Manyan Kayan Aikin Kaya 3 don Hacking na Da'a
Gabatarwa
Duk da yake mai leƙan asiri Masu aikata mugunta za su iya amfani da hare-hare don satar bayanan sirri ko yada malware, masu satar da'a na iya amfani da irin wannan dabara don gwada lahani a cikin abubuwan tsaro na ƙungiyar. Wadannan kayayyakin aiki, an ƙera su ne don taimakawa masu satar da'a su kwaikwayi hare-haren phishing na zahiri da gwada martanin ma'aikatan ƙungiyar kan waɗannan hare-haren. Ta hanyar amfani da waɗannan kayan aikin, masu satar da'a za su iya gano lahani a cikin tsaron ƙungiyar da taimaka musu ɗaukar matakan da suka dace don kare kai daga hare-haren phishing. A cikin wannan labarin, za mu bincika manyan kayan aikin phishing guda 3 don hacking na ɗabi'a.
SEToolkit
Kayan aikin Injiniya na zamantakewa (SEToolkit) kayan aikin Linux ne wanda aka tsara don taimakawa hare-haren injiniyan zamantakewa. Ya ƙunshi nau'ikan injiniyan zamantakewa masu sarrafa kansa da yawa. Shari'ar amfani don SEToolkit shine rufe gidan yanar gizon don girbi takaddun shaida. Ana iya yin wannan ta matakai masu zuwa:
- A cikin tashar Linux ɗin ku, shigar setoolkit.
- Daga menu, zaɓi zaɓi na farko ta shiga 1 cikin tasha.
- Daga sakamakon, shigar da 2 a cikin tasha don zaɓar Yanar Gizo Attack Vectors. Select Hanyar Harin Harvester Takaddun shaida, sannan zabi Samfurin Yanar Gizo.
- Zaɓi samfurin da kuka fi so. An dawo da adireshin IP wanda ke turawa zuwa rukunin da aka rufe.
- Idan wani a kan hanyar sadarwa iri ɗaya ya ziyarci adireshin IP kuma ya shigar da bayanan shaidarsa, ana girbe shi kuma ana iya duba shi a cikin tasha.
Yanayin inda za'a iya amfani da wannan shine idan kuna cikin hanyar sadarwa kuma kun san aikace-aikacen yanar gizo da ƙungiyar ke amfani da su. Kuna iya rufe wannan aikace-aikacen kawai kuma ku kunna shi gayawa mai amfani ya canza su password ko saita kalmar sirrin su.
Sarkiphisher
Kingphisher cikakken dandalin kwaikwayo ne na kamun kifi wanda zai baka damar sarrafa kamfen ɗin ka, aika kamfen ɗin kamun kifi, aiki tare da masu amfani da yawa, ƙirƙirar shafukan HTML, da adana su azaman samfuri. Fayil ɗin mai amfani mai hoto yana da sauƙin amfani kuma yana zuwa da Kali. Hakanan yana ba ku damar yin waƙa idan baƙo ya buɗe shafi ko kuma idan baƙo ya danna hanyar haɗi. Idan kuna buƙatar ƙirar ƙirar hoto don farawa da kamun kifi ko harin injiniyan zamantakewa, Kingphisher zaɓi ne mai kyau
Gophish
Wannan shine ɗayan mashahurin tsarin simintin ƙwaƙƙwaran phishing. Gofish cikakken tsarin phishing ne wanda zaku iya amfani dashi don aiwatar da kowane irin harin kamun kifi. Yana da tsafta sosai kuma mai sauƙin amfani. Ana iya amfani da dandalin don aiwatar da hare-haren phishing da yawa.
Kuna iya saita kamfen ɗin kamun kifi daban-daban, bayanan aikawa daban-daban, shafukan saukarwa, da samfuran imel.
Ƙirƙirar yakin Gophish
- A gefen hagu na wasan bidiyo, danna Yakin.
- A kan popup, Shigar da cikakkun bayanai masu mahimmanci.
- Kaddamar da yaƙin neman zaɓe kuma aika saƙon gwaji don tabbatar da yana aiki
- Misalin Gophish ɗinku yana shirye don yaƙin neman zaɓe.
Kammalawa
A ƙarshe, hare-haren phishing suna zama babbar barazana ga ƙungiyoyi masu girma dabam, wanda hakan ya sa ya zama wajibi ga masu satar bayanan da'a su ci gaba da sabunta kansu tare da sabbin kayan aiki da dabaru don kare kai daga irin waɗannan hare-hare. Kayan aikin phishing guda uku da muka tattauna a wannan labarin - GoPhish, Social-Engineer Toolkit (SET), da King Phisher - suna ba da fa'idodi da yawa masu ƙarfi waɗanda zasu iya taimakawa masu satar da'a su gwada da inganta yanayin tsaro na ƙungiyar su. Duk da yake kowane kayan aiki yana da nasa ƙarfi da rauni na musamman, ta hanyar fahimtar yadda suke aiki da zaɓin wanda ya fi dacewa da takamaiman buƙatunku, zaku iya haɓaka ikon ku na ganowa da rage kai hare-hare.
