ืคื•ืŸ ื“ื™ ืกื™ื™ื‘ืขืจืคึผื•ื ืง ื–ืฉืึทื ืจืึท GUI ืคึฟืึทืจ Metasploit. ื•ื•ื™ืกื•ืึทืœื™ื–ืขืก ื“ื™ ืฆื™ืœ, ืจืขืงืึทืžืขื ื“ื– ืขืงืกืคึผืœื•ื™ืฅ ืื•ืŸ ื’ื™ื˜ ืึทื•ื•ืึทื ืกื™ืจื˜ืข ืคึฟืขื™ึดืงื™ื™ื˜ืŸ ืคื•ืŸ ื“ื™ ืคืจื™ื™ืžื•ื•ืขืจืง. ืื™ืŸ ืึทืœื’ืขืžื™ื™ืŸ, ืคึฟืึทืจ ื“ื™ ื•ื•ืืก ื•ื•ื™ ืึทืœืฅ ืฆื• ืงื•ืงืŸ ืฉื™ื™ืŸ ืื•ืŸ ื™ืžืคึผืจืขืกื™ื•ื•.
ืกืงืจืขืขื ืงืืกื˜:

ื˜ืขื ืึทื‘ืœืข Nessusยฎืึธืคึผืฉืึทืฆื•ื ื’ ืคื•ืŸ ืคืจื™ื™ ืžื›ืฉื™ืจื™ื ืคึฟืึทืจ ืคึผืขื ื˜ืขืกื˜ื™ื ื’ ื•ื•ืขื‘ ืจืขืกื•ืจืกืŸ ืื•ืŸ ืžืขืจ ื•ื• 2
Tenable Nessusยฎ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ ืกืงืึทื ื ืขืจ - ืงืขื ืขืŸ ื˜ืึธืŸ ืึท ืคึผืœืึทืฅ ืคื•ืŸ ื˜ื™ื ื’ื–, ืึธื‘ืขืจ ืื™ื™ื ืขืจ ืคื•ืŸ ื“ื™ ืงื™ื™ืคึผืึทื‘ื™ืœืึทื˜ื™ื– ื•ื•ืึธืก ืžื™ืจ ื“ืึทืจืคึฟืŸ ืื™ื– ื“ื™ื˜ืขืจืžืึทื ื™ื ื’ ื•ื•ืึธืก ืกืขืจื•ื•ื™ืกืขืก ื”ืึธื‘ืŸ ืขืงืกืคึผืœื•ื™ืฅ. ืคืจื™ื™ ื•ื•ืขืจืกื™ืข ืคื•ืŸ โ€‹โ€‹โ€‹โ€‹ื“ืขื ืคึผืจืึธื“ื•ืงื˜ "ื‘ืœื•ื™ื– ื”ื™ื™ื"

ื‘ืึทื ื™ืฅ:

  • ื“ืึทื•ื ืœืึธื•ื“ื™ื“ (ืคึฟืึทืจ ื“ื™ื™ืŸ ืกื™ืกื˜ืขื), ืื™ื ืกื˜ืึทืœื™ืจืŸ, ืจืขื’ื™ืกื˜ืจื™ืจื˜ (ื“ืขืจ ืฉืœื™ืกืœ ืื™ื– ื’ืขืฉื™ืงื˜ ืฆื• ื“ื™ื™ืŸ E- ื‘ืจื™ื•ื•).
  • ืกื˜ืึทืจื˜ืขื“ ื“ื™ ืกืขืจื•ื•ืขืจ, ืฆื•ื’ืขืœื™ื™ื’ื˜ ื“ืขื ื‘ืึทื ื™ืฆืขืจ ืฆื• Nessus ืกืขืจื•ื•ื™ืจืขืจ ืžืึทื ืึทื’ืขืจ (ืงื ืขืคึผืœ ืคื™ืจืŸ ื™ื•ื–ืขืจื–)
  • ืžื™ืจ ื’ื™ื™ืŸ ืฆื• ื“ื™ ืึทื“ืจืขืก 
    https://localhost:8834/

