ืคึผืจืึธื”ืึธืกื˜ืขืจ > ื‘ืœืึธื’ > ืึทื“ืžื™ื ื™ืกื˜ืจืึทืฆื™ืข > ื•ื•ืขื‘ ืžื›ืฉื™ืจื™ื, ืึธื“ืขืจ ื•ื•ื• ืฆื• ืึธื ื”ื™ื™ื‘ืŸ ื•ื•ื™ ืึท ืคึผืขื ืกื˜ืขืจ?

ื•ื•ืขื‘ ืžื›ืฉื™ืจื™ื, ืึธื“ืขืจ ื•ื•ื• ืฆื• ืึธื ื”ื™ื™ื‘ืŸ ื•ื•ื™ ืึท ืคึผืขื ืกื˜ืขืจ?

ืžื™ืจ ืคืึธืจื–ืขืฆืŸ ืจืขื“ืŸ ื•ื•ืขื’ืŸ ื ื•ืฆื™ืง ืžื›ืฉื™ืจื™ื ืคึฟืึทืจ ืคึผืขื ื˜ืขืกื˜ืขืจืก. ืื™ืŸ ื“ื™ ื ื™ื™ึทืข ืึทืจื˜ื™ืงืœ ืžื™ืจ ื•ื•ืขืœืŸ ืงื•ืงืŸ ืื™ืŸ ืžื›ืฉื™ืจื™ื ืคึฟืึทืจ ืึทื ืึทืœื™ื™ื–ื™ื ื’ ื“ื™ ื–ื™ื›ืขืจื”ื™ื™ื˜ ืคื•ืŸ ื•ื•ืขื‘ ืึทืคึผืœืึทืงื™ื™ืฉืึทื ื–.

ืื•ื ื“ื–ืขืจ ืงืึธืœืขื’ืข BeLove ืื™ืš ื”ืื‘ ืฉื•ื™ืŸ ืื–ื•ื™ ื’ืขื˜ื•ืŸ ื–ืึทืžืœื•ื ื’ ื•ื•ืขื’ืŸ ื–ื™ื‘ืŸ ื™ืืจ ืฆื•ืจื™ืง. ืขืก ืื™ื– ื˜ืฉื™ืงืึทื•ื•ืข ืฆื• ื–ืขืŸ ื•ื•ืึธืก ืžื›ืฉื™ืจื™ื ื”ืึธื‘ืŸ ื’ืขื”ืืœื˜ืŸ ืื•ืŸ ืคืืจืฉื˜ืืจืงื˜ ื–ื™ื™ืขืจ ืฉื˜ืขืœืขืก, ืื•ืŸ ื•ื•ืึธืก ื–ืขื ืขืŸ ืคืึทืจื•ื•ื™ื™ืœื˜ ืื™ืŸ ื“ื™ ื”ื™ื ื˜ืขืจื’ืจื•ื ื˜ ืื•ืŸ ื–ืขื ืขืŸ ืื™ืฆื˜ ื–ืขืœื˜ืŸ ื’ืขื ื™ืฆื˜.
ื•ื•ืขื‘ ืžื›ืฉื™ืจื™ื, ืึธื“ืขืจ ื•ื•ื• ืฆื• ืึธื ื”ื™ื™ื‘ืŸ ื•ื•ื™ ืึท ืคึผืขื ืกื˜ืขืจ?

ื‘ืึทืžืขืจืงื•ื ื’ ืึทื– ื“ืึธืก ืื•ื™ืš ื›ื•ืœืœ Burp Suite, ืึธื‘ืขืจ ืขืก ื•ื•ืขื˜ ื–ื™ื™ืŸ ืึท ื‘ืึทื–ื•ื ื“ืขืจ ื•ื™ืกื’ืึทื‘ืข ื•ื•ืขื’ืŸ ืื™ื ืื•ืŸ ื“ื™ ื ื•ืฆื™ืง ืคึผืœื•ื’ื™ื ืก.

ืื™ื ื”ืึทืœื˜:

ืฆื•ื ื•ื™ืคื’ื™ืกืŸ

ืฆื•ื ื•ื™ืคื’ื™ืกืŸ - ืึท ื’ื™ื™ืŸ ื’ืขืฆื™ื™ึทื’ ืคึฟืึทืจ ื–ื•ื›ืŸ ืื•ืŸ ื™ื ื•ืžืขืจื™ื™ื˜ื™ื ื’ DNS ืกื•ื‘ื“ืึธืžืึทื™ื ืก ืื•ืŸ ืžืึทืคึผื™ื ื’ ื“ื™ ืคื•ื ื“ืจื•ื™ืกื ื“ื™ืง ื ืขืฅ. Amass ืื™ื– ืึทืŸ OWASP ืคึผืจื•ื™ืขืงื˜ ื“ื™ื–ื™ื™ื ื“ ืฆื• ื•ื•ื™ื™ึทื–ืŸ ื•ื•ื™ ืึธืจื’ืึทื ืึทื–ื™ื™ืฉืึทื ื– ืื•ื™ืฃ ื“ืขืจ ืื™ื ื˜ืขืจื ืขืฅ ืงื•ืงืŸ ื•ื•ื™ ืึท ืึทื•ืฆื™ื™ื“ืขืจ. ืึทืžืึทืก ื‘ืืงื•ืžื˜ ืกื•ื‘ื“ืึธืžืึทื™ืŸ ื ืขืžืขืŸ ืื™ืŸ ืคืึทืจืฉื™ื“ืŸ ื•ื•ืขื’ืŸ; ื“ื™ ื’ืขืฆื™ื™ึทื’ ื ื™ืฆื˜ ื‘ื™ื™ื“ืข ืจืขืงื•ืจืกื™ื•ื•ืข ื™ื ื•ืžืขืจื™ื™ืฉืึทืŸ ืคื•ืŸ ืกื•ื‘ื“ืึธืžืึทื™ื ืก ืื•ืŸ ืึธืคึฟืŸ ืžืงื•ืจ ืึธื ืคึฟืจืขื’ืŸ.

ืฆื• ืึทื ื˜ื“ืขืงืŸ ื™ื ื˜ืขืจืงืึทื ืขืงื˜ื™ื“ ื ืขืฅ ืกืขื’ืžืึทื ืฅ ืื•ืŸ ืึธื˜ืึทื ืึทืžืึทืก ืกื™ืกื˜ืขื ื ื•ืžืขืจืŸ, Amass ื ื™ืฆื˜ IP ืึทื“ืจืขืกืขืก ื‘ืืงื•ืžืขืŸ ื‘ืขืฉืึทืก ืึธืคึผืขืจืึทืฆื™ืข. ื›ืœ ืื™ื ืคึฟืึธืจืžืึทืฆื™ืข ื’ืขืคื•ื ืขืŸ ืื™ื– ื’ืขื ื™ืฆื˜ ืฆื• ื‘ื•ื™ืขืŸ ืึท ื ืขืฅ ืžืึทืคึผืข.

ืคึผืจืึธืก:

  • ืื™ื ืคึฟืึธืจืžืึทืฆื™ืข ื–ืึทืžืœื•ื ื’ ื˜ืขืงื ื™ืงืก ืึทืจื™ื™ึทื ื ืขืžืขืŸ:
    * ื“ื ืก - ื•ื•ืขืจื˜ืขืจื‘ื•ืš ื–ื•ื›ืŸ ืคื•ืŸ ืกื•ื‘ื“ืึธืžืึทื™ื ืก, ื‘ืจื•ื˜ืคืึธืจืกืข ืกื•ื‘ื“ืึธืžืึทื™ื ืก, ืงืœื•ื’ ื–ื•ื›ืŸ ืžื™ื˜ ืžื™ื•ื˜ื™ื™ืฉืึทื ื– ื‘ืื–ื™ืจื˜ ืื•ื™ืฃ ื’ืขืคึฟื•ื ืขืŸ ืกื•ื‘ื“ืึธืžืึทื™ื ืก, ืคืึทืจืงืขืจื˜ ื“ื ืก ืคึฟืจืื’ืŸ ืื•ืŸ ื–ื•ื›ืŸ ืคึฟืึทืจ ื“ื ืก ืกืขืจื•ื•ืขืจืก ื•ื•ื• ืขืก ืื™ื– ืžืขื’ืœืขืš ืฆื• ืžืึทื›ืŸ ืึท ื–ืึธื ืข ืึทืจื™ื‘ืขืจืคื™ืจืŸ ื‘ืขื˜ืŸ (AXFR);

    * ืขืคึฟืŸ ืžืงื•ืจ ื–ื•ื›ืŸ - ื‘ืขื˜, ื‘ืึทื™ื“ื•, ื‘ื™ื ื’, ืงืึธืžืžืึธื ืงืจืึธืœ, ื“ื ืกื“ื‘, ื“ื ืกื“ื•ืžืคึผืกื˜ืขืจ, ื“ื ืกื˜ืึทื‘ืœืข, ื“ืึธื’ืคึผื™ืœืข, ืขืงืกืึทืœืขื“, ื’ืขืคึฟื™ื ืขืŸ ืกื•ื‘ื“ืึธืžืึทื™ื ืก, Google, IPv4Info, Netcraft, PTRArchive, Riddler, SiteDossier, ThreatCrowd, VirusTotal, Yahoo;

    * ื–ื•ืš TLS ื‘ืึทื•ื•ื™ื™ึทื–ืŸ ื“ืึทื˜ืึทื‘ื™ื™ืกื™ื– - Censys, CertDB, CertSpotter, Crtsh, Entrust;

    * ื ื™ืฆืŸ ื–ื•ื›ืŸ ืžืึธื˜ืึธืจ ืึทืคึผื™ืก - BinaryEdge, BufferOver, CIRCL, HackerTarget, PassiveTotal, Robtex, SecurityTrails, Shodan, Twitter, Umbrella, URLScan;

    * ื–ื•ื›ืŸ ืื™ื ื˜ืขืจื ืขื˜ ื•ื•ืขื‘ ืึทืจืงื™ื™ื•ื•ื–: ArchiveIt, ArchiveToday, Arquivo, LoCARchive, OpenUKArchive, UKGovArchive, Wayback;

  • ื™ื ื˜ืขื’ืจืึทื˜ื™ืึธืŸ ืžื™ื˜ Maltego;
  • ืคึผืจืึธื•ื•ื™ื“ืขืก ื“ื™ ืžืขืจืกื˜ ืคื•ืœืฉื˜ืขื ื“ื™ืง ืงืึทื•ื•ืขืจื™ื“ื–ืฉ ืคื•ืŸ ื“ื™ ืึทืจื‘ืขื˜ ืคื•ืŸ ื–ื•ื›ืŸ ืคึฟืึทืจ DNS ืกื•ื‘ื“ืึธืžืึทื™ื ืก.

ืงืึธื ืก:

  • ื–ื™ื™ืŸ ืึธืคึผื’ืขื”ื™ื˜ ืžื™ื˜ amass.netdomains - ืขืก ื•ื•ืขื˜ ืคึผืจื•ื‘ื™ืจืŸ ืฆื• ืงืึธื ื˜ืึทืงื˜ ื™ืขื“ืขืจ IP ืึทื“ืจืขืก ืื™ืŸ ื“ื™ ื™ื™ื“ืขื ืึทืคื™ื™ื“ ื™ื ืคืจืึทืกื˜ืจืึทืงื˜ืฉืขืจ ืื•ืŸ ื‘ืึทืงื•ืžืขืŸ ืคืขืœื“ ื ืขืžืขืŸ ืคึฟื•ืŸ ืคืึทืจืงืขืจื˜ ื“ื ืก ืœื•ืงืึทืคึผืก ืื•ืŸ TLS ืกืขืจื˜ื™ืคื™ืงืึทืฅ. ื“ืึธืก ืื™ื– ืึท "ื”ื•ื™ืš-ืคึผืจืึธืคื™ืœ" ื˜ืขื›ื ื™ืง, ืขืก ืงืขื ืขืŸ ืึทื ื˜ื“ืขืงืŸ ื“ื™ื™ืŸ ืกื™ื™ื›ืœ ืึทืงื˜ื™ื•ื•ื™ื˜ืขื˜ืŸ ืื™ืŸ ื“ืขืจ ืึธืจื’ืึทื ื™ื–ืึทืฆื™ืข ืื•ื ื˜ืขืจ ื•ื™ืกืคืึธืจืฉื•ื ื’.
  • ื”ื•ื™ืš ื–ื›ึผืจื•ืŸ ืงืึทื ืกืึทืžืฉืึทืŸ, ืงืขื ืขืŸ ืคืึทืจื ื•ืฆืŸ ืึทืจื•ื™ืฃ ืฆื• 2 ื’ื™ื’ืื‘ื™ื™ื˜ ืคื•ืŸ ื‘ืึทืจืึทืŸ ืื™ืŸ ืคืึทืจืฉื™ื“ืขื ืข ืกืขื˜ื˜ื™ื ื’ืก, ื•ื•ืึธืก ื•ื•ืขื˜ ื ื™ืฉื˜ ืœืึธื–ืŸ ืื™ืจ ืœื•ื™ืคืŸ ื“ืขื ื’ืขืฆื™ื™ึทื’ ืื™ืŸ ื“ื™ ื•ื•ืึธืœืงืŸ ืื•ื™ืฃ ืึท ื‘ื™ืœื™ืง VDS.

