{"id":1711,"date":"2018-09-14T06:22:39","date_gmt":"2018-09-14T06:22:39","guid":{"rendered":"https:\/\/hardsoftsecurity.es\/?p=1711"},"modified":"2018-09-14T06:22:39","modified_gmt":"2018-09-14T06:22:39","slug":"test-de-intrusion-y-sus-fases","status":"publish","type":"post","link":"https:\/\/hardsoftsecurity.es\/index.php\/2018\/09\/14\/test-de-intrusion-y-sus-fases\/","title":{"rendered":"Test de intrusi\u00f3n y sus fases."},"content":{"rendered":"<p>Hola a tod@s, tras un tiempo sin escribir nada, hoy os traigo una peque\u00f1a entrada donde vamos a describir un poco lo que es un test de intrusi\u00f3n y sus fases m\u00e1s importantes.<\/p>\n<p><img data-recalc-dims=\"1\" fetchpriority=\"high\" decoding=\"async\" data-attachment-id=\"1712\" data-permalink=\"https:\/\/hardsoftsecurity.es\/index.php\/2018\/09\/14\/test-de-intrusion-y-sus-fases\/18956854-23016597\/\" data-orig-file=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2018\/09\/18956854-23016597.jpg?fit=735%2C349&amp;ssl=1\" data-orig-size=\"735,349\" data-comments-opened=\"1\" data-image-title=\"18956854-23016597\" data-image-description=\"\" data-image-caption=\"\" data-large-file=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2018\/09\/18956854-23016597.jpg?fit=735%2C349&amp;ssl=1\" class=\"size-full wp-image-1712 aligncenter\" src=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2018\/09\/18956854-23016597.jpg?resize=735%2C349&#038;ssl=1\" alt=\"\" width=\"735\" height=\"349\" srcset=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2018\/09\/18956854-23016597.jpg?w=735&amp;ssl=1 735w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2018\/09\/18956854-23016597.jpg?resize=300%2C142&amp;ssl=1 300w\" sizes=\"(max-width: 735px) 100vw, 735px\" \/><\/p>\n<p><!--more--><\/p>\n<p>Vamos a comenzar por definir que es un test de intrusi\u00f3n:<\/p>\n<p>Un test de intrusi\u00f3n o pentest, es un m\u00e9todo que permite al administrador de red evaluar la seguridad de un sistema de equipos o de sistemas inform\u00e1ticos. Con esto se pretende realizar una simulaci\u00f3n de un ataque inform\u00e1tico con un objetivo malicioso, tanto desde dentro de la organizaci\u00f3n como desde fuera de ella.<\/p>\n<p>La simulaci\u00f3n que se lleva a cabo dentro de la organizaci\u00f3n, es llevar el rol de por ejemplo un empleado descontento y ver hasta donde puede llegar este atacante con la informaci\u00f3n que ya conoce de su entorno de trabajo, es decir acceso a plataformas, contrase\u00f1as, acceso a informaci\u00f3n y un largo etc. Cuando se realiza desde fuera, lo que est\u00e1 simulando es un ciberataque, realizado por un ciberdelincuente. Este tipo de ataque se basa en el an\u00e1lisis de los sistemas, para sacar informaci\u00f3n y as\u00ed seguir en busca de vulnerabilidades que se puedan aprovechar para llegar a informaci\u00f3n confidencial de la empresa\/v\u00edctima,<\/p>\n<p>Normalmente estas vulnerabilidades suelen ser fruto de malas configuraciones, malas implementaciones de las propias tecnolog\u00edas, de aplicaciones, fallos de seguridad de los S.O o del propio hardware.<\/p>\n<p>Existen diferentes tipos de pentest, tienes los test de intrusi\u00f3n de caja negra, que quiere decir que el atacante no tiene ning\u00fan tipo de informaci\u00f3n sobre la v\u00edctima, con lo que el pentester tendr\u00e1 que recolectar informaci\u00f3n. Tambi\u00e9n tenemos los pentest de caja blanca, donde el pentester tiene bastante informaci\u00f3n sobre la infraestructura y los sistemas antes de realizar el pentest y finalmente los pentest de caja gris, que es un test intermedio entre caja negra y caja blanca, es decir tienes informaci\u00f3n sobre algunos sistemas de la organizaci\u00f3n, pero de otros sistemas no.