    ืื•ืŸ ื‘ืึทืงื•ืžืขืŸ ื“ื™ ื‘ืœื™ืฅ ืงืœื™ืขื ื˜ ืื™ืŸ ื“ืขื ื‘ืœืขื˜ืขืจืขืจ

  • ืกืงืึทื ื– -> ืœื™ื™ื’ -> ืคึผืœืึธืžื‘ื™ืจืŸ ื“ื™ ืคืขืœื“ืขืจ (ื“ื•ืจืš ืกืึทืœืขืงื˜ื™ื ื’ ื“ื™ ืกืงืึทื ื™ื ื’ ืคึผืจืึธืคื™ืœ ื•ื•ืึธืก ืื™ื– ืคึผืึทืกื™ืง ืคึฟืึทืจ ืื•ื ื“ื–) ืื•ืŸ ื’ื™ื˜ ื™ื‘ืขืจืงื•ืงืŸ

ื ืึธืš ืขื˜ืœืขื›ืข ืžืึธืœ, ื“ื™ ื™ื‘ืขืจืงื•ืงืŸ ื‘ืึทืจื™ื›ื˜ ื•ื•ืขื˜ ื–ื™ื™ืŸ ื’ืขื•ื•ื™ื–ืŸ ืื™ืŸ ื“ื™ ืจืขืคึผืึธืจืฅ ืงื•ื•ื™ื˜ืœ
ืฆื• ืงืึธื ื˜ืจืึธืœื™ืจืŸ ื“ื™ ืคึผืจืึทืงื˜ื™ืฉ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ ืคื•ืŸ ืกืขืจื•ื•ื™ืกืขืก ืฆื• ืขืงืกืคึผืœื•ื™ืฅ, ืื™ืจ ืงืขื ืขืŸ ื ื•ืฆืŸ ื“ื™ Metasploit Framework ื“ื™ืกืงืจื™ื™ื‘ื“ ืื•ื™ื‘ืŸ ืึธื“ืขืจ ืคึผืจื•ื‘ื™ืจืŸ ืฆื• ื’ืขืคึฟื™ื ืขืŸ ืึท ืขืงืกืคึผืœื•ื™ื˜ื™ื™ืฉืึทืŸ (ืœืžืฉืœ, ืื•ื™ืฃ ืขืงืกืคึผืœืึธื˜-ื“ื‘, ืคึผืึทืงืึทื˜ ืฉื˜ื•ืจืขื, ืขืงืกืคึผืœืึธื˜ ื–ื•ื›ืŸ ืขื˜ืง) ืื•ืŸ ื ื•ืฆืŸ ืขืก ืžืึทื ื™ื•ืึทืœื™ ืงืขื’ืŸ ื–ื™ื™ึทืŸ ืกื™ืกื˜ืขื
IMHO: ืื•ื™ืš ื‘ืึทืœืงื™. ืื™ืš ื’ืขื‘ืจืื›ื˜ ืื™ื ื•ื•ื™ ืื™ื™ื ืขืจ ืคื•ืŸ ื“ื™ ืคื™ืจืขืจ ืื™ืŸ ื“ืขื ืจื™ื›ื˜ื•ื ื’ ืคื•ืŸ ื“ื™ ื•ื•ื™ื™ื›ื•ื•ืืจื’ ืื™ื ื“ื•ืกื˜ืจื™ืข.