ื•ื•ืขื‘ ืžื›ืฉื™ืจื™ื, ืึธื“ืขืจ ื•ื•ื• ืฆื• ืึธื ื”ื™ื™ื‘ืŸ ื•ื•ื™ ืึท ืคึผืขื ืกื˜ืขืจ?

ืึทืœื˜ื“ื ืก

ืึทืœื˜ื“ื ืก - ืึท ืคึผื™ื˜ื”ืึธืŸ ื’ืขืฆื™ื™ึทื’ ืคึฟืึทืจ ืงืึทืžืคึผื™ื™ืœื™ื ื’ ื“ื™ืงืฉืึทื ืขืจื™ื– ืคึฟืึทืจ ื™ื ื•ืžืขืจื™ื™ื˜ื™ื ื’ ื“ื ืก ืกื•ื‘ื“ืึธืžืึทื™ื ืก. ืึทืœืึทื•ื– ืื™ืจ ืฆื• ื“ื–ืฉืขื ืขืจื™ื™ื˜ ืคื™ืœืข ื•ื•ืขืจื™ืึทื ืฅ ืคื•ืŸ ืกื•ื‘ื“ืึธืžืึทื™ื ืก ื ื™ืฆืŸ ืžื™ื•ื˜ื™ื™ืฉืึทื ื– ืื•ืŸ ืคึผืขืจืžื™ื•ื˜ื™ื™ืฉืึทื ื–. ืคึฟืึทืจ ื“ืขื, ื•ื•ืขืจื˜ืขืจ ื•ื•ืึธืก ื–ืขื ืขืŸ ืึธืคื˜ ื’ืขืคึฟื•ื ืขืŸ ืื™ืŸ ืกื•ื‘ื“ืึธืžืึทื™ื ืก ื–ืขื ืขืŸ ื’ืขื ื™ืฆื˜ (ืœืžืฉืœ: ื˜ืขืกื˜, ื“ืขื•ื•, ืกื˜ืึทื’ื™ื ื’), ืึทืœืข ืžื™ื•ื˜ื™ื™ืฉืึทื ื– ืื•ืŸ ืคึผืขืจืžื™ื•ื˜ื™ื™ืฉืึทื ื– ื–ืขื ืขืŸ ื’ืขื•ื•ืขื ื“ื˜ ืฆื• ืฉื•ื™ืŸ ื‘ืืงืื ื˜ ืกื•ื‘ื“ืึธืžืึทื™ื ืก, ื•ื•ืึธืก ืงืขื ืขืŸ ื–ื™ื™ืŸ ื“ืขืจืœืื ื’ื˜ ืฆื• ื“ื™ Altdns ืึทืจื™ื™ึทื ืฉืจื™ื™ึทื‘. ื“ืขืจ ืจืขื–ื•ืœื˜ืึทื˜ ืื™ื– ืึท ืจืฉื™ืžื” ืคื•ืŸ ื•ื•ืขืจื™ื™ื™ืฉืึทื ื– ืคื•ืŸ ืกื•ื‘ื“ืึธืžืึทื™ื ืก ื•ื•ืึธืก ืงืขื ืขืŸ ืขืงืกื™ืกื˜ื™ืจืŸ, ืื•ืŸ ื“ื™ ืจืฉื™ืžื” ืงืขื ืขืŸ ืฉืคึผืขื˜ืขืจ ื–ื™ื™ืŸ ื’ืขื•ื•ื™ื™ื ื˜ ืคึฟืึทืจ ื“ื ืก ื‘ืจื•ื˜ ืงืจืึทืคื˜.

ืคึผืจืึธืก:

  • ืึทืจื‘ืขื˜ ื’ืขื–ื•ื ื˜ ืžื™ื˜ ื’ืจื•ื™ืก ื“ืึทื˜ืŸ ืฉื˜ืขืœื˜.

ืึทืงื•ื•ืึทื˜ืึธื ืข

ืึทืงื•ื•ืึทื˜ืึธื ืข - ืื™ื– ื’ืขื•ื•ืขืŸ ืคืจื™ืขืจ ื‘ืืงืื ื˜ ื•ื•ื™ ืืŸ ืื ื“ืขืจ ื’ืขืฆื™ื™ึทื’ ืคึฟืึทืจ ื–ื•ื›ืŸ ืกื•ื‘ื“ืึธืžืึทื™ื ืก, ืึธื‘ืขืจ ื“ืขืจ ืžื—ื‘ืจ ื–ื™ืš ืคืืจืœืื–ืŸ ื“ืขื ืื™ืŸ ื˜ื•ื™ื•ื•ืข ืคื•ืŸ โ€‹โ€‹ื“ื™ ืึทืคืึธืจืžืขื ืฉืึทื ื“ ืึทืžืึทืก. ืื™ืฆื˜ ืึทืงื•ื•ืึทื˜ืึธื ืข ืื™ื– ืจื™ืจื™ื˜ืึทืŸ ืื™ืŸ Go ืื•ืŸ ืื™ื– ืžืขืจ ื’ื™ืจื“ ืฆื• ืคึผืจื™ืœื™ืžืึทื ืขืจื™ ืจื™ืงืึทื ืึทืกืึทื ืก ืื•ื™ืฃ ื•ื•ืขื‘ืกื™ื˜ืขืก. ืฆื• ื˜ืึธืŸ ื“ืึธืก, ืึทืงื•ื•ืึทื˜ืึธื ืข ื’ื™ื™ื˜ ื“ื•ืจืš ื“ื™ ืกืคึผืขืกื™ืคื™ืขื“ ื“ืึธื•ืžื™ื™ื ื– ืื•ืŸ ืึธื ืคึฟืจืขื’ืŸ ืคึฟืึทืจ ื•ื•ืขื‘ืกื™ื˜ืขืก ืื•ื™ืฃ ืคืึทืจืฉื™ื“ืขื ืข ืคึผืึธืจืฅ, ื ืึธืš ื•ื•ืึธืก ืขืก ืงืึทืœืขืงืฅ ืึทืœืข ืื™ื ืคึฟืึธืจืžืึทืฆื™ืข ื•ื•ืขื’ืŸ ื“ืขื ืคึผืœืึทืฅ ืื•ืŸ ื ืขืžื˜ ืึท ืกืงืจืขืขื ืฉืึธื˜. ื‘ืึทืงื•ื•ืขื ืคึฟืึทืจ ืฉื ืขืœ ืคึผืจื™ืœื™ืžืึทื ืขืจื™ ืจื™ืงืึทื ืึทืกืึทื ืก ืคื•ืŸ ื•ื•ืขื‘ืกื™ื˜ืขืก, ื ืึธืš ื•ื•ืึธืก ืื™ืจ ืงืขื ืขืŸ ืื•ื™ืกืงืœื™ื™ึทื‘ืŸ ื‘ื™ืœื›ืขืจืงื™ื™ึทื˜ ื˜ืึทืจื’ืึทืฅ ืคึฟืึทืจ ืื ืคืืœืŸ.

ืคึผืจืึธืก:

  • ื“ืขืจ ืจืขื–ื•ืœื˜ืึทื˜ ืงืจื™ื™ื™ืฅ ืึท ื’ืจื•ืคึผืข ืคื•ืŸ โ€‹โ€‹ื˜ืขืงืขืก ืื•ืŸ ืคืึธืœื“ืขืจืก ื•ื•ืึธืก ื–ืขื ืขืŸ ื‘ืึทืงื•ื•ืขื ืฆื• ื ื•ืฆืŸ ื•ื•ืขืŸ ื•ื•ื™ื™ึทื˜ืขืจ ืืจื‘ืขื˜ืŸ ืžื™ื˜ ืื ื“ืขืจืข ืžื›ืฉื™ืจื™ื:
    * HTML ื‘ืึทืจื™ื›ื˜ ืžื™ื˜ ื’ืขื–ืืžืœื˜ ืกืงืจืขืขื ืฉืึธืฅ ืื•ืŸ ืขื ื˜ืคืขืจ ื˜ื™ื˜ืœืขืŸ ื’ืจื•ืคึผื˜ ื“ื•ืจืš ืขื ืœืขื›ืงื™ื™ื˜;

    * ื ื˜ืขืงืข ืžื™ื˜ ืึทืœืข URL ืก ื•ื•ื• ื•ื•ืขื‘ืกื™ื˜ืขืก ื–ืขื ืขืŸ ื’ืขืคึฟื•ื ืขืŸ;

    * ื˜ืขืงืข ืžื™ื˜ ืกื˜ืึทื˜ื™ืกื˜ื™ืง ืื•ืŸ ื‘ืœืึทื˜ ื“ืึทื˜ืŸ;

    * ื ื˜ืขืงืข ืžื™ื˜ ื˜ืขืงืขืก ืžื™ื˜ ืขื ื˜ืคืขืจ ื›ืขื“ืขืจื– ืคื•ืŸ ื’ืขืคึฟื•ื ืขืŸ ื˜ืึทืจื’ืึทืฅ;

    * ื ื˜ืขืงืข ืžื™ื˜ ื˜ืขืงืขืก ืžื™ื˜ ื“ื™ ื’ื•ืฃ ืคื•ืŸ ื“ื™ ืขื ื˜ืคืขืจ ืคื•ืŸ ื“ื™ ื’ืขืคึฟื•ื ืขืŸ ื˜ืึทืจื’ืึทืฅ;

    * ืกืงืจืขืขื ืฉืึธืฅ ืคื•ืŸ ื’ืขืคึฟื•ื ืขืŸ ื•ื•ืขื‘ืกื™ื˜ืขืก;

  • ืฉื˜ื™ืฆื˜ ืืจื‘ืขื˜ืŸ ืžื™ื˜ ืงืกืžืœ ืจื™ืคึผืึธืจืฅ ืคึฟื•ืŸ ื ืžืึทืคึผ ืื•ืŸ ืžืึทืกืกืงืึทืŸ;
  • ื ื™ืฆื˜ ื›ืขื“ืœืขืกืก ืงืจืึธื•ื / ืงืจืึธื•ืžื™ืึทื ืฆื• ืžืึทื›ืŸ ืกืงืจืขืขื ืฉืึธืฅ.

ืงืึธื ืก:

  • ืขืก ืงืขืŸ ืฆื•ืฆื™ืขืŸ ื“ื™ ื•ืคืžืขืจืงื–ืึทืžืงื™ื™ื˜ ืคื•ืŸ ื™ื ื˜ืจื•ื–ืฉืึทืŸ ื“ื™ื˜ืขืงืฉืึทืŸ ืกื™ืกื˜ืขืžืขืŸ, ืึทื–ื•ื™ ืขืก ืจื™ืงื•ื•ื™ื™ืขืจื– ืงืึทื ืคื™ื’ื™ืขืจื™ื™ืฉืึทืŸ.

ื“ื™ ืกืงืจืขืขื ืฉืึธื˜ ืื™ื– ื’ืขื ื•ืžืขืŸ ืคึฟืึทืจ ืื™ื™ื ืขืจ ืคื•ืŸ ื“ื™ ืึทืœื˜ ื•ื•ืขืจืกื™ืขืก ืคื•ืŸ ืึทืงื•ื•ืึทื˜ืึธื ืข (ื•ื•0.5.0), ืื™ืŸ ื•ื•ืึธืก ื“ื™ ื–ื•ื›ืŸ ืคึฟืึทืจ ื“ื ืก ืกื•ื‘ื“ืึธืžืึทื™ื ืก ืื™ื– ื™ืžืคึผืœืึทืžืขื ืึทื“. ืขืœื˜ืขืจืข ื•ื•ืขืจืกื™ืขืก ืงืขื ืขืŸ ื–ื™ื™ืŸ ื’ืขืคึฟื•ื ืขืŸ ืื™ืŸ ืจื™ืœื™ืกื™ื– ื‘ืœืึทื˜.
ื•ื•ืขื‘ ืžื›ืฉื™ืจื™ื, ืึธื“ืขืจ ื•ื•ื• ืฆื• ืึธื ื”ื™ื™ื‘ืŸ ื•ื•ื™ ืึท ืคึผืขื ืกื˜ืขืจ?

MassDNS

MassDNS ืื™ื– ืืŸ ืื ื“ืขืจ ื’ืขืฆื™ื™ึทื’ ืคึฟืึทืจ ื“ืขืจื’ื™ื™ื•ื ื’ ื“ื ืก ืกื•ื‘ื“ืึธืžืึทื™ื ืก. ื“ืขืจ ื”ื•ื™ืคึผื˜ ื—ื™ืœื•ืง ืื™ื– ืึทื– ืขืก ืžืื›ื˜ ื“ื ืก ืงื•ื•ื™ืจื™ื– ื’ืœื™ื™ึทืš ืฆื• ืคื™ืœืข ืคืึทืจืฉื™ื“ืขื ืข ื“ื ืก ืจืขืกืึธืœื•ื•ืขืจืก ืื•ืŸ ื˜ื•ื˜ ื“ืึธืก ืžื™ื˜ ื”ื™ืคึผืฉ ื’ื™ื›ืงื™ื™ึทื˜.

