Pamusoro 3 Phishing Zvishandiso zveEthical Hacking
ziviso
apo phishing kurwiswa kunogona kushandiswa nevaiti vane hutsinye kubira data remunhu kana kuparadzira malware, vanyengeri vane tsika vanogona kushandisa maitiro akafanana kuyedza kusasimba mune zvekuchengetedza kwesangano. Izvi midziyo akagadzirirwa kubatsira matsotsi etsika kutevedzera kurwiswa kwephishing uye kuyedza mhinduro yevashandi vesangano pakurwiswa uku. Nekushandisa maturusi aya, mbavha dzetsika dzinogona kuona kusadzivirirwa mukuchengetedzeka kwesangano uye kuvabatsira kutora matanho anodiwa ekudzivirira kubva mukurwiswa kwe phishing. Muchinyorwa chino, tichaongorora epamusoro 3 phishing maturusi ehutsika kubira.
SEToolkit
Social Engineering Toolkit (SEToolkit) chishandiso cheLinux chakagadzirirwa kubatsira kurwiswa kweinjiniya munharaunda. Inosanganisira akati wandei otomatiki social engineering modhi. Kesi yekushandisa yeSEToolkit iri kugadzira webhusaiti kukohwa zvitupa. Izvi zvinogona kuitwa mumatanho anotevera:
- Mune yako Linux terminal, pinda setoolkit.
- Kubva pane menyu, sarudza yekutanga sarudzo nekupinda 1 mune terminal.
- Kubva pane zvawanikwa, isa 2 mune terminal kusarudza Webhusaiti Attack Vectors. sarudza Credential Harvester Attack Method, ipapo sarudza Webhu template.
- Sarudza template yako yaunoda. IP kero inodzosera kunzvimbo yakavharwa inodzoswa.
- Kana mumwe munhu ari kunetiweki imwe chete akashanyira IP kero uye akaisa magwaro avo, inokohwewa uye inogona kutariswa mune terminal.
Mamiriro ekuti izvi zvinogona kushandiswa ndezvekuti iwe uri mukati metiweki uye iwe uchiziva webhu application inoshandiswa nesangano. Iwe unogona kungobatanidza iyi application uye nekuipuruzira kumusoro uchiudza mushandisi kuti achinje yavo pasiwedhi kana kuseta password yavo.
Kingphisher
Kingphisher ipuratifomu yakazara yekuredza simulation iyo inokutendera kuti utore mishandirapamwe yako yekubata hove, tumira akawanda ekuredza mishandirapamwe, shanda nevashandisi vakawanda, gadzira mapeji eHTML, uye chengetedza sematemplate. Iyo graphic mushandisi interface iri nyore kushandisa uye inouya yakarongedzerwa neKali. Iyo interface zvakare inobvumidza iwe kuti utarise kana mushanyi akavhura peji kana kana mushanyi akadzvanya chinongedzo. Kana iwe uchida graphic dhizaini interface kuti utange nekuredza kana kurwiswa kweinjiniya munharaunda, Kingphisher isarudzo yakanaka
Gophish
Iyi ndeimwe yeanonyanya kufarirwa phishing simulation masisitimu. Gofish ndeye yakazara phishing chimiro chaunogona kushandisa kuita chero mhando yekurwisa hove. Iyo ine yakachena kwazvo uye mushandisi-inoshamwaridzika interface. Iyo puratifomu inogona kushandiswa kuita akawanda phishing kurwisa.
Iwe unogona kuseta akasiyana mishandirapamwe yekuredza, akasiyana ekutumira profiles, mapeji ekumhara, uye email matemplate.
Kugadzira mushandirapamwe weGophish
- Pane yekuruboshwe yekoni, tinya mishandirapamwe.
- Pane popup, Isa izvo zvinodiwa.
- Tangisa mushandirapamwe wotumira tsamba yekuyedza kuti uone kuti iri kushanda
- Yako yeGophish yakagadzirira kushambadzira kwephishing.
mhedziso
Mukupedzisa, kurwiswa kwe phishing kunoramba kuri kutyisidzira kumasangano ehukuru hwese, zvichiita kuti zvive zvakakosha kune vanobira hunhu kuti vazvichengetedze vachigara vachigadziridzwa nezvishandiso zvitsva uye matekiniki ekuzvidzivirira kubva mukurwiswa kwakadaro. Maturusi matatu ekubira atakakurukura muchinyorwa chino - GoPhish, Social-Engineer Toolkit (SET), uye King Phisher - inopa huwandu hwezvinhu zvine simba zvinogona kubatsira matsotsi etsika kuyedza nekuvandudza kuchengetedzwa kwesangano ravo. Nepo chishandiso chega chega chine simba rayo uye kushaya simba, nekunzwisisa mashandiro avanoita uye nekusarudza iyo inonyatsoenderana nezvido zvako, unogona kukwidziridza kugona kwako kuziva uye kuderedza kurwiswa kwe phishing.