ืึธื˜ืึทืžื™ื™ืฉืึทืŸ ืคื•ืŸ ื™ื ื“ื–ืฉืขืงืฉืึทื ื–

ืคื™ืœืข ืคื•ืŸ โ€‹โ€‹ื“ื™ ื•ื•ืขื‘ ืึทืคึผ ืกืขืง ืกืงืึทื ืขืจื– ื–ื•ื›ืŸ ืคึฟืึทืจ ื™ื ื“ื–ืฉืขืงืฉืึทื ื–, ืึธื‘ืขืจ ื–ื™ื™ ื–ืขื ืขืŸ ื ืึธืš ืึทืœื’ืขืžื™ื™ืŸ ืกืงืึทื ืขืจื–. ืื•ืŸ ืขืก ื–ืขื ืขืŸ ื™ื•ื˜ื™ืœืึทื˜ื™ื– ื•ื•ืึธืก ืกืคึผืึทืกื™ืคื™ืงืœื™ ื”ืึทื ื“ืœืขืŸ ืžื™ื˜ ื–ื•ื›ืŸ ืื•ืŸ ืขืงืกืคึผืœื•ื™ื˜ื™ื ื’ ื™ื ื“ื–ืฉืขืงืฉืึทื ื–. ืžื™ืจ ื•ื•ืขืœืŸ ืจืขื“ืŸ ื•ื•ืขื’ืŸ ื–ื™ื™ ืื™ืฆื˜.

ืกืงืœืžืึทืคึผืึธืคึผืฉืึทืฆื•ื ื’ ืคื•ืŸ ืคืจื™ื™ ืžื›ืฉื™ืจื™ื ืคึฟืึทืจ ืคึผืขื ื˜ืขืกื˜ื™ื ื’ ื•ื•ืขื‘ ืจืขืกื•ืจืกืŸ ืื•ืŸ ืžืขืจ ื•ื• 2
ืกืงืœืžืึทืคึผ - ืึธืคึฟืŸ ืžืงื•ืจ ื ื•ืฆืŸ ืคึฟืึทืจ ื–ื•ื›ืŸ ืื•ืŸ ืขืงืกืคึผืœื•ื™ื˜ื™ื ื’ SQL ื™ื ื“ื–ืฉืขืงืฉืึทื ื–. ืฉื˜ื™ืฆื˜ ื“ื™ื™ื˜ืึทื‘ื™ื™ืก ืกืขืจื•ื•ืขืจืก ืึทื–ืึท ื•ื•ื™: MySQL, Oracle, PostgreSQL, Microsoft SQL Server, Microsoft Access, SQLite, Firebird, Sybase, SAP MaxDB.
ื˜ื™ืคึผื™ืฉ ื ื•ืฆืŸ ื‘ื•ื™ืœื– ืึทืจืึธืคึผ ืฆื• ื“ื™ ืฉื•ืจื”:

python sqlmap.py -u "http://example.com/index.php?action=news&id=1"
ืขืก ื–ืขื ืขืŸ ื’ืขื ื•ื’ ืžืึทื ื™ื•ืึทืœื–, ืึทืจื™ื™ึทื ื’ืขืจืขื›ื ื˜ ืื™ืŸ ืจื•ืกื™ืฉ. ื“ื™ ื•ื•ื™ื™ื›ื•ื•ืืจื’ ื–ื™ื™ืขืจ ืคืึทืกื™ืœืึทื˜ื™ื™ืฅ ื“ื™ ืึทืจื‘ืขื˜ ืคื•ืŸ ืึท ืคึผืขื ืกื˜ืขืจ ื•ื•ืขืŸ ืืจื‘ืขื˜ืŸ ืื•ื™ืฃ ื“ืขื ืฉื˜ื—.
ืื™ืš ื•ื•ืขื˜ ืœื™ื™ื’ืŸ ืึท ื‘ืึทืึทืžื˜ืขืจ ื•ื•ื™ื“ืขื ื“ืขืžืึทื ืกื˜ืจื™ื™ืฉืึทืŸ:

bsqlbf-v2
bsqlbf-v2 - ืึท ืคึผืขืจืœ ืฉืจื™ืคื˜, ืึท ื‘ืจื•ื˜ ืคืึธืจืกืขืก ืคึฟืึทืจ "ื‘ืœื™ื ื“" Sql ื™ื ื“ื–ืฉืขืงืฉืึทื ื–. ืขืก ืึทืจื‘ืขื˜ ื‘ื™ื™ื“ืข ืžื™ื˜ ื™ื ื˜ืึทื“ื–ืฉืขืจ ื•ื•ืึทืœื•ืขืก ืื™ืŸ URL ืื•ืŸ ืžื™ื˜ ืฉื˜ืจื™ืงืœ ื•ื•ืึทืœื•ืขืก.
ื“ืึทื˜ืึทื‘ืึทืกืข ืฉื˜ื™ืฆื˜:

