{"id":509,"date":"2015-07-07T12:50:33","date_gmt":"2015-07-07T12:50:33","guid":{"rendered":"https:\/\/hhardsoft.wordpress.com\/?p=509"},"modified":"2015-07-07T12:50:33","modified_gmt":"2015-07-07T12:50:33","slug":"analisis-de-vulnerabilidades-recogida-de-informacion-parte-1","status":"publish","type":"post","link":"https:\/\/hardsoftsecurity.es\/index.php\/2015\/07\/07\/analisis-de-vulnerabilidades-recogida-de-informacion-parte-1\/","title":{"rendered":"An\u00e1lisis de vulnerabilidades, recogida de informaci\u00f3n. Parte 1."},"content":{"rendered":"

Para esta pr\u00e1ctica de seguridad inform\u00e1tica m\u00e1s dirigida al pentesting, se necesitar\u00e1n ciertas herramientas de escaneo de vulnerabilidades y explotaci\u00f3n de las mismas. La siguiente pr\u00e1ctica consiste en utilizar ciertas herramientas de escaneo y explotaci\u00f3n de vulnerabilidades, utiliz\u00e1ndolas contra un servidor Linux,espec\u00edficamente el servidor que nos proporciona metaploitable<\/a>,<\/strong> para saber que vulnerabilidades existen en \u00e9l y posteriormente explotar estas vulnerabilidades para poder aprovecharlas a nuestro favor.<\/p>\n

\"cyber-security\"<\/a><\/p>\n

Para la siguiente pr\u00e1ctica utilizaremos las siguientes herramientas:<\/p>\n

Nmap, \u00bfQue es Nmap<\/strong><\/em>?<\/p>\n

\"260px-Nmap-logo\"<\/a>Hablando desde mi experiencia personal, esta herramienta<\/strong> es muy \u00fatil para el an\u00e1lisis de la red<\/strong>, la principal tarea de esta herramienta es el an\u00e1lisis de puertos, pero desde hace unos a\u00f1os con la implementaci\u00f3n de sus scripts, es incluso capaz de localizar vulnerabilidades y explotarlas<\/strong>. Esta herramienta, existe en un entorno gr\u00e1fico y por consola<\/strong>, yo personalmente al utilizar un sistema operativo basado en Linux, tengo por costumbre utilizar la consola, lo cual me decanto por utilizar la linea de comandos. Este programa es de software libre. Puedes redistribuirlo y\/o modificarlo bajo los t\u00e9rminos de la Licencia P\u00fablica General de GNU.<\/p>\n

Donde podr\u00e1 encontrarse informaci\u00f3n adicional en su pagina web oficial:<\/p>\n

http:\/\/nmap.org\/<\/a><\/p>\n

Nessus \u00bfQue es Nessus<\/em><\/strong>?<\/p>\n

\"Nessus_Vulnerability_Scanner_Logo\"<\/a>Nessus<\/em><\/strong> es una herramienta<\/strong> de an\u00e1lisis de red y vulnerabilidades<\/em><\/strong>, pero es especialista en los an\u00e1lisis diversos de vulnerabilidades de nuestra red y de equipos en concreto, es fant\u00e1stica su intuitiva interfaz, lo que se puede realizar con unos simples clicks lo que se podr\u00eda lograr es incre\u00edble, desde encontrar vulnerabilidades, hasta la posible soluci\u00f3n de la misma, o para los pentesting<\/em><\/strong>, realizar explotaciones de las mismas, con los script que implementa esta herramienta. Para esta herramienta, existe varias versiones del mismo software, una de ellas es la profesional, que esta dirigida al \u00e1mbito profesional, y hay que adquirir una licencia, y la versi\u00f3n \u201ccasera\u201d que es para el \u00e1mbito no profesional, esta es completamente gratuita, esta herramienta es indispensable dentro de las herramientas de un administrador de red.<\/p>\n

