Sniffers: Ziva zvese nezve ichi Hacking chishandiso

Wakambonzwa nezve "Sniffers"? Kana iwe uchifarira nyika yekubira uye cybersecurity, zvingangoita kuti izwi iri rabata pfungwa dzako. Muchinyorwa chino, isu tichaongorora zvese nezve sniffers, zvavari, marudzi avo, mabatiro avanoita, uye kuti ndezvipi zvavanoreva kune network uye kuchengetedza data.

Gadzirira kunyura munyika ino inonakidza yekubira uye dzidza kudzivirira masisitimu ako kubva mukusagadzikana kunogona kuitika.

Chii chinonzi mufefe?

A Sniffer, inozivikanwawo se "protocol analyzer" kana "packet sniffer", chishandiso chinoshandiswa mumunda wekuchengetedza komputa kutora uye kuongorora traffic yedata inotenderera netiweki. Chinangwa chayo chikuru ndechekubata uye kuongorora mapaketi edata munguva chaiyo, zvichibvumira matsotsi kana nyanzvi dzezvekuchengetedza kuti vanzwisise zviri muruzivo rwunofambiswa pakati pemidziyo yakabatana kunetiweki.

Mashandiro anoita vafemberi

Sniffers inoshanda muzvikamu zvakasiyana zve OSI (Open Systems Interconnection) modhi kuongorora network traffic. Zvishandiso izvi zvinogona kuva zvemhando dzakasiyana, zvese hardware uye software uye anowanzo shandiswa nevanochengetedza vashandi kuti vaone kusagona kuitika mumambure kana nekuda kwekutarisa.

Mhando dzeSniffers

Munhu anofembedza, sezvatotaurwa, anogona kunge ari software kana Hardware. Mhando mbiri idzi dzakagadzirirwa kubata uye kuongorora traffic yedata inofamba nemunetiweki, asi inosiyana nenzira yadzinoitwa uye kushandiswa kwayo.

Ngatione mutsauko uripo pakati peSoftware Sniffer uye Hardware Sniffer:

Software Sniffer

A software sniffer icomputer application inoiswa pamudziyo, senge komputa kana server, kutora uye kuongorora network traffic. Rudzi urwu rwekufemba runoshanda padanho resoftware uye rinomhanya pane yekushandisa system yemudziyo.

Mukati me Zvakanakira zveSoftware Sniffer vanoona zviri nyore kuisa uye kugadzirisa pamidziyo iripo. Iyo inogona kupa kuchinjika kwakawanda maererano nekugadzirisa uye kuongororwa marongero uye inowanzo gadziridzwa uye kukwidziridzwa nemaitiro matsva.

Hardware Sniffer

Icho chishandiso chemuviri chakanyatsogadzirirwa kubata uye kuongorora network traffic. Midziyo iyi yakabatana netiweki uye inogona kutarisa traffic munguva chaiyo. Hardware sniffers inogona kunge yakamira-yega michina kana chikamu chemidziyo yakaomarara, senge ma routers kana switch, kugonesa kuenderera kwenetiweki kutarisa uye kuongorora.

ari zvakakosha zvakakosha zvechigadzirwa ichi Izvo ndezvekuti inopa ongororo yakazara uye yakadzama yetiweki traffic pasina kukanganisa mashandiro echishandiso chayakabatana nacho. Inogona kutora data munguva chaiyo pasina zvichienderana neanoshanda sisitimu kana zviwanikwa zvechishandiso uye isarudzo inoshanda kune yakakura uye yakaoma network uko kuenderera mberi kwekutarisa kunodiwa.

Ndezvipi zvinonyanya kuzivikanwa uye kushandiswa kunhuhwidza?

ARP (Kero Resolution Protocol) Sniffer

Rudzi urwu rwekufemba rinotarisa pakubata nekuongorora mapaketi edata ane chekuita nekero resolution protocol (ARP). ARP ine basa rekugadzira mamepu eIP kero kune MAC kero pane yemuno network.