<\/p>\n<p><img data-recalc-dims=\"1\" decoding=\"async\" data-attachment-id=\"1715\" data-permalink=\"https:\/\/hardsoftsecurity.es\/pentest\/\" data-orig-file=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2018\/09\/pentest.jpg?fit=695%2C275&amp;ssl=1\" data-orig-size=\"695,275\" data-comments-opened=\"1\" data-image-title=\"pentest\" data-image-description=\"\" data-image-caption=\"\" data-large-file=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2018\/09\/pentest.jpg?fit=695%2C275&amp;ssl=1\" class=\" wp-image-1715 aligncenter\" src=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2018\/09\/pentest.jpg?resize=576%2C228&#038;ssl=1\" alt=\"\" width=\"576\" height=\"228\" srcset=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2018\/09\/pentest.jpg?w=695&amp;ssl=1 695w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2018\/09\/pentest.jpg?resize=300%2C119&amp;ssl=1 300w\" sizes=\"(max-width: 576px) 100vw, 576px\" \/><\/p>\n<p>Dentro de las fases de intrusi\u00f3n se pueden detectar diferentes tipos que tienen un objetivo com\u00fan que es el conseguir acceso a los sistemas de la organizaci\u00f3n o de la v\u00edctima en cuesti\u00f3n. La funci\u00f3n de estas fases b\u00e1sicamente es recolectar el m\u00e1ximo de informaci\u00f3n sobre el estado de la seguridad de la organizaci\u00f3n auditada.<\/p>\n<p>Fases de un test de intrusi\u00f3n:<\/p>\n<ul>\n<li>T\u00e9rminos y condiciones del test de intrusi\u00f3n: Aqu\u00ed se determinar\u00e1 los t\u00e9rminos y condiciones respecto al pentest, ya que el cliente que nos contrate puede poner l\u00edmites al test de intrusi\u00f3n, ya sea por pol\u00edticas de seguridad o para al final del test de intrusi\u00f3n no visualizar informaci\u00f3n confidencial.<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<ul>\n<li>Recolecci\u00f3n de informaci\u00f3n: En esta fase se deber\u00e1 recolectar el m\u00e1ximo de informaci\u00f3n posible de la organizaci\u00f3n\/v\u00edctima, ya que posteriormente analizaremos esta informaci\u00f3n para descubrir que tipo de mecanismos de seguridad tienen implementados en la organizaci\u00f3n para mitigar este tipo de recolecci\u00f3n de informaci\u00f3n y as\u00ed barajar diferentes vectores de ataque.<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<ul>\n<li>An\u00e1lisis de vulnerabilidades: B\u00e1sicamente esta fase es la encargada de analizar toda la informaci\u00f3n recolectada anteriormente, donde tendremos que identificar posibles vectores de ataque o vulnerabilidades de los sistemas y barajar cual ser\u00eda el ataque m\u00e1s efectivo<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<ul>\n<li>Explotaci\u00f3n de vulnerabilidades: Esta fase es la que gusta a todo el mundo, es el momento de que todo el trabajo realizado de sus frutos y es la parte donde se consigue acceso a los sistemas de la organizaci\u00f3n.<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<ul>\n<li>Post-explotaci\u00f3n: En esta fase, se intenta llegar m\u00e1s lejos dentro del sistema vulnerado, es decir conseguir credenciales o permisos de administrador o incluso vulnerar otros sistemas con m\u00e1s importancia dentro de la organizaci\u00f3n.