ืคึผืจืึธืก:

  • ืฉื ืขืœ - ื˜ื•ื™ื’ืขื•ื•ื“ื™ืง ืคื•ืŸ ืจื™ื–ืึทืœื•ื•ื™ื ื’ ืžืขืจ ื•ื•ื™ 350 ื ืขืžืขืŸ ืคึผืขืจ ืกืขืงื•ื ื“ืข.

ืงืึธื ืก:

  • MassDNS ืงืขื ืขืŸ ืึธื ืžืึทื›ืŸ ืึท ื‘ืึทื˜ื™ื™ื˜ื™ืง ืžืึทืกืข ืื•ื™ืฃ ื“ื™ ื“ื ืก ืจืขืกืึธืœื•ื•ืขืจืก ืื™ืŸ ื ื•ืฆืŸ, ื•ื•ืึธืก ืงืขื ืขืŸ ืคื™ืจืŸ ืฆื• ืคืึทืจื‘ืึธื˜ ืคื•ืŸ ื“ื™ ืกืขืจื•ื•ืขืจืก ืึธื“ืขืจ ื˜ืขื ื•ืช ืฆื• ื“ื™ื™ืŸ ISP. ืื™ืŸ ืึทื“ื™ืฉืึทืŸ, ืขืก ื•ื•ืขื˜ ืฉื˜ืขืœืŸ ืึท ื’ืจื•ื™ืก ืžืึทืกืข ืื•ื™ืฃ ื“ื™ ืคื™ืจืžืข 'ืก ื“ื ืก ืกืขืจื•ื•ืขืจืก, ืื•ื™ื‘ ื–ื™ื™ ื”ืึธื‘ืŸ ื–ื™ื™ ืื•ืŸ ืื•ื™ื‘ ื–ื™ื™ ื–ืขื ืขืŸ ืคืึทืจืึทื ื˜ื•ื•ืึธืจื˜ืœืขืš ืคึฟืึทืจ ื“ื™ ื“ืึธื•ืžื™ื™ื ื– ืื™ืจ ืคึผืจื•ื‘ื™ืจืŸ ืฆื• ื”ืึทืœื˜ืŸ.
  • ื“ืขืจ ืจืฉื™ืžื” ืคื•ืŸ ืจืขืกืึธืœื•ื•ืขืจืก ืื™ื– ื“ืขืจื•ื•ื™ื™ึทืœ ืึทื•ื˜ื“ื™ื™ื˜ื™ื“, ืึธื‘ืขืจ ืื•ื™ื‘ ืื™ืจ ืื•ื™ืกืงืœื™ื™ึทื‘ืŸ ื“ื™ ืฆืขื‘ืจืื›ืŸ ื“ื ืก ืจืขืกืึธืœื•ื•ืขืจื– ืื•ืŸ ืœื™ื™ื’ืŸ ื ื™ื™ึท ื‘ืึทื•ื•ื•ืกื˜ ืึธื ืขืก, ืึทืœืฅ ื•ื•ืขื˜ ื–ื™ื™ืŸ ื’ื•ื˜.

ื•ื•ืขื‘ ืžื›ืฉื™ืจื™ื, ืึธื“ืขืจ ื•ื•ื• ืฆื• ืึธื ื”ื™ื™ื‘ืŸ ื•ื•ื™ ืึท ืคึผืขื ืกื˜ืขืจ?
ืกืงืจืขืขื ืฉืึธื˜ ืคื•ืŸ ืึทืงื•ื•ืึทื˜ืึธื ืข v0.5.0

nsec3map

nsec3map ืื™ื– ืึท ืคึผื™ื˜ื”ืึธืŸ ื’ืขืฆื™ื™ึทื’ ืฆื• ื‘ืึทืงื•ืžืขืŸ ืึท ื’ืึทื ืฅ ืจืฉื™ืžื” ืคื•ืŸ DNSSEC-ืคึผืจืึธื˜ืขืงื˜ืขื“ ื“ืึธื•ืžื™ื™ื ื–.

ืคึผืจืึธืก:

  • ื“ื™ืกืงืึทื•ื•ืขืจื– ื’ืขืฉื•ื•ื™ื ื“ ืžื—ื ื•ืช ืื™ืŸ ื“ื ืก ื–ืึธื ืขืก ืžื™ื˜ ืึท ืžื™ื ื™ืžื•ื ื ื•ืžืขืจ ืคื•ืŸ ืงื•ื•ื™ืจื™ื– ืื•ื™ื‘ DNSSEC ืฉื˜ื™ืฆืŸ ืื™ื– ืขื ื™ื™ื‘ืึทืœื“ ืื™ืŸ ื“ืขืจ ื–ืึธื ืข;
  • ื™ื ืงืœื•ื“ื– ืึท ืคึผืœื•ื’ื™ืŸ ืคึฟืึทืจ John the Ripper ื•ื•ืึธืก ืงืขื ืขืŸ ื–ื™ื™ืŸ ื’ืขื•ื•ื™ื™ื ื˜ ืฆื• ืคึผืœืึทืฆืŸ ื“ื™ ืจื™ื–ืึทืœื˜ื™ื ื’ NSEC3 ื”ืึทืฉืขืก.

ืงืึธื ืก:

  • ืคื™ืœืข ื“ื ืก ืขืจืจืึธืจืก ื–ืขื ืขืŸ ื ื™ืฉื˜ ื›ืึทื ื“ืึทืœื“ ืจื™ื›ื˜ื™ืง;
  • ืขืก ืื™ื– ืงื™ื™ืŸ ืึธื˜ืึทืžืึทื˜ื™ืง ืคึผืึทืจืึทืœืขืœื™ื–ืึทื˜ื™ืึธืŸ ืคื•ืŸ ืคึผืจืึทืกืขืกื™ื ื’ ื ืกืขืง ืจืขืงืึธืจื“ืก - ืื™ืจ ื”ืึธื‘ืŸ ืฆื• ื˜ื™ื™ืœืŸ ื“ื™ ื ืึทืžืขืกืคึผืึทืกืข ืžืึทื ื™ื•ืึทืœื™;
  • ื”ื•ื™ืš ื–ื›ึผืจื•ืŸ ืงืึทื ืกืึทืžืฉืึทืŸ.

ืึทืงื•ื ืขื˜ื™ืงืก

ืึทืงื•ื ืขื˜ื™ืงืก - ืึท ื•ื•ืขื‘ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ ืกืงืึทื ื ืขืจ ื•ื•ืึธืก ืึธื˜ืึทืžื™ื™ืฅ ื“ืขื ืคึผืจืึธืฆืขืก ืคื•ืŸ ืงืึธื ื˜ืจืึธืœื™ืจืŸ ื“ื™ ื–ื™ื›ืขืจื”ื™ื™ื˜ ืคื•ืŸ ื•ื•ืขื‘ ืึทืคึผืœืึทืงื™ื™ืฉืึทื ื–. ื˜ืขืกื˜ ื“ื™ ืึทืคึผืœืึทืงื™ื™ืฉืึทืŸ ืคึฟืึทืจ SQL ื™ื ื“ื–ืฉืขืงืฉืึทื ื–, XSS, XXE, SSRF ืื•ืŸ ืคื™ืœืข ืื ื“ืขืจืข ื•ื•ืขื‘ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ื–. ืึธื‘ืขืจ, ื•ื•ื™ ืงื™ื™ืŸ ืื ื“ืขืจืข ืกืงืึทื ื ืขืจ, ืึท ืคืึทืจืฉื™ื™ื“ื ืงื™ื™ึทื˜ ืคื•ืŸ ื•ื•ืขื‘ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ื– ืงืขืŸ ื ื™ืฉื˜ ืคืึทืจื‘ื™ื™ึทื˜ืŸ ืึท ืคึผืขื ืกื˜ืขืจ, ื•ื•ื™ื™ึทืœ ืขืก ืงืขืŸ ื ื™ืฉื˜ ื’ืขืคึฟื™ื ืขืŸ ืงืึธืžืคึผืœืขืงืก ืงื™ื™ื˜ืŸ ืคื•ืŸ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ื– ืึธื“ืขืจ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ื– ืื™ืŸ ืœืึธื’ื™ืง. ืึธื‘ืขืจ ืขืก ืงืึธื•ื•ืขืจืก ืึท ืคึผืœืึทืฅ ืคื•ืŸ ืคืึทืจืฉื™ื“ืขื ืข ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ื–, ืึทืจื™ื™ึทื ื’ืขืจืขื›ื ื˜ ืคืึทืจืฉื™ื“ืŸ CVEs, ื•ื•ืึธืก ื“ื™ ืคึผืขื ืกื˜ืขืจ ืงืขืŸ ื”ืึธื‘ืŸ ืคืืจื’ืขืกืŸ ื•ื•ืขื’ืŸ, ืึทื–ื•ื™ ืขืก ืื™ื– ื–ื™ื™ืขืจ ื‘ืึทืงื•ื•ืขื ืฆื• ื‘ืึทืคืจื™ื™ึทืขืŸ ืื™ืจ ืคื•ืŸ ืจื•ื˜ื™ืŸ ื˜ืฉืขืงืก.

ืคึผืจืึธืก:

  • ื ื™ื“ืขืจื™ืง ืžื“ืจื’ื” ืคื•ืŸ ืคืึทืœืฉ ืคึผืึทื–ืึทื˜ื™ื•ื•ื–;
  • ืจืขื–ื•ืœื˜ืึทื˜ืŸ ืงืขื ืขืŸ ื–ื™ื™ืŸ ื™ืงืกืคึผืึธืจื˜ืึทื“ ื•ื•ื™ ืจื™ืคึผืึธืจืฅ;
  • ืคึผืขืจืคืึธืจืžื– ืึท ื’ืจื•ื™ืก ื ื•ืžืขืจ ืคื•ืŸ ื˜ืฉืขืงืก ืคึฟืึทืจ ืคืึทืจืฉื™ื“ืŸ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ื–;
  • ืคึผืึทืจืึทืœืขืœ ืกืงืึทื ื™ื ื’ ืคื•ืŸ ืงื™ื™ืคืœ ืžื—ื ื•ืช.

ืงืึธื ืก:

  • ืขืก ืื™ื– ืงื™ื™ืŸ ื“ืขื“ื•ืคึผืœื™ืงืึทื˜ื™ืึธืŸ ืึทืœื’ืขืจื™ื“ืึทื (Acunetix ื•ื•ืขื˜ ื‘ืึทื˜ืจืึทื›ื˜ืŸ ื‘ืœืขื˜ืขืจ ื•ื•ืึธืก ื–ืขื ืขืŸ ื™ื™ื“ืขื ื™ืงืึทืœ ืื™ืŸ ืคืึทื ื’ืงืฉืึทื ืึทืœื™ื˜ื™ ืฆื• ื–ื™ื™ืŸ ืึทื ื“ืขืจืฉ, ื•ื•ื™ื™ึทืœ ื–ื™ื™ ืคื™ืจืŸ ืฆื• ืคืึทืจืฉื™ื“ืขื ืข URL ืก), ืึธื‘ืขืจ ื“ื™ ื“ืขื•ื•ืขืœืึธืคึผืขืจืก ื–ืขื ืขืŸ ืืจื‘ืขื˜ืŸ ืื•ื™ืฃ ืขืก;
  • ืจื™ืงื•ื•ื™ื™ืจื– ื™ื™ึทื ืžืึธื ื˜ื™ืจื•ื ื’ ืื•ื™ืฃ ืึท ื‘ืึทื–ื•ื ื“ืขืจ ื•ื•ืขื‘ ืกืขืจื•ื•ืขืจ, ื•ื•ืึธืก ืงืึทืžืคึผืœื™ืงื™ื™ืฅ ื˜ืขืกื˜ื™ื ื’ ืงืœื™ืขื ื˜ ืกื™ืกื˜ืขืžืขืŸ ืžื™ื˜ ืึท VPN ืคึฟืึทืจื‘ื™ื ื“ื•ื ื’ ืื•ืŸ ื ื™ืฆืŸ ื“ื™ ืกืงืึทื ื ืขืจ ืื™ืŸ ืึทืŸ ืืคื’ืขื–ื•ื ื“ืขืจื˜ ืึธืคึผืฉื ื™ื˜ ืคื•ืŸ ื“ื™ ื”ื™ื’ืข ืงืœื™ืขื ื˜ ื ืขืฅ;
  • ื“ื™ ืกืขืจื•ื•ื™ืก ืื•ื ื˜ืขืจ ืœืขืจื ืขืŸ ืงืขืŸ ืžืึทื›ืŸ ืจืึทืฉ, ืœืžืฉืœ, ื“ื•ืจืš ืฉื™ืงืŸ ืฆื• ืคื™ืœืข ื‘ืึทืคืึทืœืŸ ื•ื•ืขืงื˜ืึธืจืก ืฆื• ื“ื™ ืงืึธื ื˜ืึทืงื˜ ืคืึธืจืขื ืื•ื™ืฃ ื“ืขื ืคึผืœืึทืฅ, ื“ืขืจืžื™ื˜ ื–ื™ื™ืขืจ ืงืึทืžืคึผืœืึทืงื™ื™ื˜ื™ื ื’ ื’ืขืฉืขืคื˜ ืคึผืจืึทืกืขืกืึทื–;
  • ืขืก ืื™ื– ืึท ืคึผืจืึทืคึผืจื™ื™ืึทื˜ืขืจื™ ืื•ืŸ, ืึทืงืึธืจื“ื™ื ื’ืœื™, ื ื™ื˜ ืคืจื™ื™ ืœื™ื™ื–ื•ื ื’.