Para encontrar m\u00e1s informaci\u00f3n sobre esta herramienta, visitar su p\u00e1gina web oficial:<\/p>\n

http:\/\/www.tenable.com\/<\/a><\/p>\n

Metasploit \u00bfQue es Metasploit<\/strong><\/em>?\"metasploit\"<\/a>Es un proyecto open source de seguridad inform\u00e1tica que proporciona informaci\u00f3n acerca de vulnerabilidades de seguridad y ayuda en tests de penetraci\u00f3n y en el desarrollo de firmas para Sistemas de Detecci\u00f3n de Intrusos.<\/p>\n

V\u00eda wikipedia Metasploit<\/a>.<\/p>\n

Informaci\u00f3n de la configuraci\u00f3n de la red del servidor:<\/p>\n

\"Screenshot_6\"<\/a><\/p>\n

Vamos a empezar con el escaneo de vulnerabilidades con nmap, el caso de utilizar dos m\u00e9todos de escaneo de vulnerabilidades es debido a que cuanto mas informaci\u00f3n recojamos del sistema mejor.<\/p>\n

Empezamos abriendo Nmap y poniendo el siguiente comando:<\/p>\n

\n

nmap -sS -sV -f –script vuln 192.168.1.104<\/p>\n<\/blockquote>\n

\"Screenshot_9\"<\/a><\/p>\n

Encontr\u00e1ndonos con la siguiente informaci\u00f3n:<\/p>\n

\"Screenshot_20\"<\/a> \"Screenshot_19\"<\/a> \"Screenshot_18\"<\/a><\/p>\n

Ahora escanearemos el servidor con la herramienta Nessus, y nos da la siguiente informaci\u00f3n:<\/p>\n

\"Screenshot_14\"<\/a><\/p>\n

\"Screenshot_21\"<\/a><\/p>\n

Aqu\u00ed acaba la recogida de informaci\u00f3n y la primera parte de esta pr\u00e1ctica, en la segunda parte interpretaremos los datos recogidos y elegiremos la vulnerabilidad a explotar que m\u00e1s se ajuste a nuestras necesidades. En la segunda parte empezaremos a usar la herramienta Metasploit Framework para poder explotar las vulnerabilidades.<\/p>\n

Todo el proceso del escaneo de vulnerabilidades y de la red, como las im\u00e1genes han sido comprobados, y capturadas por mi.<\/p>\n

Saludos, David De Maya Merras, @DavidDeMaya<\/p>\n","protected":false},"excerpt":{"rendered":"

