《 “一些常用工具及其相关介绍[不定期更新]” 》 有 13 条评论

1. tcpdump使用技巧
   http://linuxwiki.github.io/NetTools/tcpdump.html
   https://github.com/linuxwiki/SourceWiki

   超级详细Tcpdump 的用法
   https://linux.cn/thread-113-1-1.html

   TCPDUMP 高级规则使用
   http://highdb.com/tcpdump-%E9%AB%98%E7%BA%A7%E8%A7%84%E5%88%99%E4%BD%BF%E7%94%A8/

   30分钟掌握tcpdump
   http://mp.weixin.qq.com/s?__biz=MzIxMjAzMDA1MQ==&mid=2648945706&idx=1&sn=9e0c53430969a31058c47d4fa18adcd3&chksm=8f5b5326b82cda30461c4f1cd7a41898f5e819180e3edafeced9f4024f2e5d585f706ec566fb

   回复

2. 多个地点Ping服务
   https://ping.pe/ixyzero.com
   http://ping.chinaz.com/ixyzero.com

   回复

3. tactical-exploitation – 战术型渗透测试工具包
   https://github.com/0xdea/tactical-exploitation

   回复

4. IoT Hacker 的工具包一览
   https://systemoverlord.com/2018/04/16/the-iot-hackers-toolkit.html

   回复

5. 2018 BlackHat 工具列表
   https://github.com/1522402210/2018-BlackHat-Tools-List
   https://nosec.org/home/detail/1739.html

   回复

6. From IoT Pentesting to IoT Security
   https://github.com/V33RU/IoTSecurity101
   `
   物联网渗透测试101 && 物联网安全101

   方法论：
   网络
   Web(前端、后端和Web服务)
   手机App(Android & iOS)
   无线连接
   固件测试(硬件或物联网设备操作系统)
   硬件级Approach
   `

   回复

7. 物联网安全学习笔记之二——小试牛刀
   https://www.anquanke.com/post/id/166821
   `
   1 安装工具
   1.1 binwalk
   1.2 buildroot
   1.3 qemu
   1.4 IDA

   注意：
   2 安装测试环境
   3 发起攻击!
   3.1 搞清楚固件架构
   3.2 编译代码
   3.3 审计代码
   3.4 运行程序
   3.5 调试代码
   3.6 编写溢出字符串
   `

   回复

8. Resources to help get started with IoT Pentesting
   https://github.com/adi0x90/IoT-Pentesting-Methodology

   MIDC • 2018 小米IoT安全峰会议题 PPT 公布
   https://paper.seebug.org/761/

   回复

9. IoT Security Wiki(One Stop for IoT Security Resources)
   https://iotsecuritywiki.com/

   回复

10. Perun是一款主要适用于乙方安服、渗透测试人员和甲方RedTeam红队人员的网络资产漏洞扫描器/扫描框架
    https://github.com/WyAtu/Perun

    回复

11. 有用的渗透测试，开发，逆向工程，密码学Node.js代码/工具包
    (Delightful Node.js packages useful for penetration testing, exploiting, reverse engineer, cryptography…)
    https://github.com/jesusprubio/awesome-nodejs-pentest

    回复

12. 如何自建IoT实验室（一）
    https://www.white-alone.com/%E5%A6%82%E4%BD%95%E8%87%AA%E5%BB%BAIoT%E5%AE%9E%E9%AA%8C%E5%AE%A4_1/

    如何自建IoT实验室（二）
    https://www.white-alone.com/%E5%A6%82%E4%BD%95%E8%87%AA%E5%BB%BAIoT%E5%AE%9E%E9%AA%8C%E5%AE%A4_2/

    回复

13. Linux: Respuesta PING habilitar o deshabilitar
    https://www.sysadmit.com/2016/03/linux-respuesta-ping-habilitar-o-deshabilitar.html

    Getting Linux to ignore pings
    https://www.networkworld.com/article/3228127/getting-linux-to-ignore-pings.html

    2 Ways to Disable or Block Ping in Linux
    https://www.howtouselinux.com/post/disable-ping-in-linux
    `
    1. What is ICMP?
    2. Understanding Ping
    3. Understanding ICMP Type
    4. Block PING requests via kernel parameters
    5. Blocking PING requests with iptables
    `

    How to block or unblock PING requests in Ubuntu
    https://vitux.com/ubuntu-block-ping-icmp/
    `
    Packet Internet Groper (PING) – PING is used to check-out the status of the connection between any source and any destination. Users can know the time taken by the packets to receive a response.

    # 临时禁止/解禁
    $ echo 1 > /proc/sys/net/ipv4/icmp_echo_ignore_all
    $ echo 0 > /proc/sys/net/ipv4/icmp_echo_ignore_all

    # 使禁止/解禁在重启后依然可以生效
    $ sudo sysctl -w net.ipv4.icmp_echo_ignore_all=1
    $ sudo sysctl -w net.ipv4.icmp_echo_ignore_all=0

    $ sudo nano /etc/sysctl.conf
    # net.ipv4.icmp_echo_ignore_all = 1
    $ sudo sysctl -p

    # 使用iptables进行禁止/解禁操作
    $ sudo iptables -A INPUT -p icmp –icmp-type echo-request -j REJECT
    $ sudo iptables -A INPUT -p icmp –icmp-type echo-request -j DROP
    $ sudo iptables -A OUTPUT -p icmp –icmp-type echo-reply -j DROP

    $ sudo iptables -D INPUT -p icmp –icmp-type echo-request -j REJECT
    `

    回复