ื•ื•ืขื‘ ืžื›ืฉื™ืจื™ื, ืึธื“ืขืจ ื•ื•ื• ืฆื• ืึธื ื”ื™ื™ื‘ืŸ ื•ื•ื™ ืึท ืคึผืขื ืกื˜ืขืจ?

ื“ื™ืจืกืขืึทืจื˜ืฉ

ื“ื™ืจืกืขืึทืจื˜ืฉ - ืึท ืคึผื™ื˜ื”ืึธืŸ ื’ืขืฆื™ื™ึทื’ ืคึฟืึทืจ ื‘ืจื•ื˜ ืคืึธืจืกื™ื ื’ ื“ื™ื™ืจืขืงื˜ืขืจื™ื– ืื•ืŸ ื˜ืขืงืขืก ืื•ื™ืฃ ื•ื•ืขื‘ืกื™ื˜ืขืก.

ืคึผืจืึธืก:

  • ืงืขื ืขืŸ ืื•ื ื˜ืขืจืฉื™ื™ื“ืŸ ืคืึทืงื˜ื™ืฉ "200 ื’ื•ื˜" ื‘ืœืขื˜ืขืจ ืคื•ืŸ "200 ื’ื•ื˜" ื‘ืœืขื˜ืขืจ, ืึธื‘ืขืจ ืžื™ื˜ ื“ื™ ื˜ืขืงืกื˜ "ื‘ืœืึทื˜ ื ื™ื˜ ื’ืขืคึฟื•ื ืขืŸ";
  • ืงื•ืžื˜ ืžื™ื˜ ืึท ื”ืึทื ื˜ื™ืง ื•ื•ืขืจื˜ืขืจื‘ื•ืš ื•ื•ืึธืก ื”ืื˜ ืึท ื’ื•ื˜ ื•ื•ืึธื’ ืฆื•ื•ื™ืฉืŸ ื’ืจื™ื™ืก ืื•ืŸ ื–ื•ื›ืŸ ืขืคืขืงื˜ื™ื•ื•ืงื™ื™ึทื˜. ื›ึผื•ืœืœ ื ืึธืจืžืึทืœ ืคึผืึทื˜ืก ืคึผืจืึธืกื˜ ืฆื• ืคื™ืœืข CMS ืื•ืŸ ื˜ืขื›ื ืึธืœืึธื’ื™ืข ืกื˜ืึทืงืก;
  • ื–ื™ื™ืŸ ืื™ื™ื’ืขื ืข ื•ื•ืขืจื˜ืขืจื‘ื•ืš ืคึฟืึธืจืžืึทื˜, ื•ื•ืึธืก ืึทืœืึทื•ื– ืื™ืจ ืฆื• ื“ืขืจื’ืจื™ื™ื›ืŸ ื’ื•ื˜ ืขืคืขืงื˜ื™ื•ื•ืงื™ื™ึทื˜ ืื•ืŸ ื‘ื™ื™ื’ื™ืงื™ื™ึทื˜ ืื™ืŸ ื™ื ื•ืžืขืจื™ื™ื˜ื™ื ื’ ื˜ืขืงืขืก ืื•ืŸ ื“ื™ืจืขืงื˜ืขืจื™ื–;
  • ื‘ืึทืงื•ื•ืขื ืจืขื–ื•ืœื˜ืึทื˜ - ืงืœืึธืจ ื˜ืขืงืกื˜, JSON;
  • ืขืก ืงืขื ืขืŸ ื’ืขืจื’ืœ - ืึท ืคึผื•ื™ื–ืข ืฆื•ื•ื™ืฉืŸ ืจื™ืงื•ื•ืขืก, ื•ื•ืึธืก ืื™ื– ื•ื•ื™ื˜ืึทืœ ืคึฟืึทืจ ืงื™ื™ืŸ ืฉื•ื•ืึทืš ื“ื™ื ืกื˜.

ืงืึธื ืก:

  • ืขืงืกื˜ืขื ืกื™ืึธื ืก ืžื•ื–ืŸ ื–ื™ื™ืŸ ื“ื•ืจื›ื’ืขื’ืื ื’ืขืŸ ื•ื•ื™ ืึท ืฉื˜ืจื™ืงืœ, ื•ื•ืึธืก ืื™ื– ื•ืžื‘ืึทืงื•ื•ืขื ืื•ื™ื‘ ืื™ืจ ื“ืึทืจืคึฟืŸ ืฆื• ืคืึธืจืŸ ืคื™ืœืข ื™ืงืกื˜ืขื ืฉืึทื ื– ืื™ืŸ ืึทืžืึธืœ;
  • ืื™ืŸ ืกื“ืจ ืฆื• ื ื•ืฆืŸ ื“ื™ื™ืŸ ื•ื•ืขืจื˜ืขืจื‘ื•ืš, ืขืก ื•ื•ืขื˜ ื–ื™ื™ืŸ ืึท ื‘ื™ืกืœ ืžืึทื“ืึทืคื™ื™ื“ ืฆื• ื“ื™ Dirsearch ื•ื•ืขืจื˜ืขืจื‘ื•ืš ืคึฟืึธืจืžืึทื˜ ืคึฟืึทืจ ืžืึทืงืกื™ืžื•ื ืขืคืขืงื˜ื™ื•ื•ืงื™ื™ึทื˜.

ื•ื•ืขื‘ ืžื›ืฉื™ืจื™ื, ืึธื“ืขืจ ื•ื•ื• ืฆื• ืึธื ื”ื™ื™ื‘ืŸ ื•ื•ื™ ืึท ืคึผืขื ืกื˜ืขืจ?

wfuzz

wfuzz - ืคึผื™ื˜ื”ืึธืŸ ื•ื•ืขื‘ ืึทืคึผืœืึทืงื™ื™ืฉืึทืŸ ืคื•ื–ืจ. ืžื™ืกื˜ืึธืžืข ืื™ื™ื ืขืจ ืคื•ืŸ ื“ื™ ืžืขืจืกื˜ ื‘ืึทืจื™ืžื˜ ื•ื•ืขื‘ ืคืึทืกืขืจื–. ื“ืขืจ ืคึผืจื™ื ืฆื™ืคึผ ืื™ื– ืคึผืฉื•ื˜: wfuzz ืึทืœืึทื•ื– ืื™ืจ ืฆื• ืคืึทืกืข ืงื™ื™ืŸ ืึธืจื˜ ืื™ืŸ ืึท ื”ื˜ื˜ืคึผ ื‘ืขื˜ืŸ, ื•ื•ืึธืก ืžืื›ื˜ ืขืก ืžืขื’ืœืขืš ืฆื• ืคืึทืกืข GET / POST ืคึผืึทืจืึทืžืขื˜ืขืจืก, ื”ื˜ื˜ืคึผ ื›ืขื“ืขืจื–, ืึทืจื™ื™ึทื ื’ืขืจืขื›ื ื˜ ืงื™ื›ืœ ืื•ืŸ ืื ื“ืขืจืข ืึธื˜ืขื ื˜ืึทืงื™ื™ืฉืึทืŸ ื›ืขื“ืขืจื–. ืื™ืŸ ื“ืขืจ ื–ืขืœื‘ื™ืงืขืจ ืฆื™ื™ื˜, ืขืก ืื™ื– ืื•ื™ืš ื‘ืึทืงื•ื•ืขื ืคึฟืึทืจ ืคึผืฉื•ื˜ ื‘ืจื•ื˜ ืงืจืึทืคื˜ ืคื•ืŸ ื“ื™ืจืขืงื˜ืขืจื™ื– ืื•ืŸ ื˜ืขืงืขืก, ืคึฟืึทืจ ื•ื•ืึธืก ืื™ืจ ื“ืึทืจืคึฟืŸ ืึท ื’ื•ื˜ ื•ื•ืขืจื˜ืขืจื‘ื•ืš. ืขืก ืื•ื™ืš ื”ืื˜ ืึท ืคืœืขืงืกืึทื‘ืึทืœ ืคื™ืœื˜ืขืจ ืกื™ืกื˜ืขื, ืžื™ื˜ ื•ื•ืึธืก ืื™ืจ ืงืขื ืขืŸ ืคื™ืœื˜ืขืจ ืจืขืกืคึผืึธื ืกืขืก ืคื•ืŸ ื“ื™ ื•ื•ืขื‘ื–ื™ื™ื˜ืœ ืœื•ื™ื˜ ืคืึทืจืฉื™ื“ืขื ืข ืคึผืึทืจืึทืžืขื˜ืขืจืก, ื•ื•ืึธืก ืึทืœืึทื•ื– ืื™ืจ ืฆื• ื“ืขืจื’ืจื™ื™ื›ืŸ ืขืคืขืงื˜ื™ื•ื• ืจืขื–ื•ืœื˜ืึทื˜ืŸ.

ืคึผืจืึธืก:

  • ืžื•ืœื˜ื™ืคื•ื ืงื˜ื™ืึธื ืึทืœ - ืžืึทื“ื–ืฉืึทืœืขืจ ืกื˜ืจื•ืงื˜ื•ืจ, ืคึฟืึทืจื–ืึทืžืœื•ื ื’ ื ืขืžื˜ ืึท ื‘ื™ืกืœ ืžื™ื ื•ื˜;
  • ื‘ืึทืงื•ื•ืขื ืคึฟื™ืœื˜ืจื™ืจื•ื ื’ ืื•ืŸ ืคืึทื–ื™ื ื’ ืžืขืงืึทื ื™ื–ืึทื;
  • ืื™ืจ ืงืขื ืขืŸ ืคืึทืกืข ืงื™ื™ืŸ ื”ื˜ื˜ืคึผ ืื•ืคึฟืŸ, ื•ื•ื™ ื’ืขื–ื•ื ื˜ ื•ื•ื™ ืงื™ื™ืŸ ืึธืจื˜ ืื™ืŸ ืึท ื”ื˜ื˜ืคึผ ื‘ืขื˜ืŸ.

ืงืึธื ืก:

  • ืื•ื ื˜ืขืจ ืึทื ื˜ื•ื•ื™ืงืœื•ื ื’.

ื•ื•ืขื‘ ืžื›ืฉื™ืจื™ื, ืึธื“ืขืจ ื•ื•ื• ืฆื• ืึธื ื”ื™ื™ื‘ืŸ ื•ื•ื™ ืึท ืคึผืขื ืกื˜ืขืจ?

ffuf

ffuf - ืึท ื•ื•ืขื‘ ืคื•ื–ืขืจ ืื™ืŸ Go, ื‘ืืฉืืคืŸ ืื™ืŸ ื“ื™ "ื‘ื™ืœื“ ืื•ืŸ ื’ืขืฉื˜ืืœื˜" ืคื•ืŸ wfuzz, ืึทืœืึทื•ื– ืื™ืจ ืฆื• ื‘ืจื•ื˜ ื˜ืขืงืขืก, ื“ื™ื™ืจืขืงื˜ืขืจื™ื–, URL ืคึผืึทื˜ืก, ื ืขืžืขืŸ ืื•ืŸ ื•ื•ืึทืœื•ืขืก ืคื•ืŸ GET / POST ืคึผืึทืจืึทืžืขื˜ืขืจืก, ื”ื˜ื˜ืคึผ ื›ืขื“ืขืจื–, ืึทืจื™ื™ึทื ื’ืขืจืขื›ื ื˜ ื“ื™ ื”ืึธืกื˜ ื›ืขื“ืขืจ ืคึฟืึทืจ ื‘ืจื•ื˜ ืงืจืึทืคื˜ ืคื•ืŸ ื•ื•ื™ืจื˜ื•ืึทืœ ืžื—ื ื•ืช. wfuzz ื“ื™ืคืขืจื– ืคื•ืŸ ื–ื™ื™ืŸ ื‘ืจื•ื“ืขืจ ืื™ืŸ ื”ืขื›ืขืจ ื’ื™ื›ืงื™ื™ึทื˜ ืื•ืŸ ืขื˜ืœืขื›ืข ื ื™ื™ึทืข ืคึฟืขื™ึดืงื™ื™ื˜ืŸ, ืœืžืฉืœ, ืขืก ืฉื˜ื™ืฆื˜ Dirsearch ืคึฟืึธืจืžืึทื˜ ื“ื™ืงืฉืึทื ืขืจื™ื–.