Para esta pr\u00e1ctica de seguridad inform\u00e1tica m\u00e1s dirigida al pentesting, se necesitar\u00e1n ciertas herramientas de escaneo de vulnerabilidades y explotaci\u00f3n de las mismas. La siguiente pr\u00e1ctica consiste en utilizar ciertas …<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_hide_featured_image":false,"_jetpack_featured_image_duplicate_dismissed":0,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":false,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2},"jetpack_post_was_ever_published":false},"categories":[7],"tags":[35,38,39,48,56,57],"class_list":["post-509","post","type-post","status-publish","format-standard","hentry","category-seguridad-informatica","tag-metasploit","tag-nessus","tag-nmap","tag-seguridad","tag-vulnerabilidades","tag-windows"],"yoast_head":"\nAn\u00e1lisis de vulnerabilidades, recogida de informaci\u00f3n. Parte 1. - Hardsoft Security<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/hardsoftsecurity.es\/index.php\/2015\/07\/07\/analisis-de-vulnerabilidades-recogida-de-informacion-parte-1\/\" \/>\n<meta property=\"og:locale\" content=\"es_ES\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"An\u00e1lisis de vulnerabilidades, recogida de informaci\u00f3n. Parte 1. - Hardsoft Security\" \/>\n<meta property=\"og:description\" content=\"Para esta pr\u00e1ctica de seguridad inform\u00e1tica m\u00e1s dirigida al pentesting, se necesitar\u00e1n ciertas herramientas de escaneo de vulnerabilidades y explotaci\u00f3n de las mismas. La siguiente pr\u00e1ctica consiste en utilizar ciertas ...\" \/>\n<meta property=\"og:url\" content=\"https:\/\/hardsoftsecurity.es\/index.php\/2015\/07\/07\/analisis-de-vulnerabilidades-recogida-de-informacion-parte-1\/\" \/>\n<meta property=\"og:site_name\" content=\"Hardsoft Security\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/HardSoftDavid\" \/>\n<meta property=\"article:published_time\" content=\"2015-07-07T12:50:33+00:00\" \/>\n<meta property=\"og:image\" content=\"http:\/\/hardsoftsecurity.es\/wp-content\/uploads\/2015\/01\/cyber-security-e1436271547505.jpg\" \/>\n<meta name=\"author\" content=\"david\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@DavidDeMaya\" \/>\n<meta name=\"twitter:site\" content=\"@DavidDeMaya\" \/>\n<meta name=\"twitter:label1\" content=\"Escrito por\" \/>\n\t<meta name=\"twitter:data1\" content=\"david\" \/>\n\t<meta name=\"twitter:label2\" content=\"Tiempo de lectura\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutos\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/hardsoftsecurity.es\\\/index.php\\\/2015\\\/07\\\/07\\\/analisis-de-vulnerabilidades-recogida-de-informacion-parte-1\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/hardsoftsecurity.es\\\/index.php\\\/2015\\\/07\\\/07\\\/analisis-de-vulnerabilidades-recogida-de-informacion-parte-1\\\/\"},\"author\":{\"name\":\"david\",\"@id\":\"https:\\\/\\\/hardsoftsecurity.es\\\/#\\\/schema\\\/person\\\/dfe289b1e4ae2daf72695e85a8b3dd7a\"},\"headline\":\"An\u00e1lisis de vulnerabilidades, recogida de informaci\u00f3n. Parte 1.