<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<ul>\n<li>Informe para el cliente: Esto se basa en redactar todo el proceso del test de intrusi\u00f3n al cliente, para que sepa donde se ha accedido y donde no, en esta fase hay que documentar todo el proceso realizado en el test de intrusi\u00f3n, como herramientas utilizadas, t\u00e9cnicas utilizadas y vulnerabilidades descubiertas. Este informe se suele separar en dos tipos, ejecutivo( para que los directivos con menos conocimientos t\u00e9cnicos pueda entender el impacto de este tipo de intrusiones ) y t\u00e9cnico( donde se desarrollar\u00e1 todo el proceso realizado en el test de intrusi\u00f3n con capturas de pantalla e informes de las herramientas utilizadas).<\/li>\n<\/ul>\n<p>Gracias por leer el blog, un saludo, David.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Hola a tod@s, tras un tiempo sin escribir nada, hoy os traigo una peque\u00f1a entrada donde vamos a describir un poco lo que es un test de intrusi\u00f3n y sus &#8230;<\/p>\n","protected":false},"author":1,"featured_media":1712,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_hide_featured_image":false,"_jetpack_featured_image_duplicate_dismissed":0,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":true,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2},"jetpack_post_was_ever_published":false},"categories":[7],"tags":[213,214,212],"class_list":["post-1711","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-seguridad-informatica","tag-pentest","tag-pentester","tag-test-de-intrusion"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.8 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Test de intrusi\u00f3n y sus fases. - Hardsoft Security<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/hardsoftsecurity.es\/index.php\/2018\/09\/14\/test-de-intrusion-y-sus-fases\/\" \/>\n<meta property=\"og:locale\" content=\"es_ES\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Test de intrusi\u00f3n y sus fases. - Hardsoft Security\" \/>\n<meta property=\"og:description\" content=\"Hola a tod@s, tras un tiempo sin escribir nada, hoy os traigo una peque\u00f1a entrada donde vamos a describir un poco lo que es un test de intrusi\u00f3n y sus ...\" \/>\n<meta property=\"og:url\" content=\"https:\/\/hardsoftsecurity.es\/index.php\/2018\/09\/14\/test-de-intrusion-y-sus-fases\/\" \/>\n<meta property=\"og:site_name\" content=\"Hardsoft Security\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/HardSoftDavid\" \/>\n<meta property=\"article:published_time\" content=\"2018-09-14T06:22:39+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2018\/09\/18956854-23016597.jpg?fit=735%2C349&ssl=1\" \/>\n\t<meta property=\"og:image:width\" content=\"735\" \/>\n\t<meta property=\"og:image:height\" content=\"349\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"david\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@DavidDeMaya\" \/>\n<meta name=\"twitter:site\" content=\"@DavidDeMaya\" \/>\n<meta name=\"twitter:label1\" content=\"Escrito por\" \/>\n\t<meta name=\"twitter:data1\" content=\"david\" \/>\n\t<meta name=\"twitter:label2\" content=\"Tiempo de lectura\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutos\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/hardsoftsecurity.es\\\/index.php\\\/2018\\\/09\\\/14\\\/test-de-intrusion-y-sus-fases\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/hardsoftsecurity.es\\\/index.php\\\/2018\\\/09\\\/14\\\/test-de-intrusion-y-sus-fases\\\/\"},\"author\":{\"name\":\"david\",\"@id\":\"https:\\\/\\\/hardsoftsecurity.es\\\/#\\\/schema\\\/person\\\/dfe289b1e4ae2daf72695e85a8b3dd7a\"},\"headline\":\"Test de intrusi\u00f3n y sus fases.