ืคึผืจืึธืก:

  • ืคื™ืœื˜ืขืจืก ื–ืขื ืขืŸ ืขื ืœืขืš ืฆื• wfuzz ืคื™ืœื˜ืขืจืก, ื–ื™ื™ ืœืึธื–ืŸ ืื™ืจ ืฆื• ืคืœืขืงืกืึทื‘ืึทืœ ืงืึทื ืคื™ื’ื™ืขืจ ื‘ืจื•ื˜ ืงืจืึทืคื˜;
  • ืึทืœืึทื•ื– ืื™ืจ ืฆื• ืฆืขื”ืึทืงืŸ HTTP ื›ืขื“ืขืจ ื•ื•ืึทืœื•ืขืก, POST ื‘ืขื˜ืŸ ื“ืึทื˜ืŸ ืื•ืŸ ืคืึทืจืฉื™ื“ืŸ ืคึผืึทืจืฅ ืคื•ืŸ ื“ื™ URL, ืึทืจื™ื™ึทื ื’ืขืจืขื›ื ื˜ ื ืขืžืขืŸ ืื•ืŸ ื•ื•ืึทืœื•ืขืก ืคื•ืŸ GET ืคึผืึทืจืึทืžืขื˜ืขืจืก;
  • ืื™ืจ ืงืขื ืขืŸ ืกืคึผืขืฆื™ืคื™ืฆื™ืจืŸ ืงื™ื™ืŸ ื”ื˜ื˜ืคึผ ืื•ืคึฟืŸ.

ืงืึธื ืก:

  • ืื•ื ื˜ืขืจ ืึทื ื˜ื•ื•ื™ืงืœื•ื ื’.

ื•ื•ืขื‘ ืžื›ืฉื™ืจื™ื, ืึธื“ืขืจ ื•ื•ื• ืฆื• ืึธื ื”ื™ื™ื‘ืŸ ื•ื•ื™ ืึท ืคึผืขื ืกื˜ืขืจ?

gobuster

gobuster - ืึท ื’ืึธื• ื’ืขืฆื™ื™ึทื’ ืคึฟืึทืจ ืจื™ืงืึทื ืึทืกืึทื ืก, ื”ืื˜ ืฆื•ื•ื™ื™ ืžืึธื“ืขืก ืคื•ืŸ ืึธืคึผืขืจืึทืฆื™ืข. ื“ืขืจ ืขืจืฉื˜ืขืจ ืื™ื– ื’ืขื ื•ืฆื˜ ืฆื• ื‘ืจื•ื˜ ืงืจืึทืคื˜ ื˜ืขืงืขืก ืื•ืŸ ื“ื™ื™ืจืขืงื˜ืขืจื™ื– ืื•ื™ืฃ ืึท ื•ื•ืขื‘ื–ื™ื™ื˜ืœ, ื“ื™ ืจื’ืข ืื™ื– ื’ืขื ื™ืฆื˜ ืฆื• ื‘ืจื•ื˜ ืงืจืึทืคื˜ ื“ื ืก ืกื•ื‘ื“ืึธืžืึทื™ื ืก. ื“ื™ ื’ืขืฆื™ื™ึทื’ ื˜ื•ื˜ ื ื™ืฉื˜ ื˜ื›ื™ืœืขืก ืฉื˜ื™ืฆืŸ ืจืขืงื•ืจืกื™ื•ื•ืข ื™ื ื•ืžืขืจื™ื™ืฉืึทืŸ ืคื•ืŸ ื˜ืขืงืขืก ืื•ืŸ ื“ื™ื™ืจืขืงื˜ืขืจื™ื–, ื•ื•ืึธืก, ืคื•ืŸ ืงื•ืจืก, ืกืึทื•ื•ืขืก ืฆื™ื™ื˜, ืึธื‘ืขืจ ืื•ื™ืฃ ื“ื™ ืื ื“ืขืจืข ื”ืึทื ื˜, ื“ื™ ื‘ืจื•ื˜ ืงืจืึทืคื˜ ืคื•ืŸ ื™ืขื“ืขืจ ื ื™ื™ึท ืขื ื“ืคึผื•ื™ื ื˜ ืื•ื™ืฃ ื“ืขืจ ื•ื•ืขื‘ื–ื™ื™ื˜ืœ ืžื•ื–ืŸ ื–ื™ื™ืŸ ืœืึธื ื˜ืฉื˜ ืกืขืคึผืขืจืึทื˜ืœื™.

ืคึผืจืึธืก:

  • ื”ื•ื™ืš ื’ื™ื›ืงื™ื™ึทื˜ ืคื•ืŸ ืึธืคึผืขืจืึทืฆื™ืข ื‘ื™ื™ื“ืข ืคึฟืึทืจ ื‘ืจื•ื˜ ืงืจืึทืคื˜ ื–ื•ื›ืŸ ืคื•ืŸ DNS ืกื•ื‘ื“ืึธืžืึทื™ื ืก ืื•ืŸ ืคึฟืึทืจ ื‘ืจื•ื˜ ืงืจืึทืคื˜ ืคื•ืŸ ื˜ืขืงืขืก ืื•ืŸ ื“ื™ื™ืจืขืงื˜ืขืจื™ื–.

ืงืึธื ืก:

  • ื“ื™ ืงืจืึทื ื˜ ื•ื•ืขืจืกื™ืข ืฉื˜ื™ืฆื˜ ื ื™ืฉื˜ ื‘ืึทืฉื˜ืขื˜ื™ืงืŸ ื”ื˜ื˜ืคึผ ื›ืขื“ืขืจื–;
  • ื“ื•ืจืš ืคืขืœื™ืงื™ื™ึทื˜, ื‘ืœื•ื™ื– ืขื˜ืœืขื›ืข ืคื•ืŸ โ€‹โ€‹ื“ื™ ื”ื˜ื˜ืคึผ ืกื˜ืึทื˜ื•ืก ืงืึธื•ื“ื– (200,204,301,302,307) ื–ืขื ืขืŸ ื’ืขืจืขื›ื ื˜ ื•ื•ื™ ื’ื™ืœื˜ื™ืง.

ื•ื•ืขื‘ ืžื›ืฉื™ืจื™ื, ืึธื“ืขืจ ื•ื•ื• ืฆื• ืึธื ื”ื™ื™ื‘ืŸ ื•ื•ื™ ืึท ืคึผืขื ืกื˜ืขืจ?

ืึทืจื“ื–ืฉื•ืŸ

ืึทืจื“ื–ืฉื•ืŸ - ืึท ื’ืขืฆื™ื™ึทื’ ืคึฟืึทืจ ื‘ืจื•ื˜ ืงืจืึทืคื˜ ืคื•ืŸ ืคืึทืจื‘ืึธืจื’ืŸ ื”ื˜ื˜ืคึผ ืคึผืึทืจืึทืžืขื˜ืขืจืก ืื™ืŸ GET / POST ืคึผืึทืจืึทืžืขื˜ืขืจืก, ื•ื•ื™ ื’ืขื–ื•ื ื˜ ื•ื•ื™ ืื™ืŸ JSON. ื“ื™ ื’ืขื‘ื•ื™ื˜-ืื™ืŸ ื•ื•ืขืจื˜ืขืจื‘ื•ืš ื”ืื˜ 25 ื•ื•ืขืจื˜ืขืจ, ื•ื•ืึธืก Ajrun ื˜ืฉืขืงืก ืื™ืŸ ื›ึผืžืขื˜ 980 ืกืขืงื•ื ื“ืขืก. ื“ืขืจ ืงื•ื ืฅ ืื™ื– ืึทื– Ajrun ื˜ื•ื˜ ื ื™ืฉื˜ ืงืึธื ื˜ืจืึธืœื™ืจืŸ ื™ืขื“ืขืจ ืคึผืึทืจืึทืžืขื˜ืขืจ ืกืขืคึผืขืจืึทื˜ืœื™, ืึธื‘ืขืจ ื˜ืฉืขืงืก ~ 30 ืคึผืึทืจืึทืžืขื˜ืขืจืก ืื™ืŸ ืึท ืฆื™ื™ื˜ ืื•ืŸ ื–ืขืŸ ืื•ื™ื‘ ื“ืขืจ ืขื ื˜ืคืขืจ ืื™ื– ืคืืจืขื ื“ืขืจื˜. ืื•ื™ื‘ ื“ืขืจ ืขื ื˜ืคืขืจ ื”ืื˜ ื’ืขื‘ื™ื˜ืŸ, ืขืก ื“ื™ื•ื•ื™ื™ื“ื– ื“ื™ 1000 ืคึผืึทืจืึทืžืขื˜ืขืจืก ืื™ืŸ ืฆื•ื•ื™ื™ ืคึผืึทืจืฅ ืื•ืŸ ื˜ืฉืขืงืก ื•ื•ืึธืก ืคื•ืŸ ื“ื™ ืคึผืึทืจืฅ ืึทืคืขืงืฅ ื“ื™ ืขื ื˜ืคืขืจ. ืื–ื•ื™, ื ื™ืฆืŸ ืึท ืคึผืฉื•ื˜ ื‘ื™ื™ื ืขืจื™ ื–ื•ื›ืŸ, ืึท ืคึผืึทืจืึทืžืขื˜ืขืจ ืึธื“ืขืจ ืขื˜ืœืขื›ืข ืคืึทืจื‘ืึธืจื’ืŸ ืคึผืึทืจืึทืžืขื˜ืขืจืก ื–ืขื ืขืŸ ื’ืขืคึฟื•ื ืขืŸ ื•ื•ืึธืก ื™ื ืคืœื•ืึทื ืกื˜ ื“ื™ ืขื ื˜ืคืขืจ ืื•ืŸ, ื“ืขืจื™ื‘ืขืจ, ืงืขืŸ ืขืงืกื™ืกื˜ื™ืจืŸ.

ืคึผืจืึธืก:

  • ื”ื•ื™ืš ื’ื™ื›ืงื™ื™ึทื˜ ืจืขื›ื˜ ืฆื• ื‘ื™ื™ื ืขืจื™ ื–ื•ื›ืŸ;
  • ืฉื˜ื™ืฆืŸ ืคึฟืึทืจ GET / POST ืคึผืึทืจืึทืžืขื˜ืขืจืก, ื•ื•ื™ ื’ืขื–ื•ื ื˜ ื•ื•ื™ ืคึผืึทืจืึทืžืขื˜ืขืจืก ืื™ืŸ ื“ื™ ืคืึธืจืขื ืคื•ืŸ JSON;

ื“ื™ ืคึผืœื•ื’ื™ืŸ ืคึฟืึทืจ Burp Suite ืึทืจื‘ืขื˜ ืื•ื™ืฃ ืึท ืขื ืœืขืš ืคึผืจื™ื ืฆื™ืคึผ - ืคึผืึทืจืึทื-ืžื™ื™ื ืขืจ, ื•ื•ืึธืก ืื™ื– ืื•ื™ืš ื–ื™ื™ืขืจ ื’ื•ื˜ ืฆื• ื’ืขืคึฟื™ื ืขืŸ ืคืึทืจื‘ืึธืจื’ืŸ ื”ื˜ื˜ืคึผ ืคึผืึทืจืึทืžืขื˜ืขืจืก. ืžื™ืจ ื•ื•ืขืœืŸ ื“ืขืจืฆื™ื™ืœืŸ ืื™ืจ ืžืขืจ ื•ื•ืขื’ืŸ ืื™ื ืื™ืŸ ืึทืŸ ืึทืคึผืงืึทืžื™ื ื’ ืึทืจื˜ื™ืงืœ ื•ื•ืขื’ืŸ Burp ืื•ืŸ ื–ื™ื™ึทืŸ ืคึผืœื•ื’ื™ื ืก.
ื•ื•ืขื‘ ืžื›ืฉื™ืจื™ื, ืึธื“ืขืจ ื•ื•ื• ืฆื• ืึธื ื”ื™ื™ื‘ืŸ ื•ื•ื™ ืึท ืคึผืขื ืกื˜ืขืจ?

LinkFinder

LinkFinder - ืึท ืคึผื™ื˜ื”ืึธืŸ ืฉืจื™ืคื˜ ืคึฟืึทืจ ื–ื•ื›ืŸ ืคึฟืึทืจ ืœื™ื ืงืก ืื™ืŸ ื“ื–ืฉืึทื•ื•ืึทืกืงืจื™ืคึผื˜ ื˜ืขืงืขืก. ื ื•ืฆื™ืง ืคึฟืึทืจ ื“ืขืจื’ื™ื™ื•ื ื’ ืคืึทืจื‘ืึธืจื’ืŸ ืึธื“ืขืจ ืคืืจื’ืขืกืŸ ืขื ื“ืคึผืึธื™ื ืฅ / URL ืก ืื™ืŸ ืึท ื•ื•ืขื‘ ืึทืคึผืœืึทืงื™ื™ืฉืึทืŸ.

ืคึผืจืึธืก:

  • ืฉื ืขืœ;
  • ืขืก ืื™ื– ืึท ืกืคึผืขืฆื™ืขืœ ืคึผืœื•ื’ื™ืŸ ืคึฟืึทืจ ืงืจืึธื•ื ื‘ืื–ื™ืจื˜ ืื•ื™ืฃ LinkFinder.

.