\",\"datePublished\":\"2015-07-07T12:50:33+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/hardsoftsecurity.es\\\/index.php\\\/2015\\\/07\\\/07\\\/analisis-de-vulnerabilidades-recogida-de-informacion-parte-1\\\/\"},\"wordCount\":588,\"commentCount\":1,\"image\":{\"@id\":\"https:\\\/\\\/hardsoftsecurity.es\\\/index.php\\\/2015\\\/07\\\/07\\\/analisis-de-vulnerabilidades-recogida-de-informacion-parte-1\\\/#primaryimage\"},\"thumbnailUrl\":\"http:\\\/\\\/hardsoftsecurity.es\\\/wp-content\\\/uploads\\\/2015\\\/01\\\/cyber-security-e1436271547505.jpg\",\"keywords\":[\"metasploit\",\"nessus\",\"nmap\",\"seguridad\",\"Vulnerabilidades\",\"windows\"],\"articleSection\":[\"Seguridad inform\u00e1tica\"],\"inLanguage\":\"es\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/hardsoftsecurity.es\\\/index.php\\\/2015\\\/07\\\/07\\\/analisis-de-vulnerabilidades-recogida-de-informacion-parte-1\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/hardsoftsecurity.es\\\/index.php\\\/2015\\\/07\\\/07\\\/analisis-de-vulnerabilidades-recogida-de-informacion-parte-1\\\/\",\"url\":\"https:\\\/\\\/hardsoftsecurity.es\\\/index.php\\\/2015\\\/07\\\/07\\\/analisis-de-vulnerabilidades-recogida-de-informacion-parte-1\\\/\",\"name\":\"An\u00e1lisis de vulnerabilidades, recogida de informaci\u00f3n. Parte 1. - Hardsoft Security\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/hardsoftsecurity.es\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/hardsoftsecurity.es\\\/index.php\\\/2015\\\/07\\\/07\\\/analisis-de-vulnerabilidades-recogida-de-informacion-parte-1\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/hardsoftsecurity.es\\\/index.php\\\/2015\\\/07\\\/07\\\/analisis-de-vulnerabilidades-recogida-de-informacion-parte-1\\\/#primaryimage\"},\"thumbnailUrl\":\"http:\\\/\\\/hardsoftsecurity.es\\\/wp-content\\\/uploads\\\/2015\\\/01\\\/cyber-security-e1436271547505.jpg\",\"datePublished\":\"2015-07-07T12:50:33+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/hardsoftsecurity.es\\\/#\\\/schema\\\/person\\\/dfe289b1e4ae2daf72695e85a8b3dd7a\"},\"breadcrumb\":{\"@id\":\"https:\\\/\\\/hardsoftsecurity.es\\\/index.php\\\/2015\\\/07\\\/07\\\/analisis-de-vulnerabilidades-recogida-de-informacion-parte-1\\\/#breadcrumb\"},\"inLanguage\":\"es\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/hardsoftsecurity.es\\\/index.php\\\/2015\\\/07\\\/07\\\/analisis-de-vulnerabilidades-recogida-de-informacion-parte-1\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"es\",\"@id\":\"https:\\\/\\\/hardsoftsecurity.es\\\/index.php\\\/2015\\\/07\\\/07\\\/analisis-de-vulnerabilidades-recogida-de-informacion-parte-1\\\/#primaryimage\",\"url\":\"http:\\\/\\\/hardsoftsecurity.es\\\/wp-content\\\/uploads\\\/2015\\\/01\\\/cyber-security-e1436271547505.jpg\",\"contentUrl\":\"http:\\\/\\\/hardsoftsecurity.es\\\/wp-content\\\/uploads\\\/2015\\\/01\\\/cyber-security-e1436271547505.jpg\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/hardsoftsecurity.es\\\/index.php\\\/2015\\\/07\\\/07\\\/analisis-de-vulnerabilidades-recogida-de-informacion-parte-1\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Portada\",\"item\":\"https:\\\/\\\/hardsoftsecurity.es\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"An\u00e1lisis de vulnerabilidades, recogida de informaci\u00f3n. Parte 1.\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/hardsoftsecurity.es\\\/#website\",\"url\":\"https:\\\/\\\/hardsoftsecurity.es\\\/\",\"name\":\"Hardsoft Security\",\"description\":\"Chasing (In)Security\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/hardsoftsecurity.es\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"es\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/hardsoftsecurity.es\\\/#\\\/schema\\\/person\\\/dfe289b1e4ae2daf72695e85a8b3dd7a\",\"name\":\"david\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"es\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/868972cb4e72674a12503e080ee081285c7df2fde82787c96a74bca20781cad7?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/868972cb4e72674a12503e080ee081285c7df2fde82787c96a74bca20781cad7?