ãƒãƒƒã‚«ãƒ¼è¦–点ã§èªžã‚‹ã€ŒInitial Access（åˆæœŸä¾µå…¥ï¼‰ã€ 〜 派手ãªExploitよりã€åœ°å‘³ãªãƒ‘スワードãŒæœ€å¼· 〜 - Qiita本記事ã®å†…容ã¯ã€ã‚»ã‚ュリティã®ä»•çµ„ã¿ã‚’ç†è§£ã™ã‚‹ãŸã‚ã®å¦ç¿’ãƒ»ç ”ç©¶ã‚’ç›®çš„ã¨ã—ã¦ã„ã¾ã™ã€‚ 許å¯ã®ãªã„第三者ã®ã‚·ã‚¹ãƒ†ãƒ ã¸ã®æ”»æ’ƒã‚„侵入行為ã¯ã€æ³•å¾‹ã§å›ºãç¦æ¢ã•ã‚Œã¦ã„ã¾ã™ã€‚ 検証を行ã†éš›ã¯ã€å¿…ãšã”自身ãŒç®¡ç†ã™ã‚‹ç’°å¢ƒã€ã¾ãŸã¯è¨±å¯ã‚’å¾—ãŸç’°å¢ƒå†…ã§ã®ã¿å®Ÿæ–½ã—ã¦ãã ã•ã„。 本記事ã®æƒ…å ±ã‚’åˆ©ç”¨ã—ã¦ç”Ÿã˜ãŸä¸€åˆ‡ã®ãƒˆãƒ©ãƒ–ル・æ害ã«å¯¾ã—ã€ç†è€…ã¯è²¬ä»»ã‚’è² ã„ã‹ãã¾ã™ã€‚ å‰è¨˜äº‹ã®ãƒªãƒ³ã‚¯ã¯ã“ã¡ã‚‰ https://qiita.com/tkmiii_GiGOOO/items/a666f74f20e467d44257 ã¯ã˜ã‚ã«ï¼šã€Œæ”»æ’ƒã€ã®æœ¬å½“ã®æ„味 å‰å›žã¯ã€Œãƒãƒƒã‚ングã®9割ã¯æƒ…å ±åŽé›†ï¼ˆEnumeration）ã§æ±ºã¾ã‚‹ã€ã¨ã„ã†è©±ã‚’ã—ã¾ã—ãŸã€‚ 今回ã¯ã€ãã®é›†ã‚ãŸæƒ…å ±ã‚’æ¦å™¨ã«å¤‰ãˆã¦ã€å®Ÿéš›ã«ã‚·ã‚¹ãƒ†ãƒ 内部ã¸è¶³ã‚’è¸ã¿å…¥ã‚Œã‚‹ Initial Access（åˆæœŸä¾µå…¥ï¼‰ ã®ã‚¹ãƒ†ãƒƒãƒ—ã§ã™ã€‚ ã“ã“ã§ã‚‚ã€æ˜ ç”»ã¨ç¾å®Ÿã¯é•ã„ã¾ã™ã€‚ プãƒã®ãƒãƒƒã‚«ãƒ¼ã«ã¨ã£ã¦ã€æœ€é«˜ã®
GitHub - runZeroInc/sshamble: SSHamble: Unexpected Exposures in SSH
SSHambleã®èª¿æŸ» - ã‚ã‚‹ã‚‚ã‚Šã™ã¶ã‚ã
Telnet, SSH Client for Browser
Banner Grabbing - Penetration Testing Basics - Putorius
An Ngrok Tutorial and Primer
GitHub - MegaManSec/SSH-Snake: SSH-Snake is a self-propagating, self-replicating, file-less script that automates the post-exploitation task of SSH private key and host discovery.
GitHub - nray-scanner/nray: nray distributed port scanner
GitHub - noptrix/sshprank: A fast SSH mass-scanner, login cracker and banner grabber tool using the python-masscan and shodan module.
サーãƒãƒ¼ã‚»ã‚ュリティ構æˆã®è©± - Chienomi
SSH Penetration Testing (Port 22)
6379 - Pentesting Redis - HackTricks
GitHub - t3l3machus/pentest-pivoting: A compact guide to network pivoting for penetration testings / CTF challenges.
プライベートリãƒã‚¸ãƒˆãƒªã‚’ go get ã™ã‚‹ - emahiro/b.log
If you’re not using SSH certificates you’re doing SSH wrong
SecurityTrails | Cybersecurity Fingerprinting Techniques and OS-Network Fingerprint Tools
GitHub - 0x27/ssh_keyscanner: ssh public host key scanner using shodan
Re-use of SSH keys across thousands of devices
WordPress.com
Open Sourcing HASSH - Salesforce Engineering Blog
{{#tags}}- {{label}}
{{/tags}}