  • MS-SQL
  • ืžื™ืกืงืœ
  • ืคึผืึธืกื˜ื’ืจืขืกืงืœ
  • ืึธืจืึทืงืœ

ื‘ืึทื ื™ืฅ ื‘ื™ื™ึทืฉืคึผื™ืœ:

./bsqlbf-v2-3.pl -url www.somehost.com/blah.php?u=5 -blind u -sql "select table_name from imformation_schema.tables limit 1 offset 0" -database 1 -type 1

- URL www.somehost.com/blah.php?u=5 - ืœื™ื ืง ืžื™ื˜ ืคึผืึทืจืึทืžืขื˜ืขืจืก
-ื‘ืœื™ื ื“ ื• - ืคึผืึทืจืึทืžืขื˜ืขืจ ืคึฟืึทืจ ื™ื ื“ื–ืฉืขืงืฉืึทืŸ (ื“ื•ืจืš ืคืขืœื™ืงื™ื™ึทื˜ ื“ื™ ืœืขืฆื˜ืข ืื™ื– ื’ืขื ื•ืžืขืŸ ืคื•ืŸ ื“ื™ ืึทื“ืจืขืก ื‘ืึทืจ)
-ืกืงืœ "ืกืขืœืขืงื˜ื™ืจืŸ ื˜ื™ืฉ_ื ืึทืžืข ืคึฟื•ืŸ ื™ืžืคืึธืจืžืึทื˜ื™ืึธืŸ_ืกื˜ืฉืขืžืึท.ื˜ืึทื‘ืœืขืก ืฉื™ืขื•ืจ 1 ืคืึธื˜ืึธ 0" - ืื•ื ื“ื–ืขืจ ืึทืจื‘ื™ื˜ืจืึทืจื™ืฉ ื‘ืงืฉื” ืฆื• ื“ื™ ื“ืึทื˜ืึทื‘ื™ื™ืก
-ื“ืึทื˜ืึทื‘ื™ื™ืก 1 - ื“ืึทื˜ืึทื‘ื™ื™ืก ืกืขืจื•ื•ืขืจ: MSSQL
- ื˜ื™ืคึผ 1 - ื˜ื™ืคึผ ืคื•ืŸ ื‘ืึทืคืึทืœืŸ, "ื‘ืœื™ื ื“" ื™ื ื“ื–ืฉืขืงืฉืึทืŸ, ื‘ืื–ื™ืจื˜ ืื•ื™ืฃ ืืžืช ืื•ืŸ ื˜ืขื•ืช (ืœืžืฉืœ, ืกื™ื ื˜ืึทืงืก ืขืจืจืึธืจืก) ืจืขืกืคึผืึธื ืกืขืก

ื“ื™ื‘ื•ื’ืขืจื–

ื“ื™ ืžื›ืฉื™ืจื™ื ื–ืขื ืขืŸ ื“ืขืจ ื”ื•ื™ืคึผื˜ ื’ืขื ื™ืฆื˜ ื“ื•ืจืš ื“ืขื•ื•ืขืœืึธืคึผืขืจืก ื•ื•ืขืŸ ื–ื™ื™ ื”ืึธื‘ืŸ ืคึผืจืึธื‘ืœืขืžืก ืžื™ื˜ ื“ื™ ืจืขื–ื•ืœื˜ืึทื˜ืŸ ืคื•ืŸ ืขืงืกืึทืงื™ื•ื˜ื™ื ื’ ื–ื™ื™ืขืจ ืงืึธื“. ืึธื‘ืขืจ ื“ืขืจ ืจื™ื›ื˜ื•ื ื’ ืื™ื– ืื•ื™ืš ื ื•ืฆื™ืง ืคึฟืึทืจ ืคึผืขื ืกื˜ื™ื ื’, ื•ื•ืขืŸ ืžื™ืจ ืงืขื ืขืŸ ืคืึทืจื‘ื™ื™ึทื˜ืŸ ื“ื™ ื“ืึทื˜ืŸ ื•ื•ืึธืก ืžื™ืจ ื“ืึทืจืคึฟืŸ ืื•ื™ืฃ ื“ื™ ืคืœื™ืขืŸ, ืึทื ืึทืœื™ื™ื– ื•ื•ืึธืก ืงื•ืžื˜ ืื™ืŸ ืขื ื˜ืคืขืจ ืฆื• ืื•ื ื“ื–ืขืจ ืึทืจื™ื™ึทื ืฉืจื™ื™ึทื‘ ืคึผืึทืจืึทืžืขื˜ืขืจืก (ืœืžืฉืœ, ื‘ืขืฉืึทืก ืคืึทื–ื™ื ื’), ืืื–"ื• ื•.

