Kartografiya va Port Skanerlash
Tarmoq kartografiyasi (Network Mapping) va Port Skanerlash — penetration testing va razvedkaning (Reconnaissance) asosiy bosqichlari. Maqsad tizimlar, ochiq portlar, xizmatlar va zaifliklarni aniqlash. Nmap — eng keng tarqalgan skanerlash vositasi.
Muhim: Port skanerlash faqat ruxsat berilgan tizimlarda qonuniy. Ruxsatsiz skanerlash ko'pgina davlatlarda jinoyat hisoblanadi.
Asosiy port skanerlash usullari
Nmap — Eng kuchli Skanerlash Vositasi
Nmap (Network Mapper) — 1997-yilda Gordon "Fyodor" Lyon tomonidan yaratilgan. Kiberxavfsizlik sohasining standart vositasi.
# Asosiy Nmap buyruqlari
# Nmap natijasi misoli
Starting Nmap 7.93 at 2024-01-15
Nmap scan report for target.com (192.168.1.100)
Host is up (0.0012s latency).
PORT STATE SERVICE VERSION
22/tcp open ssh OpenSSH 8.9
80/tcp open http Apache 2.4.52
443/tcp open https Apache 2.4.52
3306/tcp filtered mysql
8080/tcp open http-proxy Nginx 1.22
Razvedka bosqichlari (Reconnaissance)
Passiv razvedka (OSINT)
Maqsad bilan to'g'ridan-to'g'ri aloqa qilmasdan ma'lumot yig'ish.
- → WHOIS — domen ro'yxatga olish ma'lumotlari
- → DNS lookup — MX, A, AAAA, TXT yozuvlar
- → Shodan.io — internet'ga ulangan qurilmalar
- → Google Dorking — maxsus Google qidiruvlari
- → LinkedIn/Social — xodimlar ma'lumotlari
- → Wayback Machine — eski versiyalar
Faol razvedka (Active)
Maqsad tizimlar bilan to'g'ridan-to'g'ri aloqa qilish — aniqlanish xavfi bor.
- → Port scanning — Nmap, Masscan
- → Service enumeration — versiya aniqlash
- → OS fingerprinting — OS aniqlash
- → Web crawling — veb sahifalar indeksash
- → Vulnerability scanning — Nessus, OpenVAS
- → Password spraying — login sinash
Skanerlash vositalari
| Vosita | Maqsad | Foydalanish | Litsenziya |
|---|---|---|---|
| Nmap | Port va xizmat skanerlash | Keng tarqalgan, universal | Bepul (LGPL) |
| Masscan | Tez port skanerlash | Butun internet'ni skanerlash | Bepul |
| Nessus | Zaiflik skanerlash | Enterprise vulnerability management | Commercial |
| OpenVAS | Zaiflik skanerlash | Bepul Nessus alternativasi | Bepul (GPL) |
| Nikto | Veb server skanerlash | Veb zaifliklar va konfiguratsiya | Bepul (GPL) |
| Shodan | Internet qurilmalar | OSINT, IoT topish | Freemium |
Google Dorking
Google'ning maxsus operatorlari bilan maxfiy ma'lumotlarni topish. OSINT ning muhim qismi.
# Foydali Google Dork misollari
site:example.com filetype:pdf — PDF fayllar topish
intitle:"index of" site:example.com — ochiq kataloglar
site:example.com ext:sql OR ext:bak — ma'lumot bazasi fayllari
inurl:/admin site:example.com — admin panellar
"password" filetype:xls site:*.gov — parol fayllari
cache:example.com — Google keshi versiyasi
Bilimingizni tekshiring
1. Nmap -sS nima uchun "stealth" scan deb ataladi?
2. Shodan nima maqsadda ishlatiladi?
Asosiy xulosalar
- Port skanerlash — penetration testing razvedkasining asosi
- Nmap — SYN scan (-sS) eng keng tarqalgan, -A aggressive (barcha ma'lumot)
- Passiv (OSINT) vs Faol (to'g'ridan-to'g'ri) razvedka usullari
- Google Dorking — maxsus operatorlar bilan maxfiy ma'lumotlar topish
- Faqat ruxsat berilgan tizimlarda skanerlash qonuniy!