Kuyini i-Hack The Box? Umhlahlandlela Ophelele Wokuqonda Nokusebenzisa Ipulatifomu

Ukuphepha kwe-inthanethi kubhekene nokukhula okungakaze kubonwe ngaphambili, futhi kulo mongo, ukwazi ngamapulatifomu okufunda asebenzayo njenge-Hack The Box sekuyinto eyisisekelo kulabo abafisa ukuba yingcweti ekugqekeni ngokuziphatha noma ukuthuthuka ngobungcweti emkhakheni wezobuchwepheshe. Uma uke waba nesifiso sokwazi ngomhlaba wangempela wokuhlola ukungena, noma umane ufuna ukwazi ukuthi yiziphi izinzuzo ezinganikezwa indawo yokuhlola nokuthuthukisa amakhono akho obuchwepheshe, lesi sihloko siyisiqondiso esiphelele kakhulu ozosithola mayelana nokuthi iyini ngempela i-Hack The Box nokuthi kungani ibaluleke kangaka namuhla.

Ake sihlole yonke imininingwane: kusukela endleleni ipulatifomu esebenza ngayo, kuya ezinhlotsheni zezinselele ezinikezayo, umphakathi wayo, izinhlelo zokuqeqesha, umehluko uma uqhathaniswa nezinye izinkundla ezidumile, ngisho namathiphu abaqalayo kanye nentuthuko yochwepheshe. Kungakhathaliseki ukuthi ungumfundi, uchwepheshe, noma umane nje uthanda ukuphepha kwe-inthanethi, lapha uzothola ulwazi oluwusizo, izinzuzo, namathuba angakunikeza wona i-Hack The Box.

Kuyini i-Hack The Box?

Hack Ibhokisi Kuyipulatifomu yomhlaba wonke eku-inthanethi ezinikele ekufundeni okusebenzayo kwamasu okuphepha kwe-inthanethi, ukugenca ngokuziphatha kanye nokungena ngobungcweti ngokusebenzisa ukulingiswa kwezindawo zangempela. Akuyona nje umdlalo noma umdlalo wevidiyo, kodwa "ukungena enkundleni yokudlala" noma indawo yokuqeqesha lapho izinkulungwane zabasebenzisi abavela emhlabeni wonke zingahlola futhi zithuthukise amakhono azo okuhlasela nokuzivikela ezimweni ezilingisa izinhlelo namanethiwekhi ezinkampani zangempela.

Inhloso eyinhloko ye-Hack The Box ukuvumela ukuthi unciphise izinhlelo nezinsizakalo ngendlela esemthethweni neyokuziphatha engu-100%.Ngokungafani namalebhu okuqeqesha avamile, kwa-HTB unenkululeko yokusebenzisa amasu okuhlasela athuthukile ngaphandle kwemingcele yezomthetho, uncintisana nabanye abaduni nabafundi endaweni elawulwayo nephephile.

Kusukela namuhla, i-Hack The Box ikwenzile. Abasebenzisi abangaphezu kwezigidi ezingu-2,4, kusukela kwabaqalayo kuya kochwepheshe, amabhizinisi nasemanyuvesi abathembele kumodeli yabo ukuqeqesha ochwepheshe besikhathi esizayo nokuthuthukisa indlela abasabela ngayo ezigamekweni zangempela.

Isebenza kanjani iHack The Box? Amandla kanye nezinhloso

Indlela eyinhloko yokusebenza ihilela ukuxhuma kunethiwekhi yangaphakathi yemishini ebonakalayo esengozini. –amaseva angempela, izinsizakalo zenethiwekhi, izinhlelo zokusebenza zewebhu, izincwajana, izinhlelo ze-Linux kanye Windowsnjll. – kuklanyelwe ukuthi kubekwe engcupheni kusetshenziswa amasu abuyekeziwe okugenca kanye nokufaka ama-pentesting.