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/868972cb4e72674a12503e080ee081285c7df2fde82787c96a74bca20781cad7?s=96&d=mm&r=g\",\"caption\":\"david\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"An\u00e1lisis de vulnerabilidades, recogida de informaci\u00f3n. Parte 1. - Hardsoft Security","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/hardsoftsecurity.es\/index.php\/2015\/07\/07\/analisis-de-vulnerabilidades-recogida-de-informacion-parte-1\/","og_locale":"es_ES","og_type":"article","og_title":"An\u00e1lisis de vulnerabilidades, recogida de informaci\u00f3n. Parte 1. - Hardsoft Security","og_description":"Para esta pr\u00e1ctica de seguridad inform\u00e1tica m\u00e1s dirigida al pentesting, se necesitar\u00e1n ciertas herramientas de escaneo de vulnerabilidades y explotaci\u00f3n de las mismas. La siguiente pr\u00e1ctica consiste en utilizar ciertas ...","og_url":"https:\/\/hardsoftsecurity.es\/index.php\/2015\/07\/07\/analisis-de-vulnerabilidades-recogida-de-informacion-parte-1\/","og_site_name":"Hardsoft Security","article_publisher":"https:\/\/www.facebook.com\/HardSoftDavid","article_published_time":"2015-07-07T12:50:33+00:00","og_image":[{"url":"http:\/\/hardsoftsecurity.es\/wp-content\/uploads\/2015\/01\/cyber-security-e1436271547505.jpg","type":"","width":"","height":""}],"author":"david","twitter_card":"summary_large_image","twitter_creator":"@DavidDeMaya","twitter_site":"@DavidDeMaya","twitter_misc":{"Escrito por":"david","Tiempo de lectura":"3 minutos"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/hardsoftsecurity.es\/index.php\/2015\/07\/07\/analisis-de-vulnerabilidades-recogida-de-informacion-parte-1\/#article","isPartOf":{"@id":"https:\/\/hardsoftsecurity.es\/index.php\/2015\/07\/07\/analisis-de-vulnerabilidades-recogida-de-informacion-parte-1\/"},"author":{"name":"david","@id":"https:\/\/hardsoftsecurity.es\/#\/schema\/person\/dfe289b1e4ae2daf72695e85a8b3dd7a"},"headline":"An\u00e1lisis de vulnerabilidades, recogida de informaci\u00f3n. Parte 1.","datePublished":"2015-07-07T12:50:33+00:00","mainEntityOfPage":{"@id":"https:\/\/hardsoftsecurity.es\/index.php\/2015\/07\/07\/analisis-de-vulnerabilidades-recogida-de-informacion-parte-1\/"},"wordCount":588,"commentCount":1,"image":{"@id":"https:\/\/hardsoftsecurity.es\/index.php\/2015\/07\/07\/analisis-de-vulnerabilidades-recogida-de-informacion-parte-1\/#primaryimage"},"thumbnailUrl":"http:\/\/hardsoftsecurity.es\/wp-content\/uploads\/2015\/01\/cyber-security-e1436271547505.jpg","keywords":["metasploit","nessus","nmap","seguridad","Vulnerabilidades","windows"],"articleSection":["Seguridad inform\u00e1tica"],"inLanguage":"es","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/hardsoftsecurity.es\/index.php\/2015\/07\/07\/analisis-de-vulnerabilidades-recogida-de-informacion-parte-1\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/hardsoftsecurity.es\/index.php\/2015\/07\/07\/analisis-de-vulnerabilidades-recogida-de-informacion-parte-1\/","url":"https:\/\/hardsoftsecurity.es\/index.php\/2015\/07\/07\/analisis-de-vulnerabilidades-recogida-de-informacion-parte-1\/","name":"An\u00e1lisis de vulnerabilidades, recogida de informaci\u00f3n. Parte 1. - Hardsoft