Sab saum toj 3 Phishing cuab yeej rau Ethical Hacking
Introduction
thaum phishing Kev tawm tsam tuaj yeem siv los ntawm cov neeg ua phem phem los nyiag cov ntaub ntawv tus kheej lossis kis tus kabmob malware, cov neeg ua haujlwm raug cai tuaj yeem siv cov tswv yim zoo sib xws los ntsuas qhov tsis zoo hauv lub koom haum kev ruaj ntseg. Cov no cuab yeej yog tsim los pab kev ncaj ncees hackers simulate lub ntiaj teb phishing tawm tsam thiab sim cov lus teb ntawm lub koom haum cov neeg ua haujlwm rau cov kev tawm tsam no. Los ntawm kev siv cov cuab yeej no, cov neeg ua haujlwm ncaj ncees tuaj yeem txheeb xyuas qhov tsis zoo hauv lub koom haum kev ruaj ntseg thiab pab lawv ua cov kauj ruam tsim nyog los tiv thaiv phishing tawm tsam. Hauv tsab xov xwm no, peb yuav tshawb txog 3 cov cuab yeej phishing saum toj kawg nkaus rau kev ua txhaum cai.
SEToolkit
Social Engineering Toolkit (SEToolkit) yog Linux toolkit tsim los pab social engineering tawm tsam. Nws suav nrog ntau yam kev siv tshuab hluav taws xob kev sib raug zoo. Ib rooj plaub siv rau SEToolkit yog cloning lub vev xaib kom sau cov ntawv pov thawj. Qhov no tuaj yeem ua tiav hauv cov kauj ruam hauv qab no:
- Hauv koj lub davhlau ya nyob twg Linux, nkag mus setoolkit.
- Los ntawm cov ntawv qhia zaub mov, xaiv thawj qhov kev xaiv los ntawm kev nkag mus 1 mus rau hauv lub davhlau ya nyob twg.
- Los ntawm cov txiaj ntsig, nkag 2 hauv lub davhlau ya nyob twg los xaiv Website Attack Vectors. xaiv Credential Harvester Attack Method, ces xaiv Web Template.
- Xaiv lub template koj nyiam. IP chaw nyob uas redirects mus rau lub cloned site yog xa rov qab.
- Yog hais tias ib tug neeg ntawm tib lub network mus ntsib tus IP chaw nyob thiab nkag mus rau lawv cov ntaub ntawv pov thawj, nws raug sau thiab tuaj yeem saib hauv lub davhlau ya nyob twg.
Ib qhov xwm txheej uas qhov no tuaj yeem siv tau yog tias koj nyob hauv lub network thiab koj paub lub vev xaib thov lub koom haum siv. Koj tuaj yeem tsuas yog clone daim ntawv thov no thiab tig nws mus qhia tus neeg siv hloov lawv lo lus zais los yog teem lawv tus password.
Kingphisher
Kingphisher yog qhov ua tiav nuv ntses simulation platform uas tso cai rau koj tswj hwm koj cov phiaj xwm nuv ntses, xa ntau cov phiaj xwm nuv ntses, ua haujlwm nrog ntau tus neeg siv, tsim HTML nplooj ntawv, thiab txuag lawv ua cov qauv. Cov duab neeg siv interface yog ib qho yooj yim mus use thiab los preloaded nrog Kali. Lub interface kuj tso cai rau koj taug qab yog tias tus qhua qhib nplooj ntawv lossis yog tus qhua nyem qhov txuas. Yog tias koj xav tau daim duab tsim interface los pib nrog kev nuv ntses lossis kev tawm tsam kev sib raug zoo, Kingphisher yog qhov kev xaiv zoo.
Gophish
Qhov no yog ib qho ntawm feem nrov phishing simulation moj khaum. Gofish yog qhov ua tiav phishing lub moj khaum uas koj tuaj yeem siv los ua txhua yam kev tua nuv ntses. Nws muaj ib tug heev huv si thiab user-friendly interface. Lub platform tuaj yeem siv los ua ntau qhov kev tawm tsam phishing.
Koj tuaj yeem teeb tsa kev sib tw nuv ntses sib txawv, sib txawv xa cov ntaub ntawv, nplooj ntawv tsaws, thiab email templates.
Tsim ib lub phiaj xwm Gophish
- Nyob rau sab laug pane ntawm lub console, nyem campaigns.
- Ntawm qhov popup, Nkag mus rau cov ntsiab lus tsim nyog.
- Tua tawm lub phiaj xwm thiab xa cov ntawv xeem kom paub tseeb tias nws ua haujlwm
- Koj qhov piv txwv Gophish tau npaj rau kev tshaj tawm phishing.
xaus
Hauv kev xaus, phishing tawm tsam tseem yog ib qho kev hem thawj tseem ceeb rau cov koom haum ntawm txhua qhov ntau thiab tsawg, ua rau nws yuav tsum muaj kev ncaj ncees rau hackers kom lawv tus kheej hloov kho tas li nrog cov cuab yeej tshiab thiab cov tswv yim los tiv thaiv cov kev tawm tsam no. Peb cov cuab yeej phishing uas peb tau tham hauv tsab xov xwm no - GoPhish, Social-Engineer Toolkit (SET), thiab King Phisher - muab ntau yam ntawm cov yam ntxwv muaj zog uas tuaj yeem pab cov neeg ua haujlwm ncaj ncees sim thiab txhim kho lawv lub koom haum kev ruaj ntseg. Txawm hais tias txhua lub cuab yeej muaj nws tus kheej lub zog thiab qhov tsis muaj zog, los ntawm kev nkag siab tias lawv ua haujlwm li cas thiab xaiv qhov uas haum rau koj cov kev xav tau tshwj xeeb, koj tuaj yeem txhim kho koj lub peev xwm los txheeb xyuas thiab txo cov kev tawm tsam phishing.