ื‘ืขืจืคึผ ืกื•ื•ื™ื˜
ื‘ืขืจืคึผ ืกื•ื•ื™ื˜ - ืึท ืกื›ื•ื ืคื•ืŸ ื™ื•ื˜ื™ืœืึทื˜ื™ื– ื•ื•ืึธืก ื”ืขืœืคึฟืŸ ืžื™ื˜ ื“ื•ืจื›ื“ืจื•ื ื’ ื˜ืขืกืฅ. ืขืก ืื™ื– ืื•ื™ืฃ ื“ื™ ืื™ื ื˜ืขืจื ืขื˜ ื’ื•ื˜ ืจืขืฆืขื ื–ื™ืข ืื™ืŸ ืจื•ืกื™ืฉ ืคึฟื•ืŸ Raz0r (ื›ืึธื˜ืฉ ืคึฟืึทืจ 2008).
ื“ื™ ืคืจื™ื™ ื•ื•ืขืจืกื™ืข ื›ื•ืœืœ:

  • Burp Proxy ืื™ื– ืึท ื”ื™ื’ืข ืคึผืจืึทืงืกื™ ื•ื•ืึธืก ืึทืœืึทื•ื– ืื™ืจ ืฆื• ืžืึธื“ื™ืคื™ืฆื™ืจืŸ ืฉื•ื™ืŸ ื“ื–ืฉืขื ืขืจื™ื™ื˜ืึทื“ ืจื™ืงื•ื•ืขืก ืคึฟื•ืŸ ื“ืขื ื‘ืœืขื˜ืขืจืขืจ
  • ื‘ืขืจืคึผ ืกืคึผื™ื™ื“ืขืจ - ืฉืคึผื™ืŸ, ืึธื ืคึฟืจืขื’ืŸ ืคึฟืึทืจ ื™ื’ื–ื™ืกื˜ื™ื ื’ ื˜ืขืงืขืก ืื•ืŸ ื“ื™ื™ืจืขืงื˜ืขืจื™ื–
  • ื‘ืขืจืคึผ ืจืขืคึผืขืึทื˜ืขืจ - ืžืึทื ื™ื•ืึทืœื™ ืฉื™ืงื˜ ื”ื˜ื˜ืคึผ ืจื™ืงื•ื•ืขืก
  • ื‘ืขืจืคึผ ืกื™ืงื•ื•ืึทื ืกืขืจ - ืึทื ืึทืœื™ื™ื–ื™ื ื’ ื˜ืจืึทืค ื•ื•ืึทืœื•ืขืก ืื™ืŸ ืคืืจืžืขืŸ
  • ื‘ืขืจืคึผ ื“ืขืงืึธื“ืขืจ ืื™ื– ืึท ื ืึธืจืžืึทืœ ืขื ืงืึธื“ืขืจ-ื“ืขืงืึธื“ืขืจ (html, base64, ื”ืขืงืก, ืืื–"ื• ื•), ืคื•ืŸ ื•ื•ืึธืก ืขืก ื–ืขื ืขืŸ ื˜ื•ื™ื–ื ื˜ืขืจ, ื•ื•ืึธืก ืงืขื ืขืŸ ื–ื™ื™ืŸ ื’ืขืฉื•ื•ื™ื ื“ ื’ืขืฉืจื™ื‘ืŸ ืื™ืŸ ืงื™ื™ืŸ ืฉืคึผืจืึทืš
  • ื‘ืขืจืคึผ ืงืึธืžืคึผืึทืจืขืจ - ืฉื˜ืจื™ืงืœ ืคืึทืจื’ืœื™ื™ึทืš ืงืึธืžืคึผืึธื ืขื ื˜