Security","isPartOf":{"@id":"https:\/\/hardsoftsecurity.es\/#website"},"primaryImageOfPage":{"@id":"https:\/\/hardsoftsecurity.es\/index.php\/2015\/07\/07\/analisis-de-vulnerabilidades-recogida-de-informacion-parte-1\/#primaryimage"},"image":{"@id":"https:\/\/hardsoftsecurity.es\/index.php\/2015\/07\/07\/analisis-de-vulnerabilidades-recogida-de-informacion-parte-1\/#primaryimage"},"thumbnailUrl":"http:\/\/hardsoftsecurity.es\/wp-content\/uploads\/2015\/01\/cyber-security-e1436271547505.jpg","datePublished":"2015-07-07T12:50:33+00:00","author":{"@id":"https:\/\/hardsoftsecurity.es\/#\/schema\/person\/dfe289b1e4ae2daf72695e85a8b3dd7a"},"breadcrumb":{"@id":"https:\/\/hardsoftsecurity.es\/index.php\/2015\/07\/07\/analisis-de-vulnerabilidades-recogida-de-informacion-parte-1\/#breadcrumb"},"inLanguage":"es","potentialAction":[{"@type":"ReadAction","target":["https:\/\/hardsoftsecurity.es\/index.php\/2015\/07\/07\/analisis-de-vulnerabilidades-recogida-de-informacion-parte-1\/"]}]},{"@type":"ImageObject","inLanguage":"es","@id":"https:\/\/hardsoftsecurity.es\/index.php\/2015\/07\/07\/analisis-de-vulnerabilidades-recogida-de-informacion-parte-1\/#primaryimage","url":"http:\/\/hardsoftsecurity.es\/wp-content\/uploads\/2015\/01\/cyber-security-e1436271547505.jpg","contentUrl":"http:\/\/hardsoftsecurity.es\/wp-content\/uploads\/2015\/01\/cyber-security-e1436271547505.jpg"},{"@type":"BreadcrumbList","@id":"https:\/\/hardsoftsecurity.es\/index.php\/2015\/07\/07\/analisis-de-vulnerabilidades-recogida-de-informacion-parte-1\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Portada","item":"https:\/\/hardsoftsecurity.es\/"},{"@type":"ListItem","position":2,"name":"An\u00e1lisis de vulnerabilidades, recogida de informaci\u00f3n. Parte 1."}]},{"@type":"WebSite","@id":"https:\/\/hardsoftsecurity.es\/#website","url":"https:\/\/hardsoftsecurity.es\/","name":"Hardsoft Security","description":"Chasing (In)Security","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/hardsoftsecurity.es\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"es"},{"@type":"Person","@id":"https:\/\/hardsoftsecurity.es\/#\/schema\/person\/dfe289b1e4ae2daf72695e85a8b3dd7a","name":"david","image":{"@type":"ImageObject","inLanguage":"es","@id":"https:\/\/secure.gravatar.com\/avatar\/868972cb4e72674a12503e080ee081285c7df2fde82787c96a74bca20781cad7?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/868972cb4e72674a12503e080ee081285c7df2fde82787c96a74bca20781cad7?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/868972cb4e72674a12503e080ee081285c7df2fde82787c96a74bca20781cad7?s=96&d=mm&r=g","caption":"david"}}]}},"jetpack_publicize_connections":[],"jetpack_sharing_enabled":true,"jetpack_shortlink":"https:\/\/wp.me\/p7xGFx-8d","jetpack-related-posts":[{"id":162,"url":"https:\/\/hardsoftsecurity.es\/index.php\/2014\/12\/02\/analisis-de-redes-y-vulnerabilidades\/","url_meta":{"origin":509,"position":0},"title":"An\u00e1lisis de redes y vulnerabilidades.","author":"david","date":"diciembre 2, 2014","format":false,"excerpt":"\u00bfEn que consiste el an\u00e1lisis de redes y vulnerabilidades? Se basa en utilizar, ciertas herramientas para localizar nodos en la red, y conocer la nomenclatura de la misma, que dispositivos la componen, y diversa informaci\u00f3n adicional depende de las herramientas que utilicemos, incluso a conocer los agujeros de seguridad que\u2026","rel":"","context":"En \u00abGu\u00edas\u00bb","block_context":{"text":"Gu\u00edas","link":"https:\/\/hardsoftsecurity.es\/index.php\/category\/guias\/"},"img":{"alt_text":"nmap-project-logo","src":"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2014\/12\/nmap-project-logo.png?resize=350%2C200","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2014\/12\/nmap-project-logo.png?resize=350%2C200 1x, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2014\/12\/nmap-project-logo.png?resize=525%2C300 