\",\"datePublished\":\"2018-09-14T06:22:39+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/hardsoftsecurity.es\\\/index.php\\\/2018\\\/09\\\/14\\\/test-de-intrusion-y-sus-fases\\\/\"},\"wordCount\":791,\"commentCount\":0,\"image\":{\"@id\":\"https:\\\/\\\/hardsoftsecurity.es\\\/index.php\\\/2018\\\/09\\\/14\\\/test-de-intrusion-y-sus-fases\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/i0.wp.com\\\/hardsoftsecurity.es\\\/wp-content\\\/uploads\\\/2018\\\/09\\\/18956854-23016597.jpg?fit=735%2C349&ssl=1\",\"keywords\":[\"pentest\",\"pentester\",\"test de intrusi\u00f3n\"],\"articleSection\":[\"Seguridad inform\u00e1tica\"],\"inLanguage\":\"es\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/hardsoftsecurity.es\\\/index.php\\\/2018\\\/09\\\/14\\\/test-de-intrusion-y-sus-fases\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/hardsoftsecurity.es\\\/index.php\\\/2018\\\/09\\\/14\\\/test-de-intrusion-y-sus-fases\\\/\",\"url\":\"https:\\\/\\\/hardsoftsecurity.es\\\/index.php\\\/2018\\\/09\\\/14\\\/test-de-intrusion-y-sus-fases\\\/\",\"name\":\"Test de intrusi\u00f3n y sus fases. - Hardsoft Security\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/hardsoftsecurity.es\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/hardsoftsecurity.es\\\/index.php\\\/2018\\\/09\\\/14\\\/test-de-intrusion-y-sus-fases\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/hardsoftsecurity.es\\\/index.php\\\/2018\\\/09\\\/14\\\/test-de-intrusion-y-sus-fases\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/i0.wp.com\\\/hardsoftsecurity.es\\\/wp-content\\\/uploads\\\/2018\\\/09\\\/18956854-23016597.jpg?fit=735%2C349&ssl=1\",\"datePublished\":\"2018-09-14T06:22:39+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/hardsoftsecurity.es\\\/#\\\/schema\\\/person\\\/dfe289b1e4ae2daf72695e85a8b3dd7a\"},\"breadcrumb\":{\"@id\":\"https:\\\/\\\/hardsoftsecurity.es\\\/index.php\\\/2018\\\/09\\\/14\\\/test-de-intrusion-y-sus-fases\\\/#breadcrumb\"},\"inLanguage\":\"es\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/hardsoftsecurity.es\\\/index.php\\\/2018\\\/09\\\/14\\\/test-de-intrusion-y-sus-fases\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"es\",\"@id\":\"https:\\\/\\\/hardsoftsecurity.es\\\/index.php\\\/2018\\\/09\\\/14\\\/test-de-intrusion-y-sus-fases\\\/#primaryimage\",\"url\":\"https:\\\/\\\/i0.wp.com\\\/hardsoftsecurity.es\\\/wp-content\\\/uploads\\\/2018\\\/09\\\/18956854-23016597.jpg?fit=735%2C349&ssl=1\",\"contentUrl\":\"https:\\\/\\\/i0.wp.com\\\/hardsoftsecurity.es\\\/wp-content\\\/uploads\\\/2018\\\/09\\\/18956854-23016597.jpg?fit=735%2C349&ssl=1\",\"width\":735,\"height\":349},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/hardsoftsecurity.es\\\/index.php\\\/2018\\\/09\\\/14\\\/test-de-intrusion-y-sus-fases\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Portada\",\"item\":\"https:\\\/\\\/hardsoftsecurity.es\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Test de intrusi\u00f3n y sus fases.\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/hardsoftsecurity.es\\\/#website\",\"url\":\"https:\\\/\\\/hardsoftsecurity.es\\\/\",\"name\":\"Hardsoft Security\",\"description\":\"Chasing (In)Security\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/hardsoftsecurity.es\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"es\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/hardsoftsecurity.es\\\/#\\\/schema\\\/person\\\/dfe289b1e4ae2daf72695e85a8b3dd7a\",\"name\":\"david\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"es\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/868972cb4e72674a12503e080ee081285c7df2fde82787c96a74bca20781cad7?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/868972cb4e72674a12503e080ee081285c7df2fde82787c96a74bca20781cad7?