ืื™ืŸ ืคึผืจื™ื ืฆื™ืคึผ, ื“ืขื ืคึผืขืงืœ ืกืึทืœื•ื•ื– ื›ึผืžืขื˜ ืึทืœืข ืคึผืจืึธื‘ืœืขืžืก ืฉื™ื™ึทื›ื•ืช ืฆื• ื“ืขื ื’ืขื’ื ื˜.

ืคื™ื“ื“ืœืขืจืึธืคึผืฉืึทืฆื•ื ื’ ืคื•ืŸ ืคืจื™ื™ ืžื›ืฉื™ืจื™ื ืคึฟืึทืจ ืคึผืขื ื˜ืขืกื˜ื™ื ื’ ื•ื•ืขื‘ ืจืขืกื•ืจืกืŸ ืื•ืŸ ืžืขืจ ื•ื• 2
ืคื™ื“ื“ืœืขืจ - Fiddler ืื™ื– ืึท ื“ื™ื‘ืึทื’ื™ื ื’ ืคึผืจืึทืงืกื™ ื•ื•ืึธืก ืœืึธื’ืก ืึทืœืข ื”ื˜ื˜ืคึผ (S) ืคืึทืจืงืขืจ. ืึทืœืึทื•ื– ืื™ืจ ืฆื• ื•ื ื˜ืขืจื–ื•ื›ืŸ ื“ืขื ืคืึทืจืงืขืจ, ืฉื˜ืขืœืŸ ื‘ืจื™ื™ืงืคึผืึธื™ื ืฅ ืื•ืŸ "ืฉืคึผื™ืœืŸ" ืžื™ื˜ ื™ื ืงืึทืžื™ื ื’ ืึธื“ืขืจ ืึทื•ื˜ื’ืึธื•ื™ื ื’ ื“ืึทื˜ืŸ.

ืขืก ืื™ื– ืื•ื™ืš ืคื™ื™ืขืจืฉืขืขืคึผ, ืคืึทืจื–ืขืขื ื™ืฉ ื•ื•ื™ืจืขืฉืึทืจืง ืื•ืŸ ืื ื“ืขืจืข, ื“ื™ ื‘ืจื™ืจื” ืื™ื– ืึทืจื•ื™ืฃ ืฆื• ื“ืขืจ ื‘ืึทื ื™ืฆืขืจ.

ืกืึธืฃ

ื’ืขื•ื•ื™ื™ื ื˜ืœืขืš, ื™ืขื“ืขืจ ืคึผืขื ืกื˜ืขืจ ื”ืื˜ ื–ื™ื™ึทืŸ ืื™ื™ื’ืŸ ืึทืจืกืขื ืึทืœ ืื•ืŸ ื–ื™ื™ึทืŸ ืื™ื™ื’ืŸ ื’ืึทื ื’ ืคื•ืŸ ื™ื•ื˜ื™ืœืึทื˜ื™ื–, ื•ื•ื™ื™ึทืœ ืขืก ื–ืขื ืขืŸ ืคืฉื•ื˜ ืึท ืคึผืœืึทืฅ ืคื•ืŸ ื–ื™ื™. ืื™ืš ื’ืขืคืจื•ื•ื•ื˜ ืฆื• ืจืฉื™ืžื” ืขื˜ืœืขื›ืข ืคื•ืŸ โ€‹โ€‹ื“ื™ ืžืขืจืกื˜ ื‘ืึทืงื•ื•ืขื ืื•ืŸ ืคืึธืœืงืก ืึธื ืขืก. ืึธื‘ืขืจ ืึทื–ื•ื™ ืึทื– ื•ื•ืขืจ ืขืก ื™ื– ืงืขื ืขืŸ ื–ื™ื™ืŸ ื‘ืึทืงืึทื ื˜ ืžื™ื˜ ืื ื“ืขืจืข ื™ื•ื˜ื™ืœืึทื˜ื™ื– ืื™ืŸ ื“ืขื ืจื™ื›ื˜ื•ื ื’, ืื™ืš ื•ื•ืขืœ ืฆื•ืฉื˜ืขืœืŸ ืœื™ื ืงืก ืื•ื ื˜ืŸ.