ืงืึธื ืก:

  • ื•ืžื‘ืึทืงื•ื•ืขื ืœืขืฆื˜ ืžืกืงื ื;
  • ื ื™ื˜ ืึทื ืึทืœื™ื™ื– ื“ื–ืฉืึทื•ื•ืึทืกืงืจื™ืคึผื˜ ืื™ื‘ืขืจ ืฆื™ื™ึทื˜;
  • ื’ืึทื ืฅ ืึท ืคึผืฉื•ื˜ ืœืึธื’ื™ืง ืคึฟืึทืจ ื–ื•ื›ืŸ ืคึฟืึทืจ ืœื™ื ืงืก - ืื•ื™ื‘ ื“ื–ืฉืึทื•ื•ืึทืกืงืจื™ืคึผื˜ ืื™ื– ืขืคืขืก ืึทื‘ืคืึทืกืงื™ื™ื˜ืึทื“, ืึธื“ืขืจ ื“ื™ ืœื™ื ืงืก ื–ืขื ืขืŸ ื˜ื›ื™ืœืขืก ืคืขืœื ื“ื™ืง ืื•ืŸ ื“ื–ืฉืขื ืขืจื™ื™ื˜ืึทื“ ื“ื™ื ืึทืžื™ืงืึทืœืœื™, ืขืก ื•ื•ืขื˜ ื ื™ืฉื˜ ืงืขื ืขืŸ ืฆื• ื’ืขืคึฟื™ื ืขืŸ ืขืคึผืขืก.

ื•ื•ืขื‘ ืžื›ืฉื™ืจื™ื, ืึธื“ืขืจ ื•ื•ื• ืฆื• ืึธื ื”ื™ื™ื‘ืŸ ื•ื•ื™ ืึท ืคึผืขื ืกื˜ืขืจ?

JSParser

JSParser ืื™ื– ืึท ืคึผื™ื˜ื”ืึธืŸ ืฉืจื™ืคื˜ ื•ื•ืึธืก ื ื™ืฆื˜ ื˜ืึธืจื ืึทื“ืึธ ะธ JSBeautifier ืฆื• ืคึผืึทืจืก ืงืึธืจืขื•ื• URL ืก ืคื•ืŸ ื“ื–ืฉืึทื•ื•ืึทืกืงืจื™ืคึผื˜ ื˜ืขืงืขืก. ื–ื™ื™ืขืจ ื ื•ืฆื™ืง ืคึฟืึทืจ ื“ื™ื˜ืขืงื˜ื™ื ื’ AJAX ืจื™ืงื•ื•ืขืก ืื•ืŸ ืงืึทืžืคึผื™ื™ืœื™ื ื’ ืึท ืจืฉื™ืžื” ืคื•ืŸ ืึทืคึผื™ ืžืขื˜ื”ืึธื“ืก ืžื™ื˜ ื•ื•ืึธืก ื“ื™ ืึทืคึผืœืึทืงื™ื™ืฉืึทืŸ ื™ื ื˜ืขืจืึทืงืฅ. ืึทืจื‘ืขื˜ ื™ืคืขืงื˜ื™ื•ื•ืœื™ ืื™ืŸ ืงืึทื ื“ื–ืฉืึทื ื’ืงืฉืึทืŸ ืžื™ื˜ LinkFinder.

ืคึผืจืึธืก:

  • ืฉื ืขืœ ืคึผืึทืจืกื™ื ื’ ืคื•ืŸ ื“ื–ืฉืึทื•ื•ืึทืกืงืจื™ืคึผื˜ ื˜ืขืงืขืก.

ื•ื•ืขื‘ ืžื›ืฉื™ืจื™ื, ืึธื“ืขืจ ื•ื•ื• ืฆื• ืึธื ื”ื™ื™ื‘ืŸ ื•ื•ื™ ืึท ืคึผืขื ืกื˜ืขืจ?

ืกืงืœืžืึทืคึผ

ืกืงืœืžืึทืคึผ ืื™ื– ืžื™ืกื˜ืึธืžืข ืื™ื™ื ืขืจ ืคื•ืŸ ื“ื™ ืžืขืจืกื˜ ื‘ืึทืจื™ืžื˜ ืžื›ืฉื™ืจื™ื ืคึฟืึทืจ ืึทื ืึทืœื™ื™ื–ื™ื ื’ ื•ื•ืขื‘ ืึทืคึผืœืึทืงื™ื™ืฉืึทื ื–. ืกืงืœืžืึทืคึผ ืึธื˜ืึทืžื™ื™ืฅ ื“ื™ ื–ื•ื›ืŸ ืื•ืŸ ืึธืคึผืขืจืึทืฆื™ืข ืคื•ืŸ โ€‹โ€‹ืกืงืœ ื™ื ื“ื–ืฉืขืงืฉืึทื ื–, ืึทืจื‘ืขื˜ ืžื™ื˜ ืขื˜ืœืขื›ืข ืกืงืœ ื“ื™ื™ืึทืœืขืงืฅ, ืื•ืŸ ื”ืื˜ ืึท ืจื™ื–ื™ืง ื ื•ืžืขืจ ืคื•ืŸ ืคืึทืจืฉื™ื“ืขื ืข ื˜ืขืงื ื™ืงืก ืื™ืŸ ื–ื™ื™ืŸ ืึทืจืกืขื ืึทืœ, ืจื™ื™ื ื“ื–ืฉื™ื ื’ ืคื•ืŸ ื’ืœื™ื™ึทืš-ืึทืจื•ื™ืฃ ืงื•ื•ืึธื˜ืขืก ืฆื• ืงืึธืžืคึผืœืขืงืก ื•ื•ืขืงื˜ืึธืจืก ืคึฟืึทืจ ืฆื™ื™ื˜-ื‘ืื–ื™ืจื˜ ืกืงืœ ื™ื ื“ื–ืฉืขืงืฉืึทื ื–. ืื™ืŸ ืึทื“ื™ืฉืึทืŸ, ืขืก ื”ืื˜ ืคื™ืœืข ื˜ืขืงื ื™ืงืก ืคึฟืึทืจ ื•ื•ื™ื™ึทื˜ืขืจ ืขืงืกืคึผืœื•ื™ื˜ื™ื™ืฉืึทืŸ ืคึฟืึทืจ ืคืึทืจืฉื™ื“ืŸ ื“ื‘ืžืก, ืึทื–ื•ื™ ืขืก ืื™ื– ื ื•ืฆื™ืง ื ื™ื˜ ื ืึธืจ ื•ื•ื™ ืึท ืกืงืึทื ื ืขืจ ืคึฟืึทืจ ืกืงืœ ื™ื ื“ื–ืฉืขืงืฉืึทื ื–, ืึธื‘ืขืจ ืื•ื™ืš ื•ื•ื™ ืึท ืฉื˜ืึทืจืง ื’ืขืฆื™ื™ึทื’ ืคึฟืึทืจ ืขืงืกืคึผืœื•ื™ื˜ื™ื ื’ ืฉื•ื™ืŸ ื’ืขืคึฟื•ื ืขืŸ ืกืงืœ ื™ื ื“ื–ืฉืขืงืฉืึทื ื–.

ืคึผืจืึธืก:

  • ื ื’ืจื•ื™ืก ื ื•ืžืขืจ ืคื•ืŸ ืคืึทืจืฉื™ื“ืขื ืข ื˜ืขืงื ื™ืงืก ืื•ืŸ ื•ื•ืขืงื˜ืึธืจืก;
  • ื ื™ื“ืขืจื™ืง ื ื•ืžืขืจ ืคื•ืŸ ืคืึทืœืฉ ืคึผืึทื–ืึทื˜ื™ื•ื•ื–;
  • ืคื™ืœืข ืคื™ื™ืŸ-ื˜ื•ื ื™ื ื’ ืึธืคึผืฆื™ืขืก, ืคืึทืจืฉื™ื“ืŸ ื˜ืขืงื ื™ืงืก, ืฆื™ืœ ื“ืึทื˜ืึทื‘ื™ื™ืก, ื˜ืึทืžืคึผืขืจ ืกืงืจื™ืคึผืก ืคึฟืึทืจ ื‘ื™ื™ืคึผืึทืกื™ื ื’ WAF;
  • ืคื™ื™ื™ืงื™ื™ื˜ ืฆื• ืฉืึทืคึฟืŸ ืคึผืจืึธื“ื•ืงืฆื™ืข ื“ืึทืžืคึผ;
  • ืคื™ืœืข ืคืึทืจืฉื™ื“ืขื ืข ืึทืคึผืขืจื™ื™ืฉืึทื ืึทืœ ืงื™ื™ืคึผืึทื‘ื™ืœืึทื˜ื™ื–, ืœืžืฉืœ, ืคึฟืึทืจ ืขื˜ืœืขื›ืข ื“ืึทื˜ืึทื‘ื™ื™ืกื™ื– - ืึธื˜ืึทืžืึทื˜ื™ืง ืœืึธื•ื“ื™ื ื’ / ืึทื ืœืึธื•ื“ื™ื ื’ ืคื•ืŸ ื˜ืขืงืขืก, ื‘ืึทืงื•ืžืขืŸ ื“ื™ ืคื™ื™ื™ืงื™ื™ื˜ ืฆื• ื•ื™ืกืคื™ืจืŸ ืงืึทืžืึทื ื“ื– (RCE) ืื•ืŸ ืื ื“ืขืจืข;
  • ืฉื˜ื™ืฆืŸ ืคึฟืึทืจ ื“ื™ืจืขืงื˜ ืงืฉืจ ืฆื• ื“ื™ ื“ืึทื˜ืึทื‘ื™ื™ืก ื ื™ืฆืŸ ื“ืึทื˜ืŸ ื‘ืืงื•ืžืขืŸ ื‘ืขืฉืึทืก ืึท ื‘ืึทืคืึทืœืŸ;
  • ืื™ืจ ืงืขื ืขืŸ ืคืึธืจืœื™ื™ื’ืŸ ืึท ื˜ืขืงืกื˜ ื˜ืขืงืข ืžื™ื˜ ื“ื™ ืจืขื–ื•ืœื˜ืึทื˜ืŸ ืคื•ืŸ ื‘ืขืจืคึผ ื•ื•ื™ ืึทืจื™ื™ึทื ืฉืจื™ื™ึทื‘ - ื ื™ื˜ ื“ืึทืจืคึฟืŸ ืฆื• ืžืึทื ื™ื•ืึทืœื™ ืงืึทืžืคึผืึธื•ื– ืึทืœืข ื“ื™ ืึทื˜ืจื™ื‘ื™ื•ืฅ ืคื•ืŸ ื“ื™ ื‘ืึทืคึฟืขืœืŸ ืฉื•ืจื”.

ืงืึธื ืก:

  • ืขืก ืื™ื– ืฉื•ื•ืขืจ ืฆื• ืงืึทืกื˜ืึทืžื™ื™ื–, ืœืžืฉืœ, ืฆื• ืฉืจื™ื™ึทื‘ืŸ ืขื˜ืœืขื›ืข ืคื•ืŸ โ€‹โ€‹ื“ื™ื™ืŸ ืื™ื™ื’ืŸ ื˜ืฉืขืงืก ืจืขื›ื˜ ืฆื• ื“ืขืจ ืงื ืึทืคึผ ื“ืึทืงื™ื•ืžืขื ื˜ื™ื™ืฉืึทืŸ ืคึฟืึทืจ ื“ืขื;
  • ืึธืŸ ื“ื™ ืฆื•ื ืขืžืขืŸ ืกืขื˜ื˜ื™ื ื’ืก, ืขืก ืคึผืขืจืคืึธืจืžื– ืึท ื“ืขืจืขื ื“ื™ืงื˜ ื’ืึทื ื’ ืคื•ืŸ ื˜ืฉืขืงืก, ื•ื•ืึธืก ืงืขื ืขืŸ ื–ื™ื™ืŸ ืžื™ืกืœื™ื“ื™ื ื’.

ื•ื•ืขื‘ ืžื›ืฉื™ืจื™ื, ืึธื“ืขืจ ื•ื•ื• ืฆื• ืึธื ื”ื™ื™ื‘ืŸ ื•ื•ื™ ืึท ืคึผืขื ืกื˜ืขืจ?

NoSQLMap

NoSQLMap - ืึท ืคึผื™ื˜ื”ืึธืŸ ื’ืขืฆื™ื™ึทื’ ืคึฟืึทืจ ืึธื˜ืึทืžื™ื™ื˜ื™ื ื’ ื“ื™ ื–ื•ื›ืŸ ืื•ืŸ ืขืงืกืคึผืœื•ื™ื˜ื™ื™ืฉืึทืŸ ืคื•ืŸ NoSQL ื™ื ื“ื–ืฉืขืงืฉืึทื ื–. ืขืก ืื™ื– ื‘ืึทืงื•ื•ืขื ืฆื• ื ื•ืฆืŸ ื ื™ื˜ ื‘ืœื•ื™ื– ืื™ืŸ NoSQL ื“ืึทื˜ืึทื‘ื™ื™ืกื™ื–, ืึธื‘ืขืจ ืื•ื™ืš ื’ืœื™ื™ืš ื•ื•ืขืŸ ืึทื“ืึทื˜ื™ื ื’ ื•ื•ืขื‘ ืึทืคึผืœืึทืงื™ื™ืฉืึทื ื– ื•ื•ืึธืก ื ื•ืฆืŸ NoSQL.

