kusvika pakundiziva Maturusi epamusoro mashanu emahara ekuyedza kupinda muna 2023.
Unogona kushandisa maturusi ekuyedza kupinda kuti uwane kusazvibata munetiweki, sevha, kana webhu application. Zvishandiso izvi, zvinozivikanwawo se Peni Kuongorora kuchengetedza maturusi , mukuona kusazivikanwa kusakanganiswa mumashandisirwo etiweki izvo zvinogona kukonzera kukanganisa kuchengetedza.
Zvishandiso izvi zvinogona kuchengetedza network yako kubva kune isina kutenderwa kuwanikwa nevabiki. Pamusoro pezvo, isu tichakurukura akanakisa ekupinda ekuedza maturusi anopa 360-degree dziviriro kubva mukubira kuedza.
Penetration test (inozivikanwawo se peni test) inyaya inopisa munharaunda yekuyedza nhasi. Zviri nyore kuona kuti sei: Chengetedzo yatora nzvimbo yepakati neshanduko mumagadzirirwo nemashandisirwo emakombuta.
Kunyangwe makambani achiziva kuti haakwanise kuchengetedza zvachose masisitimu ese, ivo vachiri kuda kuziva kuti ndedzipi nyaya dzekuchengetedza dzavanosangana nadzo. Apa ndipo panogona kuuya nepeni kuyedza zvakanyanya, nekuda kwemaitiro ekubira nzira.
Chii chinonzi penetration test?
Penetration bvunzo zvakare imhando yekuyedzwa kwekuchengetedza iyo inoitwa kuyedza kutendeseka kwemasisitimu akadai se (hardware, network, software kana ruzivo masisitimu nharaunda). Muedzo uyu unovavarira kuona kusagadzikana kwese kwekuchengetedza mukati mekushandisa nekuongorora kuchengetedzwa kwehurongwa hwako nemalware, kuchengetedza ruzivo kubva kune vanoba uye nekuona kuchengetedzwa kwechishandiso.
Iyo imhando yeisiri-inoshanda bvunzo ine chinangwa chekushandisa nzira dzakatenderwa kukanganisa kuchengetedzeka kwehurongwa hwako. Inonzi zvakare kuyedza peni kana kuyedza kupinda. Munhu arikuitisa bvunzo muyedzo wekupinda, anozivikanwawo seanetsika hacker.
Rondedzero Yezvakanakisa Yemahara Yekupinda Yekuyedza Zvishandiso muna 2023
Iwe une zvakawanda zvekutengesa uye zvemahara zvekubira maturusi ekuona kuchengetedzwa kwehurongwa hwako. Kuburikidza nemitsetse inotevera, isu tichagovana newe runyorwa rweakanakisa emahara ekupinda ekuedza maturusi kuti akubatsire kusarudza mhinduro kwayo.
1. Metasploit
service metasploit kana neChirungu: Metasploit Ndiyo inonyanya kufarirwa uye yemhando yepamusoro iyo inogona kushandiswa pakuongorora peni. Zvinoenderana ne "kushandiswa”, kodhi inogona kunzvenga chengetedzo uye kupinda muhurongwa. Mukuwedzera, inogona kuiswa kuti iite "payload', inova kodhi inoita mashandiro pane zvakanangwa zvishandiso. Izvi zvinogadzira nzvimbo yakanaka yekuyedza kupinda.
Inogona kushandiswa kuwana web applications, network, uye maseva. Iyo GUI inodzvanya uye inogona kushandiswa pane akawanda Linux, Apple Mac OS X uye Microsoft Windows masisitimu. Ichi chigadzirwa chekutengesa, saka panogona kuve nenhamba shoma yemayedzo emahara.
2. Wireshark
Iyi network protocol analyzer inoshandiswa kupa ruzivo rwakanyanya nezve network protocol, kusanganisira packet, encryption, uye decoding ruzivo. Izvi zvinogona kushandiswa pane akawanda anoshanda masisitimu akadai seWindows, Linux, Solaris, Solaris OS X, Solaris FreeBSD, NetBSD, nevamwe vazhinji.
Ichi chishandiso chinokutendera iwe kuratidza ruzivo kuburikidza neiyo graphical mushandisi interface kana iyo TTY-modhi TShark utility. Ichi chinongedzo chiri pazasi chinokutendera iwe kurodha kopi yemahara yechishandiso.
3. nmap
tine nmap , inozivikanwawo sedhiyabhorosi network. Ichi chemahara uye chakavhurika sosi chishandiso chinokutendera kuti utarise ma network ako kana masisitimu ekusagadzikana. Iwe unogona zvakare kushandisa chishandiso ichi kuita mamwe mabasa, sekutarisa sevhisi kana kugamuchira uptime uye mepu yekurwisa network nzvimbo.
Ichi chishandiso chinogona kuongorora mahombe uye madiki network mune mazhinji anoshanda masisitimu. Ichi chishandiso chinokutendera kuti unzwisise ese maficha etiweki inotarirwa, kusanganisira mahost, masisitimu anoshanda, firewall, uye mhando dzemidziyo. Saka, kureba nmap Zvemutemo uye zvinogona kushandiswa sechinhu chakakosha uye chiri nyore kushandisa chishandiso.
4. netsparker
service netsparker Iyo iwebhu application kuchengetedza scanner. Iyo otomatiki, yakanyanya kunaka uye iri nyore kushandisa web app scanner. Inogona kushandiswa kuona otomatiki kusazvibata senge SQL jekiseni uye Cross-Site Scripting (XSS) mumawebhusaiti, mawebhusaiti, uye webhu-based services. Iyo humbowo-ye-pfungwa yekuongorora tekinoroji haingotauri kusagadzikana kwekuchengetedza, asi zvakare inoburitsa humbowo hwepfungwa yekusimbisa kuti haisi yenhema. Naizvozvo, hapana chikonzero chekutambisa nguva nemaoko uchitarisa kusazvibata mushure mekunge scan yapera.
5. Acunetix
Gadzirira Acunetix Pakati peakanakisa webhu vulnerability scanners anongotarisa chero webhusaiti. Iyo yakaona pamusoro pe4500 kusagadzikana pamawebhusaiti emarudzi ese anosanganisira SQL XSS jekiseni, XXE, SSRF, uye Host Header Injection. Yayo DeepScan Crawler inogona kuongorora HTML5 mawebhusaiti pamwe neAJAX-yakavakirwa mutengi SPA mawebhusaiti. Uye zvakare, inobvumira vashandisi kutumira kunze kwakawanikwa kusadzivirirwa kune shanduro yekutevera maturusi akadai Atlassian JIRA uye GitHub. Microsoft Team Foundation Server (TFS). Inowanikwa kuWindows, Linux, uye online.
Isu takaita zvatinogona kuti tipe anonyanya kufarirwa ekupinda ekuongorora maturusi (zvese akavhurika sosi uye ekutengesa). Ndokumbira utiudze yako inonyanya kushanda yekupinda yekuongorora software nekusiya zita rayo mune zvakataurwa. Zvakare, kana iwe uchifunga kuti ndatadza kutaura chimwe chezvishandiso zvako zvaunofarira, ndapota tizivise nekusiya mhinduro uye tichaita zvatinogona kuti tiiise murondedzero yedu uye kugadzirisa chinyorwa ichi.
Tinovimba iwe unowana ichi chinyorwa chinobatsira iwe kuti uzive Maturusi akanakisa emahara ekuyedza kupinda Muna 2023. Govera maonero ako uye ruzivo mumashoko.