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/868972cb4e72674a12503e080ee081285c7df2fde82787c96a74bca20781cad7?s=96&d=mm&r=g\",\"caption\":\"david\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Test de intrusi\u00f3n y sus fases. - Hardsoft Security","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/hardsoftsecurity.es\/index.php\/2018\/09\/14\/test-de-intrusion-y-sus-fases\/","og_locale":"es_ES","og_type":"article","og_title":"Test de intrusi\u00f3n y sus fases. - Hardsoft Security","og_description":"Hola a tod@s, tras un tiempo sin escribir nada, hoy os traigo una peque\u00f1a entrada donde vamos a describir un poco lo que es un test de intrusi\u00f3n y sus ...","og_url":"https:\/\/hardsoftsecurity.es\/index.php\/2018\/09\/14\/test-de-intrusion-y-sus-fases\/","og_site_name":"Hardsoft Security","article_publisher":"https:\/\/www.facebook.com\/HardSoftDavid","article_published_time":"2018-09-14T06:22:39+00:00","og_image":[{"width":735,"height":349,"url":"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2018\/09\/18956854-23016597.jpg?fit=735%2C349&ssl=1","type":"image\/jpeg"}],"author":"david","twitter_card":"summary_large_image","twitter_creator":"@DavidDeMaya","twitter_site":"@DavidDeMaya","twitter_misc":{"Escrito por":"david","Tiempo de lectura":"4 minutos"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/hardsoftsecurity.es\/index.php\/2018\/09\/14\/test-de-intrusion-y-sus-fases\/#article","isPartOf":{"@id":"https:\/\/hardsoftsecurity.es\/index.php\/2018\/09\/14\/test-de-intrusion-y-sus-fases\/"},"author":{"name":"david","@id":"https:\/\/hardsoftsecurity.es\/#\/schema\/person\/dfe289b1e4ae2daf72695e85a8b3dd7a"},"headline":"Test de intrusi\u00f3n y sus fases.","datePublished":"2018-09-14T06:22:39+00:00","mainEntityOfPage":{"@id":"https:\/\/hardsoftsecurity.es\/index.php\/2018\/09\/14\/test-de-intrusion-y-sus-fases\/"},"wordCount":791,"commentCount":0,"image":{"@id":"https:\/\/hardsoftsecurity.es\/index.php\/2018\/09\/14\/test-de-intrusion-y-sus-fases\/#primaryimage"},"thumbnailUrl":"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2018\/09\/18956854-23016597.jpg?fit=735%2C349&ssl=1","keywords":["pentest","pentester","test de intrusi\u00f3n"],"articleSection":["Seguridad inform\u00e1tica"],"inLanguage":"es","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/hardsoftsecurity.es\/index.php\/2018\/09\/14\/test-de-intrusion-y-sus-fases\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/hardsoftsecurity.es\/index.php\/2018\/09\/14\/test-de-intrusion-y-sus-fases\/","url":"https:\/\/hardsoftsecurity.es\/index.php\/2018\/09\/14\/test-de-intrusion-y-sus-fases\/","name":"Test de intrusi\u00f3n y sus fases. - Hardsoft Security","isPartOf":{"@id":"https:\/\/hardsoftsecurity.es\/#website"},"primaryImageOfPage":{"@id":"https:\/\/hardsoftsecurity.es\/index.php\/2018\/09\/14\/test-de-intrusion-y-sus-fases\/#primaryimage"},"image":{"@id":"https:\/\/hardsoftsecurity.es\/index.php\/2018\/09\/14\/test-de-intrusion-y-sus-fases\/#primaryimage"},"thumbnailUrl":"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2018\/09\/18956854-23016597.jpg?fit=735%2C349&ssl=1","datePublished":"2018-09-14T06:22:39+00:00","author":{"@id":"https:\/\/hardsoftsecurity.es\/#\/schema\/person\/dfe289b1e4ae2daf72695e85a8b3dd7a"},"breadcrumb":{"@id":"https:\/\/hardsoftsecurity.es\/index.php\/2018\/09\/14\/test-de-intrusion-y-sus-fases\/#breadcrumb"},"inLanguage":"es","potentialAction":[{"@type":"ReadAction","target":["https:\/\/hardsoftsecurity.es\/index.php\/2018\/09\/14\/test-de-intrusion-y-sus-fases\/"]}]},{"@type":"ImageObject","inLanguage":"es","@id":"https:\/\/hardsoftsecurity.es\/index.php\/2018