\u968f\u7740\u9ed1\u5ba2\u653b\u51fb\u7684\u65e5\u76ca\u7316\u7357\uff0c\u8d8a\u6765\u8d8a\u591a\u7684\u4f01\u4e1a\u62e5\u6709\u4e86CISO\uff08\u9996\u5e2d\u5b89\u5168\u5b98\uff09\uff0c\u4f8b\u5982Target\u4fe1\u7528\u5361\u6cc4\u9732\u4e8b\u4ef6\u540e\u8bbe\u7acb\u4e86\u516c\u53f8\u5386\u53f2\u4e0a\u9996\u4e2aCISO\u5c97\u4f4d\u3002\u867d\u7136CISO\u542c\u4e0a\u53bb\u66f4\u50cf\u662f\u4e00\u4e2a\u7ba1\u7406\u804c\u4f4d\uff0c\u4f46\u5b9e\u9645\u4e0a\u4e00\u4f4d\u79f0\u804c\u7684CISO\u5fc5\u987b\u5bf9\u6700\u65b0\u7684\u9ed1\u5ba2\u653b\u9632\u6280\u672f\u548c\u5de5\u5177\u4e86\u5982\u6307\u638c\uff0c\u6240\u8c13\u77e5\u5df1\u77e5\u5f7c\u65b9\u80fd\u767e\u6218\u4e0d\u6b86\u3002\u6700\u8fd1\u767d\u5e3d\u5b89\u5168\u5de5\u5177\u7f51\u7ad9ToolsWatch.org\u7684\u521b\u59cb\u4ebaNabil Ouchn\u5217\u4e3e\u4e86\u4e94\u4e2aCISO\u5fc5\u987b\u77e5\u9053\u4e94\u4e2a\u9ed1\u5ba2\u5de5\u5177\uff0c\u6211\u4eec\u4e00\u8d77\u6765\u770b\u770b\u90fd\u6709\u54ea\u4e9b\u5462\uff1f<\/p>\n
\u4e00\u3001ARMITAGE<\/b><\/p>\n
Metasploit\u662f\u5982\u4eca\u6700\u6d41\u884c\u7684\u7f51\u7edc\u548cIT\u7cfb\u7edf\u6e17\u900f\u6d4b\u8bd5\u5de5\u5177\uff08\u53c2\u8003\uff1a\u5b89\u5168\u519b\u706b\u5e93\uff0c\u6e17\u900f\u6d4b\u8bd5\u5de5\u5177\u6d41\u884c\u6027\u5927\u8c03\u67e5\uff09\u3002\u4f46\u662fArmitage\u4ee5\u5f00\u6e90\u7684\u65b9\u5f0f\u4e3aMetasploit\u5e26\u6765\u4e86\u66f4\u52a0\u53cb\u597d\u7684\u754c\u9762\u3002\u53ea\u9700\u8981\u51e0\u4e0b\u70b9\u51fb\uff0c\u4f60\u5c31\u80fd\u5f88\u76f4\u89c2\u5730\u770b\u5230\u7f51\u7edc\u8bbe\u5907\u7684\u6f0f\u6d1e\u548c\u5f31\u70b9\uff0c\u53d7\u611f\u67d3\u8bbe\u5907\u4f1a\u88ab\u4eae\u5708\u6807\u8bb0\u51fa\u6765\u3002<\/p>\n
Armitage\u5f88\u597d\u5730\u9690\u85cf\u4e86Metasploit\u7684\u590d\u6742\u6027\uff0c\u5bf9\u4e8e\u975e\u6280\u672f\u4eba\u5458\u6765\u8bf4\u589e\u5f3a\u4e86\u53ef\u7528\u6027\uff0c\u53ef\u4ee5\u76f4\u89c2\u5730\u5c55\u793a\u6574\u4e2aIT\u67b6\u6784\u7684\u5b89\u5168\u72b6\u51b5\uff0c\u5feb\u901f\u53d1\u73b0\u4efb\u4f55\u5c42\u9762\u7684\u4efb\u4f55\u7c7b\u578b\u6f0f\u6d1e\u3002<\/p>\n
\u4e8c\u3001HASHCAT<\/b><\/p>\n
\u4f01\u4e1a\u7684\u5b89\u5168\u7ba1\u7406\u4eba\u5458\u548c\u5458\u5de5\u603b\u662f\u5728\u5bc6\u7801\u95ee\u9898\u4e0a\u4ea7\u751f\u5206\u6b67\u3002\u5bf9\u4e8e\u7528\u6237\u6765\u8bf4\uff0c\u5bc6\u7801\u6700\u597d\u662f\u5ba0\u7269\u7684\u540d\u5b57\uff0c\u800c\u4e14\u6c38\u8fdc\u65e0\u9700\u66f4\u65b0\uff0c\u800c\u5bc6\u7801\u7834\u89e3\u5de5\u5177Hashcat\u53ef\u4ee5\u5f88\u76f4\u89c2\u5730\u5411\u5458\u5de5\u6f14\u793a\u4ed6\u4eec\u7684\u5bc6\u7801\u591a\u4e48\u8106\u5f31\u3002<\/p>\n