ืคืึทืจืฉื™ื“ืŸ ื˜ืึทืคึผืก / ืจืฉื™ืžื•ืช ืคื•ืŸ ืกืงืึทื ืขืจื– ืื•ืŸ ื™ื•ื˜ื™ืœืึทื˜ื™ื–

ืœื™ื ื•ืงืก ื“ื™ืกื˜ืจื™ื‘ื™ื•ืฉืึทื ื– ื•ื•ืึธืก ืฉื•ื™ืŸ ืึทืจื™ื™ึทื ื ืขืžืขืŸ ืึท ื‘ื™ื ื˜ืœ ืคื•ืŸ ืคืึทืจืฉื™ื“ืขื ืข ืคึผืขื ื˜ืขืกื˜ื™ื ื’ ื™ื•ื˜ื™ืœืึทื˜ื™ื–

upd: BurpSuite ื“ืึธืงื•ืžืขื ื˜ืึทื˜ื™ืึธืŸ ืื™ืŸ ืจื•ืกื™ืฉ ืคึฟื•ืŸ ื“ื™ "Hack4Sec" ืžืึทื ืฉืึทืคึฟื˜ (ืฆื•ื’ืขืœื™ื™ื’ื˜ AntonKuzmin)

ืคึผืก ืžื™ืจ ืงืขื ืขืŸ ื ื™ืฉื˜ ื”ืึทืœื˜ืŸ ืฉื˜ื™ืœ ื•ื•ืขื’ืŸ XSpider. ื˜ื•ื˜ ื ื™ืฉื˜ ืึธื ื˜ื™ื™ืœ ื ืขืžืขืŸ ืื™ืŸ ื“ื™ ืจืขืฆืขื ื–ื™ืข, ื›ืึธื˜ืฉ ืขืก ืื™ื– ืฉืึทืจืขื•ื•ืึทืจืข (ืื™ืš ื’ืขืคื•ื ืขืŸ ื•ื•ืขืŸ ืื™ืš ื’ืขืฉื™ืงื˜ ื“ืขื ืึทืจื˜ื™ืงืœ ืฆื• SecLab, ืึทืงืฉืœื™ ื•ื•ื™ื™ึทืœ ืคื•ืŸ ื“ืขื (ื ื™ื˜ ื•ื•ื™ืกืŸ, ืื•ืŸ ืคืขืœืŸ ืคื•ืŸ ื“ื™ ืœืขืฆื˜ ื•ื•ืขืจืกื™ืข 7.8) ืื•ืŸ ื”ืื˜ ื ื™ืฉื˜ ืึทืจื™ื™ึทื ื’ืขืจืขื›ื ื˜ ืขืก ืื™ืŸ ื“ืขื ืึทืจื˜ื™ืงืœ). ืื•ืŸ ืื™ืŸ ื˜ืขืึธืจื™ืข, ืึท ืจืขืฆืขื ื–ื™ืข ืคื•ืŸ โ€‹โ€‹โ€‹โ€‹ืขืก ืื™ื– ืคึผืœืึทื ื ืขื“ (ืื™ืš ื”ืึธื‘ืŸ ืฉื•ื•ืขืจ ื˜ืขืกืฅ ืฆื•ื’ืขื’ืจื™ื™ื˜ ืคึฟืึทืจ ืขืก), ืึธื‘ืขืจ ืื™ืš ื˜ืึธืŸ ื ื™ื˜ ื•ื•ื™ืกืŸ ืฆื™ ื“ื™ ื•ื•ืขืœื˜ ื•ื•ืขื˜ ื–ืขืŸ ืขืก.