\/09\/14\/test-de-intrusion-y-sus-fases\/#primaryimage","url":"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2018\/09\/18956854-23016597.jpg?fit=735%2C349&ssl=1","contentUrl":"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2018\/09\/18956854-23016597.jpg?fit=735%2C349&ssl=1","width":735,"height":349},{"@type":"BreadcrumbList","@id":"https:\/\/hardsoftsecurity.es\/index.php\/2018\/09\/14\/test-de-intrusion-y-sus-fases\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Portada","item":"https:\/\/hardsoftsecurity.es\/"},{"@type":"ListItem","position":2,"name":"Test de intrusi\u00f3n y sus fases."}]},{"@type":"WebSite","@id":"https:\/\/hardsoftsecurity.es\/#website","url":"https:\/\/hardsoftsecurity.es\/","name":"Hardsoft Security","description":"Chasing (In)Security","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/hardsoftsecurity.es\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"es"},{"@type":"Person","@id":"https:\/\/hardsoftsecurity.es\/#\/schema\/person\/dfe289b1e4ae2daf72695e85a8b3dd7a","name":"david","image":{"@type":"ImageObject","inLanguage":"es","@id":"https:\/\/secure.gravatar.com\/avatar\/868972cb4e72674a12503e080ee081285c7df2fde82787c96a74bca20781cad7?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/868972cb4e72674a12503e080ee081285c7df2fde82787c96a74bca20781cad7?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/868972cb4e72674a12503e080ee081285c7df2fde82787c96a74bca20781cad7?s=96&d=mm&r=g","caption":"david"}}]}},"jetpack_publicize_connections":[],"jetpack_sharing_enabled":true,"jetpack_shortlink":"https:\/\/wp.me\/p7xGFx-rB","jetpack-related-posts":[{"id":1522,"url":"https:\/\/hardsoftsecurity.es\/index.php\/2018\/06\/04\/hids-instalacion-centralizada-de-ossec\/","url_meta":{"origin":1711,"position":0},"title":"HIDS, Instalaci\u00f3n centralizada de OSSEC.","author":"david","date":"junio 4, 2018","format":false,"excerpt":"Hola a tod@s, hoy os traigo un post donde vamos a explicar que es un HIDS (Host Intrusion Detection System) y ha instalar el HIDS OSSEC de manera centralizada, es decir Cliente - Servidor. Empezamos por describir lo m\u00e1s b\u00e1sico, es decir que es un IDS (Intrusion Detection System), un\u2026","rel":"","context":"En \u00abGu\u00edas\u00bb","block_context":{"text":"Gu\u00edas","link":"https:\/\/hardsoftsecurity.es\/index.php\/category\/guias\/"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2018\/06\/ossec-ubuntu-logo-1.jpg?fit=500%2C236&ssl=1&resize=350%2C200","width":350,"height":200},"classes":[]},{"id":2949,"url":"https:\/\/hardsoftsecurity.es\/index.php\/2023\/04\/27\/que-es-caldera-atacando-y-defendiendo\/","url_meta":{"origin":1711,"position":1},"title":"\u00bfQu\u00e9 es Caldera? Atacando y defendiendo.","author":"david","date":"abril 27, 2023","format":false,"excerpt":"\u00a1Hola a todos! hoy vamos a ver Caldera, una herramienta que permite crear escenarios de ataques simulados y evaluar la efectividad de las defensas de una organizaci\u00f3n. En este post, nos enfocaremos en c\u00f3mo Caldera se puede utilizar en conjunto con la matriz MITRE ATT&CK para crear escenarios de ataques\u2026","rel":"","context":"En \u00abGu\u00edas\u00bb","block_context":{"text":"Gu\u00edas","link":"https:\/\/hardsoftsecurity.es\/index.php\/category\/guias\/"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/04\/image.png?fit=1200%2C706&ssl=1&resize=350%2C200","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/04\/image.png?fit=1200%2C706&ssl=1&resize=350%2C200 1x, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/04\/image.png?fit=1200%2C706&ssl=1&resize=525%2C300 