Hashcat\u4e5f\u662fCISO\u5de5\u5177\u7bb1\u4e2d\u4e0d\u53ef\u6216\u7f3a\u7684\u5229\u5668\uff0c\u53ef\u4ee5\u5feb\u901f\u6d4b\u8bd5\u516c\u53f8\u5bc6\u7801\u653f\u7b56\u7684\u53ef\u9760\u6027\u3002\u5f53\u7136\uff0c\u8861\u91cf\u516c\u53f8\u5bc6\u7801\u653f\u7b56\u7684\u6807\u51c6\u4e0d\u4ec5\u4ec5\u662f\u5bc6\u7801\u7684\u590d\u6742\u5ea6\uff0c\u8fd8\u5305\u62ec\u5bc6\u7801\u6709\u6548\u671f\u3001\u957f\u5ea6\u7b49\u7b49\u3002<\/p>\n
\u4e09\u3001WIFITE<\/b><\/p>\n
\u968f\u7740\u65e0\u7ebf\u8def\u7531\u5668\u5b89\u5168\u6f0f\u6d1e\u548c\u9ed1\u5ba2\u653b\u51fb\u7684\u4e0d\u65ad\u589e\u957f\uff0c \u4f01\u4e1aWiFi\u7f51\u7edc\u7684\u5b89\u5168\u72b6\u51b5\u6bcf\u51b5\u6108\u4e0b\uff0cWifite\u662f\u5f53\u4eca\u6700\u7b80\u5355\u597d\u7528\u7684WiFi\u7f51\u7edc\u5b89\u5168\u6d4b\u8bd5\u5de5\u5177\u4e4b\u4e00\u3002<\/p>\n
Wifite\u7531Python\u7f16\u5199\uff0c\u53ef\u4ee5\u8fd0\u884c\u5728\u4efb\u610f\u5e73\u53f0\u3002CISO\u4eec\u53ef\u4ee5\u7528Wifite\u68c0\u6d4b\u516c\u53f8WiFi\u7f51\u7edc\u914d\u7f6e\u662f\u5426\u7b26\u5408\u5b89\u5168\u653f\u7b56\uff0c\u751a\u81f3\u8fd8\u80fd\u8bc6\u522b\u4efb\u4f55\u53ef\u80fd\u88ab\u7528\u4e8e\u9493\u9c7c\u548c\u4e2d\u95f4\u4eba\u653b\u51fb\u7684\u5f00\u653eWiFi\u7f51\u7edc\u3002<\/p>\n
\u56db\u3001WIRESHARK<\/b><\/p>\n
WireShark\u53ef\u80fd\u662f\u6700\u597d\u7684\u7f51\u7edc\u6570\u636e\u55c5\u63a2\u5de5\u5177\uff0c\u652f\u6301\u5305\u62ec\u4ee5\u592a\u7f51\u3001802.11\u7b49\u591a\u79cd\u7c7b\u578b\u7f51\u7edc\uff0c\u540c\u65f6\u53c8\u754c\u9762\u53cb\u597d\uff0c\u7b80\u5355\u6613\u7528\u3002<\/p>\n
WireShark\u53ef\u4ee5\u5e2e\u52a9CISO\u53d1\u73b0\u7f51\u7edc\u4e2d\u4e00\u4e9b\u8fc7\u65f6\u7684\uff0c\u5e94\u5f53\u88ab\u7981\u7528\u7684\u534f\u8bae\uff0c\u4f8b\u5982Telnet\/FTP\uff0c\u4ee5\u53ca\u9700\u8981\u88ab\u52a0\u5bc6\u7684\u660e\u6587\u6570\u636e\u3002<\/p>\n
\u9664\u4e86\u55c5\u63a2\u529f\u80fd\u5916\uff0cWireShark\u8fd8\u53ef\u4ee5\u5e2e\u52a9\u8bbe\u5b9a\u7f51\u7edc\u8fc7\u6ee4\u653f\u7b56\uff0c\u53ef\u4ee5\u4fa6\u6d4b\u8fc7\u6ee4\u8bbe\u5907\u4e2d\u7684\u534f\u8bae\u548c\u6570\u636e\u6d41\u3002<\/p>\n
\u4e94\u3001\u793e\u4ea4\u5de5\u7a0b\u5de5\u5177\u7bb1\uff08SET\uff09<\/b><\/p>\n
\u5728\u4eca\u5e74\u62c9\u65af\u7ef4\u52a0\u65af\u4e3e\u884c\u7684BlackHat Arsenal\u5927\u4f1a\u4e0a\uff0c\u770b\u8fc7David Kennedy\u6f14\u793a\u7684\u4eba\u90fd\u5e94\u5f53\u4e86\u89e3\u5230\u793e\u4ea4\u5de5\u7a0b\u5de5\u5177\u7bb1\uff08SET\uff09\u7684\u91cd\u8981\u6027\u3002<\/p>\n