PPS ืขื˜ืœืขื›ืข ืžืึทื˜ืขืจื™ืึทืœ ืคื•ืŸ ื“ืขื ืึทืจื˜ื™ืงืœ ื•ื•ืขื˜ ื–ื™ื™ืŸ ื’ืขื•ื•ื™ื™ื ื˜ ืคึฟืึทืจ ื–ื™ื™ืŸ ื‘ื“ืขื” ืฆื™ืœ ืื™ืŸ ืึท ืึทืคึผืงืึทืžื™ื ื’ ื‘ืึทืจื™ื›ื˜ ืื™ืŸ ืงืึธื“ืขืคืขืกื˜ 2012 ืื™ืŸ ื“ื™ QA ืึธืคึผื˜ื™ื™ืœื•ื ื’, ื•ื•ืึธืก ื•ื•ืขื˜ ืึทื ื˜ื”ืึทืœื˜ืŸ ืžื›ืฉื™ืจื™ื ื•ื•ืึธืก ื–ืขื ืขืŸ ื ื™ืฉื˜ ื“ืขืจืžืื ื˜ ื“ืึธ (ืคืจื™ื™, ืคื•ืŸ ืงื•ืจืก), ื•ื•ื™ ื’ืขื–ื•ื ื˜ ื•ื•ื™ ื“ื™ ืึทืœื’ืขืจื™ื“ืึทื, ืื™ืŸ ื•ื•ืึธืก ืกื“ืจ ืฆื• ื ื•ืฆืŸ ื•ื•ืึธืก, ื•ื•ืึธืก ืจืขื–ื•ืœื˜ืึทื˜ ืฆื• ื“ืขืจื•ื•ืึทืจื˜ืŸ, ื•ื•ืึธืก ืงืึทื ืคื™ื’ื™ืขืจื™ื™ืฉืึทื ื– ืฆื• ื ื•ืฆืŸ ืื•ืŸ ืึทืœืข ืกืึธืจืฅ ืคื•ืŸ ื”ื™ื ืฅ ืื•ืŸ ื˜ืจื™ืงืก ื•ื•ืขืŸ ืืจื‘ืขื˜ืŸ (ืื™ืš ื˜ืจืึทื›ื˜ืŸ ื•ื•ืขื’ืŸ ื“ืขื ื‘ืึทืจื™ื›ื˜ ื›ึผืžืขื˜ ื™ืขื“ืขืจ ื˜ืึธื’, ืื™ืš ื•ื•ืขืœ ืคึผืจื•ื‘ื™ืจืŸ ืฆื• ื–ืึธื’ืŸ ืื™ืจ ืึทืœืข ื“ื™ ื‘ืขืกื˜ืขืจ ื•ื•ืขื’ืŸ ื“ื™ ื˜ืขืžืข ื˜ืขืžืข)
ืื’ื‘, ืขืก ืื™ื– ื’ืขื•ื•ืขืŸ ืึท ืœืขืงืฆื™ืข ืื•ื™ืฃ ื“ืขื ืึทืจื˜ื™ืงืœ ืื™ืŸ ืขืคืขื ืขืŸ InfoSec Days (ืคืึทืจื‘ื™ื ื“ืŸ ืื•ื™ืฃ Habrรฉ, ื•ื•ืขื‘ื–ื™ื™ึทื˜ืœ), ืงืขื ืขืŸ ื‘ืึทืจื•ื™ื‘ืŸ ื“ื™ ืงืึธืจืึธื•ื•ืึทื ืก ื’ืขื‘ ื ืงื•ืง ืžืึทื˜ืขืจื™ืึทืœืก.

ืžืงื•ืจ: www.habr.com

ืœื™ื™ื’ืŸ ืึท ื‘ืึทืžืขืจืงื•ื ื’