1.5x, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/04\/image.png?fit=1200%2C706&ssl=1&resize=700%2C400 2x, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/04\/image.png?fit=1200%2C706&ssl=1&resize=1050%2C600 3x"},"classes":[]},{"id":3583,"url":"https:\/\/hardsoftsecurity.es\/index.php\/2023\/11\/27\/preparar-ecpptv2\/","url_meta":{"origin":1711,"position":2},"title":"\u00bfC\u00f3mo PREPARAR la certificaci\u00f3n eCPPTV2?","author":"david","date":"noviembre 27, 2023","format":false,"excerpt":"Hoy, me complace profundizar en \"\u00bfC\u00f3mo preparar la certificaci\u00f3n eCPPTv2 (Certified Professional Penetration Tester)?\", una credencial que he obtenido recientemente y que ha marcado un punto de inflexi\u00f3n significativo en mi carrera en seguridad inform\u00e1tica. Esta certificaci\u00f3n no solo ha ampliado mi conocimiento t\u00e9cnico sino que tambi\u00e9n ha reforzado mi\u2026","rel":"","context":"En \u00abGu\u00edas\u00bb","block_context":{"text":"Gu\u00edas","link":"https:\/\/hardsoftsecurity.es\/index.php\/category\/guias\/"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/11\/image-13.png?fit=1200%2C569&ssl=1&resize=350%2C200","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/11\/image-13.png?fit=1200%2C569&ssl=1&resize=350%2C200 1x, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/11\/image-13.png?fit=1200%2C569&ssl=1&resize=525%2C300 1.5x, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/11\/image-13.png?fit=1200%2C569&ssl=1&resize=700%2C400 2x, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/11\/image-13.png?fit=1200%2C569&ssl=1&resize=1050%2C600 3x"},"classes":[]},{"id":2810,"url":"https:\/\/hardsoftsecurity.es\/index.php\/2022\/10\/23\/trabajo-de-fin-de-master-ciberseguridad\/","url_meta":{"origin":1711,"position":3},"title":"Trabajo de Fin de M\u00e1ster &#8211; Ciberseguridad","author":"david","date":"octubre 23, 2022","format":false,"excerpt":"Buenas a tod@s, hoy os traigo un post muy interesante, donde voy a mostrar el Trabajo de Fin de M\u00e1ster que he presentado. El trabajo est\u00e1 relacionado con los siguientes \u00e1mbitos Direcci\u00f3n de Ciberseguridad, Hacking \u00c9tico y Seguridad Ofensiva. Introducci\u00f3n Durante los \u00faltimos a\u00f1os, he enfocado mi carrera profesional a\u2026","rel":"","context":"En \u00abGu\u00edas\u00bb","block_context":{"text":"Gu\u00edas","link":"https:\/\/hardsoftsecurity.es\/index.php\/category\/guias\/"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2022\/10\/anarchy-computer-hack-hacker-wallpaper-preview.jpg?fit=728%2C363&ssl=1&resize=350%2C200","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2022\/10\/anarchy-computer-hack-hacker-wallpaper-preview.jpg?fit=728%2C363&ssl=1&resize=350%2C200 1x, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2022\/10\/anarchy-computer-hack-hacker-wallpaper-preview.jpg?fit=728%2C363&ssl=1&resize=525%2C300 1.5x, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2022\/10\/anarchy-computer-hack-hacker-wallpaper-preview.jpg?fit=728%2C363&ssl=1&resize=700%2C400 2x"},"classes":[]},{"id":1846,"url":"https:\/\/hardsoftsecurity.es\/index.php\/2019\/05\/18\/poc-pentesting-en-active-directory\/","url_meta":{"origin":1711,"position":4},"title":"PoC, pentesting en Active Directory.","author":"david","date":"mayo 18, 2019","format":false,"excerpt":"Hola buenas a tod@s, hoy os traigo una entrada, donde vamos a ver un v\u00eddeo de c\u00f3mo mediante t\u00e9cnicas de hacking conseguimos acceder al controlador de dominio de una red. Este art\u00edculo se va a componer de un v\u00eddeo donde podremos ver la prueba de concepto