Nekushandisa ARP sniffer, vanoongorora vanogona kutarisa iyo ARP tafura uye kuwana ruzivo nezve IP uye MAC kero ine hukama nemidziyo yakabatana kunetiweki. Izvi zvinogona kubatsira pakuona zvingangoitika nyaya dzekubatanidza kana kuona kuedza kuArP chepfu, kurwiswa kwakashata kunogona kutungamira kune kusingatenderwe kudzokororwa kwetraffic.

IP (Internet Protocol) Sniffer

IP sniffers inotarisa pakutora uye kuongororwa kwemapaketi edata ane hukama neIP protocol. Aya anofembedza anogona kupa ruzivo rwakakosha nezve traffic pakati pezvishandiso zvakasiyana uye network, kusanganisira ruzivo nezve kwainobva uye kwainoenda IP kero, mhando yeprotocol inoshandiswa, uye ruzivo rwuri mumapaketi.

Nekushandisa IP sniffer, nyanzvi dzezvekuchengetedza dzinogona kuona fungidziro dzetraffic mapatani kana kuona zvinogona kutyisidzira uye kusagadzikana panetiweki.

MAC (Media Access Control) Sniffer

Rudzi urwu rwekufemba rinotarisa pakutora uye kuongororwa kwemapaketi edata ane hukama neMAC kero dzemidziyo pane network yemuno.

MAC kero zviziviso zvakasiyana zvakapihwa kune yega yega mudziyo wetiweki, uye MAC sniffers inogona kubatsira kuona kuti ndeapi maturusi ari kushanda panetiweki, matauriro aanoita kune mumwe nemumwe, uye kana michina yehutsotsi iripo.

Izvi zvinogona kunyanya kubatsira pakutarisa uye kuchengetedzeka paWi-Fi network, uko zvishandiso zvinotaurirana zvakananga kune mumwe nemumwe.

Marongedzerwo Anoitwa Vafembedzi

Sezvatakambotaura, kune marudzi akasiyana evanofemba akaiswa maererano nekushanda kwavo uye zvidimbu zveOSI modhi yavanoshanda mairi:

1. Layer 2 sniffers: Aya ma analyzer anotarisa pane data link layer. Ivo vanotora mafuremu uye MAC kero. Iwo anowanzo shandiswa kuongorora ma network (LAN).
2. Layer 3 sniffers: Aya anoshanda pane network layer. Kutora IP mapaketi uye kuongorora kwainobva uye kwekuenda IP kero. Iwo anogona kushandiswa kuongorora traffic pane yakakura network seInternet.
3. Layer 4 sniffers: Vanotarisa pane yekutakura layer. Vanoongorora uye kuparadzanisa TCP uye UDP mapaketi. Iwo anobatsira pakunzwisisa kuti kubatana kunotangwa sei uye kuti traffic inoyerera sei pakati pezvishandiso.

Kudzivirira uye kuchengetedzeka kune Sniffers

Kudzivirirwa kubva kune vanofembedza kwakakosha kuchengetedza kuvanzika uye chengetedzo yedata panetiweki. Mamwe matanho anoshanda anosanganisira:

• Data encryption: Inoshandisa encryption maprotocol akadai seSSL/TLS kuona kuti data inotapuriranwa yakachengetedzwa uye haigone kubatwa nyore.
• Firewalls uye kuona intrusion: Shandisa firewall uye intrusion yekuona masisitimu (IDS) yekutarisa network traffic uye kuona chiitiko chinofungidzirwa.
• Updates uye zvigamba: Chengetedza zvishandiso zvako uye software yakagadziridzwa neshanduro dzazvino uye zvigamba zvekuchengetedza kudzivirira zvinogona kuitika.

Sniffers uye cybersecurity

Kunyangwe vanhu vanofemba vari maturusi ari pamutemo uye anobatsira pakuongorora traffic yenetiweki, anogona zvakare kushandiswa kune zvakaipa, sekuba data rako pachako kana password. Matsotsi asina hunhu anogona kutora mukana wekusagadzikana munetiweki kushandisa sniffers kuwana ruzivo rwakadzama kubva kune vasingafungire vashandisi.