ืคึผืจืึธืก:

  • ื•ื•ื™ sqlmap, ืขืก ื ื™ื˜ ื‘ืœื•ื™ื– ื’ืขืคื™ื ื˜ ืึท ืคึผืึธื˜ืขื ืฆื™ืขืœ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™, ืึธื‘ืขืจ ืื•ื™ืš ื˜ืฉืขืง ื“ื™ ืžืขื’ืœืขื›ืงื™ื™ื˜ ืคื•ืŸ ื–ื™ื™ึทืŸ ืขืงืกืคึผืœื•ื™ื˜ื™ื™ืฉืึทืŸ ืคึฟืึทืจ MongoDB ืื•ืŸ CouchDB.

ืงืึธื ืก:

  • ืฉื˜ื™ืฆื˜ ื ื™ื˜ NoSQL ืคึฟืึทืจ Redis, Cassandra, ืึทื ื˜ื•ื•ื™ืงืœื•ื ื’ ืื™ื– ืึทื ื“ืขืจื•ื•ื™ื™ ืื™ืŸ ื“ืขื ืจื™ื›ื˜ื•ื ื’.

oxml_xxe

oxml_xxe - ืึท ื’ืขืฆื™ื™ึทื’ ืคึฟืึทืจ ืขืžื‘ืขื“ื“ื™ื ื’ XXE XML ืขืงืกืคึผืœื•ื™ืฅ ืื™ืŸ ืคืึทืจืฉื™ื“ืŸ ื˜ื™ื™ืคึผืก ืคื•ืŸ ื˜ืขืงืขืก ื•ื•ืึธืก ื ื•ืฆืŸ ื“ื™ XML ืคึฟืึธืจืžืึทื˜ ืื™ืŸ ืขื˜ืœืขื›ืข ืคืึธืจืขื.

ืคึผืจืึธืก:

  • ืฉื˜ื™ืฆื˜ ืคื™ืœืข ืคึผืจืึธืกื˜ ืคึฟืึธืจืžืึทื˜ื™ืจื•ื ื’ืขืŸ ืึทื–ืึท ื•ื•ื™ DOCX, ODT, SVG, XML.

ืงืึธื ืก:

  • ืฉื˜ื™ืฆืŸ ืคึฟืึทืจ PDF, JPEG, GIF ืื™ื– ื ื™ืฉื˜ ื’ืึธืจ ื™ืžืคึผืœืึทืžืขื ืึทื“;
  • ืงืจื™ื™ื™ืฅ ื‘ืœื•ื™ื– ืื™ื™ืŸ ื˜ืขืงืข. ืฆื• ืกืึธืœื•ื•ืข ื“ืขื ืคึผืจืึธื‘ืœืขื ืื™ืจ ืงืขื ืขืŸ ื ื•ืฆืŸ ื“ื™ ื’ืขืฆื™ื™ึทื’ ื“ืึธืงื, ื•ื•ืึธืก ืงืขื ืขืŸ ืžืึทื›ืŸ ืึท ื’ืจื•ื™ืก ื ื•ืžืขืจ ืคื•ืŸ ืคึผื™ื™ืœืึธื•ื“ ื˜ืขืงืขืก ืื™ืŸ ืคืึทืจืฉื™ื“ืขื ืข ืขืจื˜ืขืจ.

ื“ื™ ืื•ื™ื‘ืŸ ื™ื•ื˜ื™ืœืึทื˜ื™ื– ื˜ืึธืŸ ืึท ื’ืจื•ื™ืก ืึทืจื‘ืขื˜ ืคื•ืŸ ื˜ืขืกื˜ื™ื ื’ XXE ื•ื•ืขืŸ ืœืึธื•ื“ื™ื ื’ ื“ืึธืงื•ืžืขื ื˜ืŸ ืžื™ื˜ XML. ืึธื‘ืขืจ ืื•ื™ืš ื’ืขื“ืขื ืงืขืŸ ืึทื– XML ืคึฟืึธืจืžืึทื˜ ื”ืึทื ื“ืœืขืจืก ืงืขื ืขืŸ ื–ื™ื™ืŸ ื’ืขืคึฟื•ื ืขืŸ ืื™ืŸ ืคื™ืœืข ืื ื“ืขืจืข ืงืึทืกืขืก, ืœืžืฉืœ, XML ืงืขื ืขืŸ ื–ื™ื™ืŸ ื’ืขื•ื•ื™ื™ื ื˜ ื•ื•ื™ ืึท ื“ืึทื˜ืŸ ืคึฟืึธืจืžืึทื˜ ืึทื ืฉื˜ืึธื˜ ืคื•ืŸ JSON.

ื“ืขืจื™ื‘ืขืจ, ืžื™ืจ ืจืขืงืึธืžืขื ื“ื™ืจืŸ ืึทื– ืื™ืจ ื‘ืึทืฆืึธืœืŸ ื•ืคืžืขืจืงื–ืึทืžืงื™ื™ื˜ ืฆื• ื“ื™ ืคืืœื’ืขื ื“ืข ืจื™ืคึผืึทื–ืึทื˜ืึธืจื™, ื•ื•ืึธืก ื›ึผื•ืœืœ ืึท ื’ืจื•ื™ืก ื ื•ืžืขืจ ืคื•ืŸ ืคืึทืจืฉื™ื“ืขื ืข ืคึผื™ื™ืœืึธื•ื“ื–: PayloadsAllTheThings.

tplmap

tplmap - ืึท ืคึผื™ื˜ื”ืึธืŸ ื’ืขืฆื™ื™ึทื’ ืคึฟืึทืจ ืื•ื™ื˜ืึธืžืึทื˜ื™ืฉ ื™ื“ืขื ื˜ื™ืคื™ืฆื™ืจืŸ ืื•ืŸ ืขืงืกืคึผืœื•ื™ื˜ื™ื ื’ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ื– ืคื•ืŸ ืกืขืจื•ื•ื™ืจืขืจ-ื–ื™ื™ึทื˜ ืžื•ืกื˜ืขืจ ื™ื ื“ื–ืฉืขืงืฉืึทืŸ; ืขืก ื”ืื˜ ืกืขื˜ื˜ื™ื ื’ืก ืื•ืŸ ืคืœืึทื’ืก ืขื ืœืขืš ืฆื• sqlmap. ื ื™ืฆื˜ ืขื˜ืœืขื›ืข ืคืึทืจืฉื™ื“ืขื ืข ื˜ืขืงื ื™ืงืก ืื•ืŸ ื•ื•ืขืงื˜ืึธืจืก, ืึทืจื™ื™ึทื ื’ืขืจืขื›ื ื˜ ื‘ืœื™ื ื“ ื™ื ื“ื–ืฉืขืงืฉืึทืŸ, ืื•ืŸ ืื•ื™ืš ื”ืื˜ ื˜ืขืงื ื™ืงืก ืคึฟืึทืจ ืขืงืกืึทืงื™ื•ื˜ื™ื ื’ ืงืึธื“ ืื•ืŸ ืœืึธื•ื“ื™ื ื’ / ื•ืคึผืœืึธืึทื“ื™ื ื’ ืึทืจื‘ื™ื˜ืจืึทืจื™ืฉ ื˜ืขืงืขืก. ืื™ืŸ ืึทื“ื™ืฉืึทืŸ, ืขืจ ื”ืื˜ ืื™ืŸ ื–ื™ื™ืŸ ืึทืจืกืขื ืึทืœ ื˜ืขืงื ื™ืงืก ืคึฟืึทืจ ืึท ื˜ื•ืฅ ืคืึทืจืฉื™ื“ืขื ืข ืžื•ืกื˜ืขืจ ืขื ื“ื–ืฉืึทื ื– ืื•ืŸ ืขื˜ืœืขื›ืข ื˜ืขืงื ื™ืงืก ืคึฟืึทืจ ื–ื•ื›ืŸ ืคึฟืึทืจ ืขื•ื•ืึทืœ ()-ื•ื•ื™ ืงืึธื“ ื™ื ื“ื–ืฉืขืงืฉืึทื ื– ืื™ืŸ ืคึผื™ื˜ื”ืึธืŸ, ืจื•ื‘ื™, ืคืคึผ, ื“ื–ืฉืึทื•ื•ืึทืกืงืจื™ืคึผื˜. ืื•ื™ื‘ ื’ืขืจืึธื˜ืŸ, ืขืก ืึธืคึผืขื ืก ืึท ื™ื ื˜ืขืจืึทืงื˜ื™ื•ื• ืงืึทื ืกืึธื•ืœ.

ืคึผืจืึธืก:

  • ื ื’ืจื•ื™ืก ื ื•ืžืขืจ ืคื•ืŸ ืคืึทืจืฉื™ื“ืขื ืข ื˜ืขืงื ื™ืงืก ืื•ืŸ ื•ื•ืขืงื˜ืึธืจืก;
  • ืฉื˜ื™ืฆื˜ ืคื™ืœืข ืžื•ืกื˜ืขืจ ืจืขื ื“ืขืจื™ื ื’ ืขื ื“ื–ืฉืึทื ื–;
  • ืคื™ืœืข ืึทืคึผืขืจื™ื™ื˜ื™ื ื’ ื˜ืขืงื ื™ืงืก.

CeWL

CeWL - ืึท ื•ื•ืขืจื˜ืขืจื‘ื•ืš ื’ืขื ืขืจืึทื˜ืึธืจ ืื™ืŸ ืจื•ื‘ื™, ื‘ืืฉืืคืŸ ืฆื• ืขืงืกื˜ืจืึทืงื˜ ื™ื™ื ืฆื™ืง ื•ื•ืขืจื˜ืขืจ ืคื•ืŸ ืึท ืกืคึผืขืกื™ืคื™ืขื“ ื•ื•ืขื‘ื–ื™ื™ื˜ืœ, ื’ื™ื™ื˜ ืœื™ื ืงืก ืื•ื™ืฃ ื“ืขื ืคึผืœืึทืฅ ืฆื• ืึท ืกืคึผืขืฆื™ืคึฟื™ืฉ ื˜ื™ืคืงื™ื™ึทื˜. ื“ืขืจ ืฆื•ื ื•ื™ืคื’ืขืฉื˜ืขืœื˜ ื•ื•ืขืจื˜ืขืจื‘ื•ืš ืคื•ืŸ ื™ื™ื ืฆื™ืง ื•ื•ืขืจื˜ืขืจ ืงืขื ืขืŸ ืฉืคึผืขื˜ืขืจ ื•ื•ืขืจืŸ ื’ืขื ื•ืฆื˜ ืฆื• ื‘ืจื•ื˜ ืงืจืึทืคื˜ ืคึผืึทืกื•ื•ืขืจื“ื– ืื•ื™ืฃ ืกืขืจื•ื•ื™ืกืขืก ืึธื“ืขืจ ื‘ืจื•ื˜ ืงืจืึทืคื˜ ื˜ืขืงืขืก ืื•ืŸ ื“ื™ื™ืจืขืงื˜ืขืจื™ื– ืื•ื™ืฃ ื“ืขืจ ื–ืขืœื‘ื™ืงืขืจ ื•ื•ืขื‘ื–ื™ื™ื˜ืœ, ืึธื“ืขืจ ืฆื• ื‘ืึทืคืึทืœืŸ ื“ื™ ืจื™ื–ืึทืœื˜ื™ื ื’ ื›ืึทืฉื™ื– ื ื™ืฆืŸ ื”ืึทืฉืงืึทื˜ ืึธื“ืขืจ ื™ื•ื—ื ืŸ ื“ื™ ืจื™ืคึผืขืจ. ื ื•ืฆื™ืง ื•ื•ืขืŸ ืงืึทืžืคึผื™ื™ืœื™ื ื’ ืึท "ืฆื™ืœ" ืจืฉื™ืžื” ืคื•ืŸ ืคึผืึธื˜ืขื ืฆื™ืขืœ ืคึผืึทืกื•ื•ืขืจื“ื–.

ืคึผืจืึธืก:

  • ื’ืจื™ื ื’ ืฆื• ื ื•ืฆืŸ.

ืงืึธื ืก:

  • ืื™ืจ ื“ืึทืจืคึฟืŸ ืฆื• ื–ื™ื™ืŸ ืึธืคึผื’ืขื”ื™ื˜ ืžื™ื˜ ื“ื™ ื–ื•ื›ืŸ ื˜ื™ืคืงื™ื™ึทื˜ ืึทื–ื•ื™ ื ื™ืฉื˜ ืฆื• ื›ืึทืคึผืŸ ืึทืŸ ืขืงืกื˜ืจืข ืคืขืœื“.