de las t\u00e9cnicas que\u2026","rel":"","context":"En \u00abGu\u00edas\u00bb","block_context":{"text":"Gu\u00edas","link":"https:\/\/hardsoftsecurity.es\/index.php\/category\/guias\/"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2019\/04\/Ethical-hacking.jpg?fit=914%2C514&ssl=1&resize=350%2C200","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2019\/04\/Ethical-hacking.jpg?fit=914%2C514&ssl=1&resize=350%2C200 1x, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2019\/04\/Ethical-hacking.jpg?fit=914%2C514&ssl=1&resize=525%2C300 1.5x, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2019\/04\/Ethical-hacking.jpg?fit=914%2C514&ssl=1&resize=700%2C400 2x"},"classes":[]},{"id":3293,"url":"https:\/\/hardsoftsecurity.es\/index.php\/2023\/09\/07\/empezar-en-ciberseguridad\/","url_meta":{"origin":1711,"position":5},"title":"Empezar en Ciberseguridad: Gu\u00eda para Novatos","author":"david","date":"septiembre 7, 2023","format":false,"excerpt":"La ciberseguridad es un campo en constante evoluci\u00f3n y con una demanda creciente. Si acabas de terminar tus estudios universitarios\/educaci\u00f3n y te preguntas c\u00f3mo comenzar en ciberseguridad, este post (y v\u00eddeo) es para ti. \u00bfQu\u00e9 habilidades t\u00e9cnicas necesito para comenzar en ciberseguridad? M\u00e1s all\u00e1 de lo que hayas aprendido en\u2026","rel":"","context":"En \u00abGu\u00edas\u00bb","block_context":{"text":"Gu\u00edas","link":"https:\/\/hardsoftsecurity.es\/index.php\/category\/guias\/"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/09\/shutterstock_505066678-scaled-scaled-1.jpg?fit=1200%2C675&ssl=1&resize=350%2C200","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/09\/shutterstock_505066678-scaled-scaled-1.jpg?fit=1200%2C675&ssl=1&resize=350%2C200 1x, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/09\/shutterstock_505066678-scaled-scaled-1.jpg?fit=1200%2C675&ssl=1&resize=525%2C300 1.5x, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/09\/shutterstock_505066678-scaled-scaled-1.jpg?fit=1200%2C675&ssl=1&resize=700%2C400 2x, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/09\/shutterstock_505066678-scaled-scaled-1.jpg?fit=1200%2C675&ssl=1&resize=1050%2C600 3x"},"classes":[]}],"jetpack_likes_enabled":true,"jetpack_featured_media_url":"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2018\/09\/18956854-23016597.jpg?fit=735%2C349&ssl=1","_links":{"self":[{"href":"https:\/\/hardsoftsecurity.es\/index.php\/wp-json\/wp\/v2\/posts\/1711","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/hardsoftsecurity.es\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/hardsoftsecurity.es\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/hardsoftsecurity.es\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/hardsoftsecurity.es\/index.php\/wp-json\/wp\/v2\/comments?post=1711"}],"version-history":[{"count":2,"href":"https:\/\/hardsoftsecurity.es\/index.php\/wp-json\/wp\/v2\/posts\/1711\/revisions"}],"predecessor-version":[{"id":1719,"href":"https:\/\/hardsoftsecurity.es\/index.php\/wp-json\/wp\/v2\/posts\/1711\/revisions\/1719"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/hardsoftsecurity.es\/index.php\/wp-json\/wp\/v2\/media\/1712"}],"wp:attachment":[{"href":"https:\/\/hardsoftsecurity.es\/index.php\/wp-json\/wp\/v2\/media?parent=1711"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/hardsoftsecurity.es\/index.php\/wp-json\/wp\/v2\/categories?post=1711"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/hardsoftsecurity.es\/index.php\/wp-json\/wp\/v2\/tags?post=1711"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}