\u793e\u4ea4\u5de5\u7a0b\u653b\u51fb\u8005\u53ef\u4ee5\u9488\u5bf9\u4eba\u7c7b\u5bb9\u6613\u8f7b\u4fe1\u7684\u5f31\u70b9\uff0c\u901a\u8fc7SET\u6846\u67b6\u521b\u5efa\u6709\u9488\u5bf9\u6027\u7684\u590d\u6742\u6280\u672f\u653b\u51fb\uff0c\u4f8b\u5982\u7b56\u5212\u9493\u9c7c\u653b\u51fb\uff0c\u8bbe\u7acb\u9493\u9c7c\u7f51\u7ad9\u7b49\u3002SET\u7684\u754c\u9762\u975e\u5e38\u7b80\u5355\u76f4\u89c2\uff0c\u5f88\u5bb9\u6613\u4e0a\u624b\u3002<\/p>\n
\u5728\u9884\u7b97\u4e0d\u591a\u7684\u60c5\u51b5\u4e0b\u63d0\u9ad8\u5458\u5de5\u5b89\u5168\u610f\u8bc6\u7684\u6700\u597d\u529e\u6cd5\u5c31\u662f\u6a21\u62df\u9493\u9c7c\u5b89\u5168\u6f14\u4e60\uff0c\u4f8b\u5982\u6a21\u62df\u7f51\u7edc\u653b\u51fb\uff0cCISO\u53ef\u4ee5\u5229\u7528SET\u8bbe\u8ba1\u5404\u79cd\u793e\u4ea4\u5de5\u7a0b\u653b\u51fb\u573a\u666f\u5e76\u5728\u5185\u90e8\u5458\u5de5\u8eab\u4e0a\u4f7f\u7528\uff0c\u6d4b\u8bd5\u8bc4\u4f30\u4ed6\u4eec\u7684\u5b89\u5168\u610f\u8bc6\u6c34\u5e73\u3002<\/p>\n
<\/p>\n","protected":false},"excerpt":{"rendered":"
\u968f\u7740\u9ed1\u5ba2\u653b\u51fb\u7684\u65e5\u76ca\u7316\u7357\uff0c\u8d8a\u6765\u8d8a\u591a\u7684\u4f01\u4e1a\u62e5\u6709\u4e86CISO\uff08\u9996\u5e2d\u5b89\u5168\u5b98\uff09\uff0c\u4f8b\u5982Target\u4fe1\u7528\u5361\u6cc4\u9732\u4e8b\u4ef6\u540e\u8bbe\u7acb\u4e86\u516c\u53f8\u5386\u53f2\u4e0a\u9996\u4e2aCISO\u5c97\u4f4d\u3002<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[260],"tags":[29,349],"_links":{"self":[{"href":"https:\/\/www.ip-guard.net\/blog\/index.php?rest_route=\/wp\/v2\/posts\/1575"}],"collection":[{"href":"https:\/\/www.ip-guard.net\/blog\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.ip-guard.net\/blog\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.ip-guard.net\/blog\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.ip-guard.net\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1575"}],"version-history":[{"count":0,"href":"https:\/\/www.ip-guard.net\/blog\/index.php?rest_route=\/wp\/v2\/posts\/1575\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.ip-guard.net\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1575"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.ip-guard.net\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1575"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.ip-guard.net\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1575"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}