1.5x"},"classes":[]},{"id":508,"url":"https:\/\/hardsoftsecurity.es\/index.php\/2015\/07\/10\/analisis-de-vulnerabilidades-explotacion-de-vulnerabilidad-parte-2\/","url_meta":{"origin":509,"position":1},"title":"An\u00e1lisis de vulnerabilidades. Explotaci\u00f3n de vulnerabilidad. Parte 2.","author":"david","date":"julio 10, 2015","format":false,"excerpt":"Tras haber recogido informaci\u00f3n con Nessus y Nmap, he seleccionado una vulnerabilidad que cubre las necesidades que tengo en mente, y es acceder al equipo atacado mediante control remoto, es decir tras explotar la vulnerabilidad conseguir un terminal para tener acceso en el servidor. Para la gente que quiera ver\u2026","rel":"","context":"En \u00abSeguridad inform\u00e1tica\u00bb","block_context":{"text":"Seguridad inform\u00e1tica","link":"https:\/\/hardsoftsecurity.es\/index.php\/category\/seguridad-informatica\/"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2015\/07\/screenshot_38.png?fit=887%2C277&ssl=1&resize=350%2C200","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2015\/07\/screenshot_38.png?fit=887%2C277&ssl=1&resize=350%2C200 1x, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2015\/07\/screenshot_38.png?fit=887%2C277&ssl=1&resize=525%2C300 1.5x, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2015\/07\/screenshot_38.png?fit=887%2C277&ssl=1&resize=700%2C400 2x"},"classes":[]},{"id":2779,"url":"https:\/\/hardsoftsecurity.es\/index.php\/2022\/10\/12\/nmap-caso-practico\/","url_meta":{"origin":509,"position":2},"title":"NMAP – Caso pr\u00e1ctico","author":"david","date":"octubre 12, 2022","format":false,"excerpt":"Buenas a tod@s, despu\u00e9s de un tiempo sin escribir nada en el blog, hoy os traigo un peque\u00f1o ejemplo pr\u00e1ctico junto a los an\u00e1lisis de dos tipos de escaneo utilizando NMAP. Este ejemplo es muy sencillo, la finalidad de este post, es analizar realmente como est\u00e1 funcionando NMAP a nivel\u2026","rel":"","context":"En \u00abGu\u00edas\u00bb","block_context":{"text":"Gu\u00edas","link":"https:\/\/hardsoftsecurity.es\/index.php\/category\/guias\/"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2014\/12\/nmap-project-logo.png?fit=1200%2C640&ssl=1&resize=350%2C200","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2014\/12\/nmap-project-logo.png?fit=1200%2C640&ssl=1&resize=350%2C200 1x, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2014\/12\/nmap-project-logo.png?fit=1200%2C640&ssl=1&resize=525%2C300 1.5x, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2014\/12\/nmap-project-logo.png?fit=1200%2C640&ssl=1&resize=700%2C400 2x, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2014\/12\/nmap-project-logo.png?fit=1200%2C640&ssl=1&resize=1050%2C600 3x"},"classes":[]},{"id":1064,"url":"https:\/\/hardsoftsecurity.es\/index.php\/2016\/10\/16\/que-es-nmap\/","url_meta":{"origin":509,"position":3},"title":"\u00bfQu\u00e9 es NMAP?","author":"david","date":"octubre 16, 2016","format":false,"excerpt":"Hoy os traigo una introducci\u00f3n a la gran herramienta que es utilizada por cualquier experto en seguridad inform\u00e1tica llamada NMAP. INTRODUCCI\u00d3N: Es una herramienta de c\u00f3digo abierto creada por Gordon Lyon en 1997, la cual \u00e9l escribi\u00f3. Actualmente el soporte de esta herramienta la lleva la comunidad creada alrededor de\u2026","rel":"","context":"En \u00abGu\u00edas\u00bb","block_context":{"text":"Gu\u00edas","link":"https:\/\/hardsoftsecurity.es\/index.php\/category\/guias\/"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2014\/12\/nmap-project-logo.png?fit=1200%2C640&ssl=1&resize=350%2C200","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2014\/12\/nmap-project-logo.png?fit=1200%2C640&ssl=1&resize=350%2C200 