ื•ื•ืขืึทืงืคึผืึทืกืก

ื•ื•ืขืึทืงืคึผืึทืกืก - ืึท ื“ื™ื ืกื˜ ืžื™ื˜ ืคื™ืœืข ื“ื™ืงืฉืึทื ืขืจื™ื– ืžื™ื˜ ื™ื™ื ืฆื™ืง ืคึผืึทืกื•ื•ืขืจื“ื–. ื’ืึธืจ ื ื•ืฆื™ืง ืคึฟืึทืจ ืคืึทืจืฉื™ื“ืŸ ื˜ืึทืกืงืก ืฉื™ื™ึทื›ื•ืช ืฆื• ืฉืคึผืจื™ื›ื•ื•ืึธืจื˜ ืงืจืึทืงื™ื ื’, ืจื™ื™ื ื“ื–ืฉื™ื ื’ ืคื•ืŸ ืคึผืฉื•ื˜ ืึธื ืœื™ื™ืŸ ื‘ืจื•ื˜ ืงืจืึทืคื˜ ืคื•ืŸ ืึทืงืึทื•ื ืฅ ืื•ื™ืฃ ืฆื™ืœ ื‘ืึทื“ื™ื ื•ื ื’ืก, ืฆื• ืึธืคืคืœื™ื ืข ื‘ืจื•ื˜ ืงืจืึทืคื˜ ืคื•ืŸ ื‘ืืงื•ืžืขืŸ ื”ืึทืฉืขืก ื ื™ืฆืŸ ื”ืึทืฉืงืึทื˜ ืึธื“ืขืจ ื™ื•ื—ื ืŸ ื“ื™ ืจื™ืคึผืขืจ. ืขืก ื›ึผื•ืœืœ ื•ื•ืขื’ืŸ 8 ื‘ื™ืœื™ืึธืŸ ืคึผืึทืกื•ื•ืขืจื“ื– ืจื™ื™ื ื“ื–ืฉื™ื ื’ ืคื•ืŸ 4 ืฆื• 25 ืื•ืชื™ื•ืช ืื™ืŸ ืœืขื ื’.

ืคึผืจืึธืก:

  • ื›ึผื•ืœืœ ื‘ื™ื™ื“ืข ืกืคึผืขืฆื™ืคื™ืฉ ื“ื™ืงืฉืึทื ืขืจื™ื– ืื•ืŸ ื“ื™ืงืฉืึทื ืขืจื™ื– ืžื™ื˜ ื“ื™ ืžืขืจืกื˜ ืคึผืจืึธืกื˜ ืคึผืึทืกื•ื•ืขืจื“ื– - ืื™ืจ ืงืขื ืขืŸ ืงืœื™ื™ึทื‘ืŸ ืึท ืกืคึผืขืฆื™ืคื™ืฉ ื•ื•ืขืจื˜ืขืจื‘ื•ืš ืคึฟืึทืจ ื“ื™ื™ืŸ ืื™ื™ื’ืขื ืข ื‘ืื“ืขืจืคืขื ื™ืฉืŸ;
  • ื“ื™ืงืฉืึทื ืขืจื™ื– ื–ืขื ืขืŸ ื“ืขืจื”ื™ื™ึทื ื˜ื™ืงื˜ ืื•ืŸ ืจื™ืคึผืœืขื ื™ืฉื˜ ืžื™ื˜ ื ื™ื™ึทืข ืคึผืึทืกื•ื•ืขืจื“ื–;
  • ื“ื™ืงืฉืึทื ืขืจื™ื– ื–ืขื ืขืŸ ืื•ื™ืกื’ืขืฉื˜ืขืœื˜ ืœื•ื™ื˜ ืขืคืขืงื˜ื™ื•ื•ืงื™ื™ึทื˜. ืื™ืจ ืงืขื ืขืŸ ืงืœื™ื™ึทื‘ืŸ ื“ื™ ืึธืคึผืฆื™ืข ืคึฟืึทืจ ื‘ื™ื™ื“ืข ืฉื ืขืœ ืึธื ืœื™ื™ืŸ ื‘ืจื•ื˜ ืงืจืึทืคื˜ ืื•ืŸ ื“ื™ื˜ื™ื™ืœื“ ืกืขืœืขืงืฆื™ืข ืคื•ืŸ โ€‹โ€‹ืคึผืึทืกื•ื•ืขืจื“ื– ืคื•ืŸ ืึท ื•ื•ืึทืœื•ืžืึทื ืึทืก ื•ื•ืขืจื˜ืขืจื‘ื•ืš ืžื™ื˜ ื“ื™ ืœืขืฆื˜ืข ืœื™ืงืก;
  • ืขืก ืื™ื– ืึท ืงืึทืœืงื•ืœืึทื˜ืึธืจ ื•ื•ืึธืก ื•ื•ื™ื™ื–ื˜ ื“ื™ ืฆื™ื™ื˜ ืขืก ื ืขืžื˜ ืฆื• ื‘ืจื•ื˜ ืคึผืึทืกื•ื•ืขืจื“ื– ืื•ื™ืฃ ื“ื™ื™ืŸ ื•ื™ืกืจื™ื›ื˜.

ื•ื•ืขื‘ ืžื›ืฉื™ืจื™ื, ืึธื“ืขืจ ื•ื•ื• ืฆื• ืึธื ื”ื™ื™ื‘ืŸ ื•ื•ื™ ืึท ืคึผืขื ืกื˜ืขืจ?

ืžื™ืจ ื•ื•ืึธืœื˜ ื•ื•ื™ ืฆื• ืึทืจื™ื™ึทื ื ืขืžืขืŸ ืžื›ืฉื™ืจื™ื ืคึฟืึทืจ CMS ื˜ืฉืขืงืก ืื™ืŸ ืึท ื‘ืึทื–ื•ื ื“ืขืจ ื’ืจื•ืคึผืข: WPScan, JoomScan ืื•ืŸ AEM Hacker.

AEM_hacker

AEM ื”ืขืงืขืจ ืื™ื– ืึท ื’ืขืฆื™ื™ึทื’ ืฆื• ื™ื“ืขื ื˜ื™ืคื™ืฆื™ืจืŸ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ื– ืื™ืŸ Adobe Experience Manager (AEM) ืึทืคึผืœืึทืงื™ื™ืฉืึทื ื–.

ืคึผืจืึธืก:

  • ืงืขื ืขืŸ ื™ื“ืขื ื˜ื™ืคื™ืฆื™ืจืŸ AEM ืึทืคึผืœืึทืงื™ื™ืฉืึทื ื– ืคึฟื•ืŸ ื“ืขืจ ืจืฉื™ืžื” ืคื•ืŸ URL ืก ื“ืขืจืœืื ื’ื˜ ืฆื• ื–ื™ื™ืŸ ืึทืจื™ื™ึทื ืฉืจื™ื™ึทื‘;
  • ื›ึผื•ืœืœ ืกืงืจื™ืคึผืก ืฆื• ื‘ืึทืงื•ืžืขืŸ RCE ื“ื•ืจืš ืœืึธื•ื“ื™ื ื’ ืึท JSP ืฉืึธืœ ืึธื“ืขืจ ืขืงืกืคึผืœื•ื™ื˜ื™ื ื’ SSRF.

JoomScan

JoomScan - ืึท ืคึผืขืจืœ ื’ืขืฆื™ื™ึทื’ ืคึฟืึทืจ ืึธื˜ืึทืžื™ื™ื˜ื™ื ื’ ื“ื™ ื“ื™ื˜ืขืงืฉืึทืŸ ืคื•ืŸ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ื– ื•ื•ืขืŸ ื“ื™ืคึผืœื•ื™ื™ื ื’ Joomla CMS.

ืคึผืจืึธืก:

  • ืงืขื ืขืŸ ื’ืขืคึฟื™ื ืขืŸ ืงืึทื ืคื™ื’ื™ืขืจื™ื™ืฉืึทืŸ ืคืœืึธื– ืื•ืŸ ืคึผืจืึธื‘ืœืขืžืก ืžื™ื˜ ืึทื“ืžื™ื ื™ืกื˜ืจืึทื˜ื™ื•ื•ืข ืกืขื˜ื˜ื™ื ื’ืก;
  • ืจืฉื™ืžื•ืช ื“ื–ืฉืึธืึธืžืœืึท ื•ื•ืขืจืกื™ืขืก ืื•ืŸ ืคึฟืึทืจื‘ื•ื ื“ืŸ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ื–, ืกื™ืžื™ืœืึทืจืœื™ ืคึฟืึทืจ ื™ื—ื™ื“ ืงืึทืžืคึผืึธื•ื ืึทื ืฅ;
  • ื›ึผื•ืœืœ ืžืขืจ ื•ื•ื™ 1000 ืขืงืกืคึผืœื•ื™ืฅ ืคึฟืึทืจ ื“ื–ืฉืึธืึธืžืœืึท ืงืึทืžืคึผืึธื•ื ืึทื ืฅ;
  • ืจืขื–ื•ืœื˜ืึทื˜ ืคื•ืŸ ืœืขืฆื˜ ืจื™ืคึผืึธืจืฅ ืื™ืŸ ื˜ืขืงืกื˜ ืื•ืŸ HTML ืคึฟืึธืจืžืึทื˜ื™ืจื•ื ื’ืขืŸ.

ื•ื•ืขื‘ ืžื›ืฉื™ืจื™ื, ืึธื“ืขืจ ื•ื•ื• ืฆื• ืึธื ื”ื™ื™ื‘ืŸ ื•ื•ื™ ืึท ืคึผืขื ืกื˜ืขืจ?

ื•ื•ืคึผืกืงืึทืŸ

ื•ื•ืคึผืกืงืึทืŸ - ืึท ื’ืขืฆื™ื™ึทื’ ืคึฟืึทืจ ืกืงืึทื ื™ื ื’ ื•ื•ืึธืจื“ืคึผืจืขืกืก ื–ื™ื™ื˜ืœืขืš, ืขืก ื”ืื˜ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ื– ืื™ืŸ ื–ื™ื™ืŸ ืึทืจืกืขื ืึทืœ ื‘ื™ื™ื“ืข ืคึฟืึทืจ ื“ื™ ื•ื•ืึธืจื“ืคึผืจืขืกืก ืžืึธื˜ืึธืจ ื–ื™ืš ืื•ืŸ ืคึฟืึทืจ ืขื˜ืœืขื›ืข ืคึผืœื•ื’ื™ื ืก.

ืคึผืจืึธืก:

  • ื˜ื•ื™ื’ืขื•ื•ื“ื™ืง ืคื•ืŸ ืœื™ืกื˜ื™ื ื’ ื ื™ื˜ ื‘ืœื•ื™ื– ืึทื ืกื™ื™ืฃ ื•ื•ืึธืจื“ืคึผืจืขืกืก ืคึผืœื•ื’ื™ื ืก ืื•ืŸ ื˜ืขืžืขืก, ืึธื‘ืขืจ ืื•ื™ืš ื‘ืึทืงื•ืžืขืŸ ืึท ืจืฉื™ืžื” ืคื•ืŸ ื™ื•ื–ืขืจื– ืื•ืŸ TimThumb ื˜ืขืงืขืก;
  • ืงืขื ืขืŸ ืึธื ืคื™ืจืŸ ื‘ืจื•ื˜ ืงืจืึทืคื˜ ืื ืคืืœืŸ ืื•ื™ืฃ ื•ื•ืึธืจื“ืคึผืจืขืกืก ื–ื™ื™ื˜ืœืขืš.

ืงืึธื ืก:

  • ืึธืŸ ื“ื™ ืฆื•ื ืขืžืขืŸ ืกืขื˜ื˜ื™ื ื’ืก, ืขืก ืคึผืขืจืคืึธืจืžื– ืึท ื“ืขืจืขื ื“ื™ืงื˜ ื’ืึทื ื’ ืคื•ืŸ ื˜ืฉืขืงืก, ื•ื•ืึธืก ืงืขื ืขืŸ ื–ื™ื™ืŸ ืžื™ืกืœื™ื“ื™ื ื’.

ื•ื•ืขื‘ ืžื›ืฉื™ืจื™ื, ืึธื“ืขืจ ื•ื•ื• ืฆื• ืึธื ื”ื™ื™ื‘ืŸ ื•ื•ื™ ืึท ืคึผืขื ืกื˜ืขืจ?

ืื™ืŸ ืึทืœื’ืขืžื™ื™ืŸ, ืคืึทืจืฉื™ื“ืขื ืข ืžืขื ื˜ืฉืŸ ื‘ืขืกืขืจ ื•ื•ืขืœืŸ ืคืึทืจืฉื™ื“ืขื ืข ืžื›ืฉื™ืจื™ื ืคึฟืึทืจ ืึทืจื‘ืขื˜: ื–ื™ื™ ื–ืขื ืขืŸ ืึทืœืข ื’ื•ื˜ ืื™ืŸ ื–ื™ื™ืขืจ ืื™ื™ื’ืŸ ื•ื•ืขื’, ืื•ืŸ ื•ื•ืึธืก ืื™ื™ื ืขืจ ืœื™ื™ืงืก ืงืขืŸ ื ื™ืฉื˜ ืคึผืึทืกืŸ ื“ืขื ืื ื“ืขืจืŸ. ืื•ื™ื‘ ืื™ืจ ื˜ืจืึทื›ื˜ืŸ ืึทื– ืžื™ืจ ื”ืึธื‘ืŸ ืึทื ืคืขืจืœื™ ืื™ื’ื ืึธืจื™ืจื˜ ืขื˜ืœืขื›ืข ื’ื•ื˜ ื ื•ืฆืŸ, ืฉืจื™ื™ึทื‘ืŸ ื•ื•ืขื’ืŸ ืื™ื ืื™ืŸ ื“ื™ ื‘ืึทืžืขืจืงื•ื ื’ืขืŸ!

ืžืงื•ืจ: www.habr.com

ืœื™ื™ื’ืŸ ืึท ื‘ืึทืžืขืจืงื•ื ื’