1x, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2014\/12\/nmap-project-logo.png?fit=1200%2C640&ssl=1&resize=525%2C300 1.5x, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2014\/12\/nmap-project-logo.png?fit=1200%2C640&ssl=1&resize=700%2C400 2x, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2014\/12\/nmap-project-logo.png?fit=1200%2C640&ssl=1&resize=1050%2C600 3x"},"classes":[]},{"id":548,"url":"https:\/\/hardsoftsecurity.es\/index.php\/2015\/07\/14\/presentale-nmap-a-tu-cunao-informatico\/","url_meta":{"origin":509,"position":4},"title":"Presentale NMAP a tu “cu\u00f1ao inform\u00e1tico”","author":"david","date":"julio 14, 2015","format":false,"excerpt":"Aqu\u00ed dejo una presentaci\u00f3n en Power Point muy b\u00e1sica sobre NMAP, para m\u00e1s informaci\u00f3n, preguntar en los comentarios que responder\u00e9 encantado. Saludos. David De Maya Merras.\u00a0@DavidDeMaya NMAP","rel":"","context":"En \u00abGu\u00edas\u00bb","block_context":{"text":"Gu\u00edas","link":"https:\/\/hardsoftsecurity.es\/index.php\/category\/guias\/"},"img":{"alt_text":"260px-Nmap-logo","src":"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2015\/02\/260px-nmap-logo.png?resize=350%2C200","width":350,"height":200},"classes":[]},{"id":3638,"url":"https:\/\/hardsoftsecurity.es\/index.php\/2024\/01\/25\/como-usar-sqlmap-guia-con-caso-practico\/","url_meta":{"origin":509,"position":5},"title":"\u00bfC\u00f3mo usar SQLMap? Gu\u00eda con caso pr\u00e1ctico.","author":"david","date":"enero 25, 2024","format":false,"excerpt":"\u00a1Hola! Hoy vamos a sumergirnos en el fascinante mundo de SQLMap, una herramienta indispensable para aquellos que se dedican a garantizar la seguridad de las bases de datos y, por supuesto, para los curiosos del pentesting. Imagina tener una navaja suiza que puede detectar y explotar vulnerabilidades en bases de\u2026","rel":"","context":"En \u00abGu\u00edas\u00bb","block_context":{"text":"Gu\u00edas","link":"https:\/\/hardsoftsecurity.es\/index.php\/category\/guias\/"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/01\/image-2.png?fit=724%2C362&ssl=1&resize=350%2C200","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/01\/image-2.png?fit=724%2C362&ssl=1&resize=350%2C200 1x, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/01\/image-2.png?fit=724%2C362&ssl=1&resize=525%2C300 1.5x, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/01\/image-2.png?fit=724%2C362&ssl=1&resize=700%2C400 2x"},"classes":[]}],"jetpack_likes_enabled":true,"jetpack_featured_media_url":"","_links":{"self":[{"href":"https:\/\/hardsoftsecurity.es\/index.php\/wp-json\/wp\/v2\/posts\/509","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/hardsoftsecurity.es\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/hardsoftsecurity.es\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/hardsoftsecurity.es\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/hardsoftsecurity.es\/index.php\/wp-json\/wp\/v2\/comments?post=509"}],"version-history":[{"count":0,"href":"https:\/\/hardsoftsecurity.es\/index.php\/wp-json\/wp\/v2\/posts\/509\/revisions"}],"wp:attachment":[{"href":"https:\/\/hardsoftsecurity.es\/index.php\/wp-json\/wp\/v2\/media?parent=509"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/hardsoftsecurity.es\/index.php\/wp-json\/wp\/v2\/categories?post=509"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/hardsoftsecurity.es\/index.php\/wp-json\/wp\/v2\/tags?post=509"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}