Umgomo wakho kuzoba ukuthola amalungelo omlawuli (impande noma i-SYSTEM) emshinini ngamunye ngokusebenzisa ubuthakathaka obukhona, usebenzisa konke kusukela ekusetshenzisweni nasekusebenziseni amandla amakhulu kuya ekuhlaziyweni kwekhodi, i-steganography, noma ukukhushulwa kwamalungelo.Kunezinselele zokuqala kulabo abangakaze bathinte uhlelo, kuya kuma-marathon angempela ochwepheshe abanolwazi kanye namaqembu aphelele, okuhlanganisa imincintiswano ebukhoma kanye nama-lab ochwepheshe alingisa izimo zezinkampani ezisezingeni eliphezulu.

Yonke inqubo ihlelwe ngendlela yegeyimu: Kukhona uhlelo lwamaphuzu, amazinga, amabheji, kanye nezibalo ezikhuthaza intuthuko, ukufunda ngokubambisana, kanye nokuncintisana okunempilo. Uma ubunzima kanye nokwehlukahluka kwezinselelo ozixazululayo kukhulu, kulapho ukhuphuka khona amazinga omhlaba wonke e-HTB.

Izinhlobo Zezinselele Nezindlela Ezitholakalayo

I-Hack The Box ayigcini nje ngokukhawulela ukusetshenziswa kwayo kwemishini ebonakalayo; izinselelo eziningi kanye namafomethi kungenye yamandla ayo amakhulu:

• Imishini Esengozini"Umshini" ngamunye umele indawo engokoqobo engahlaselwa. Ihlanganisa kokubili i-Linux nezinye izinhlelo. Windows ngezinsizakalo zewebhu, i-FTP, i-DNS, izizindalwazi, izinhlelo zokusebenza ezenziwe ngokwezifiso nokuningi.
• Izinselele Ezithile (“Izinselele”)Lapha uzothola izinselelo ezincane ezigxile emikhakheni ethile: i-cryptography, i-forensics, i-reverse, i-reverse engineering, i-stegano, ukuhlolwa kwe-webapp, i-binary analysis nokunye okuningi.
• AmaLabhoratri Azinikele NamabhizinisiLawa ma-laboratory aphinda ngokugcwele ingqalasizinda efana ne-Active Directory yezinkampani ezinkulu, amanethiwekhi anamadivayisi amaningi, kanye nezimo zamaqembu (i-Red Team kanye ne-Blue Team).
• Imicimbi ethi 'Capture The Flag': Imincintiswano yesikhathi sangempela ngesitayela se-CTF lapho amaqembu noma amanyuvesi ezama ukuba ngowokuqala ukuxazulula izinselele eziningi ngesikhathi esilinganiselwe.
• Isikole se-inthanethiIzifundo zemfundiso kanye nezisebenzayo ezinezifundo ezihlelekile (hhayi nje ukuxazulula izinkinga) lapho ungahlanganisa khona ulwazi ngaphambi kokubhekana nezinselele zangempela.

Izici Eziyinhloko Zokugenca Ibhokisi

Uma kukhona into eyodwa ehlukanisa i-Hack The Box ohlelweni lwezinhlelo zokuqeqesha ngokugenca, izici eziningana ezithandwa kakhulu ngabaqalayo kanye nochwepheshe:

• Ubuqiniso obuphelele ezimweni
  Imishini kanye nezindawo kulingisa ubuthakathaka, ukucushwa, kanye nezinsizakalo ezivame ukutholakala emabhizinisini, okuvumela ukuhlolwa ngamasu angasetshenziswa kamuva ekuhlolweni kwangempela.
• Ububanzi obubanzi bobunzima
  Kunezinselele ezilungiselelwe wonke amazinga, okuvumela ukufunda okuqhubekayo kanye nokunqoba kancane kancane izinselele eziya ziba nzima.
• Umphakathi osebenzayo nowamazwe ngamazwe
  Abasebenzisi bangasebenzisana, babelane ngemibhalo (izincazelo zezixazululo) uma imishini isiphelile, bashintshisane ngamathiphu, futhi bathuthuke ngokushesha njengeqembu. Lokhu kungaphezu kwezingxoxo zesikhathi sangempela kanye nezinkundla zangaphakathi.
• Ukwehlukahluka kanye nokuvuselelwa okuqhubekayo
  Kunikezwa izinselelo ezintsha isonto ngalinye, kanti ezinye ezindala ziyasuswa, okuqinisekisa ukuthi okuhlangenwe nakho okusha nokuvuselelwa njalo. Lokhu kuvimbela ukukhumbula ngekhanda futhi kukhuthaza ukufunda kwangempela.
• Amapulani enziwe ngokwezifiso zabantu ngabanye, amabhizinisi, namayunivesithi
  Kusukela ezinhlelweni zamahhala zabathandi kuya kumalebhu ochwepheshe amaqembu ezinkampani noma ukuqeqeshwa kweyunivesithi, kunezinketho ezenzelwe izidingo zomsebenzisi ngamunye.

Ubani ongazuza ku-Hack The Box?

Enye yezinzuzo ezinkulu zale pulatifomu ukuthi ayihlukanisi amazinga; ivulekele kokubili labo abangakaze bathinte i-terminal futhi abanolwazi ngochwepheshe bezokuphepha abahlaselayo.

• Abaqalayo kanye nabafundi abazifundisayo: Kuneziqondiso, izinto zokwazisa, kanye nezinselele ezilula zokukusiza ukuthi uqalise. Inqubekela phambili ihamba kancane futhi iguquguquka, ikuvumela ukuthi uthuthuke ngejubane lakho, futhi izinsiza ezengeziwe ezifana nesiteshi se-YouTube zivame ukunconywa. I-IppSec noma imibhalo yemishini ethathe umhlalaphansi.
• Abafundi baseNyuvesi: Amanyuvesi amaningi kanye nezinhlangano zabafundi (njengeGreyHat UPC) zisebenzisa le nkundla ukuze zifunde njengeqembu futhi zihlanganyele emicimbini ephakathi kwamanyuvesi njenge-CTF yangempela.
• Izinkampani nezingcweti: I-Los izinhlelo zebhizinisi Amalabhorethri azinikele ahlinzeka ngokuqeqeshwa kwamaqembu e-Blue Team kanye ne-Red Team, ngezinselelo ezenzelwe wena ukuthuthukisa kokubili ukuzivikela kanye nokusabela ekuhlaselweni kwangempela kwe-cyber.
• Othisha nabaqeqeshi: Indawo yezemfundo ye-HTB inikeza izinto zekharikhulamu kanye nezindawo ezilawulwayo ukuze kuhlinzekwe ukuqeqeshwa kwezokuphepha kwe-inthanethi kwesimanje.

Ukuqhathanisa: Hack The Box vs Zama Hack Me

Ezweni lamapulatifomu okufunda ngokugenca ngokuziphatha, umbuzo olandelayo uvame ukuvela: Hack Ibhokisi noma Zama ukungidukisaAkukho mpendulo eyodwa, ngoba nakuba benomgomo ofanayo, indlela yabo yokwenza izinto ihlukile.

I-Hack The Box ivelele ngokunikeza ulwazi olungokoqobo nolwezobuchwepheshe olusondelene nezimo zobungcweti eziyinkimbinkimbi.Izimo zayo zakhiwe ngezindinganiso eziphakeme zobunzima nokunemba, zilungele labo abafuna izixazululo eziphefumulelwe ukuhlolwa kwezinkampani zangempela kanye nokuhlolwa kokungena. Inikeza imishini ehlukahlukene, amalabhorethri ayinkimbinkimbi, kanye nezinselele zobunjiniyela obubuyela emuva eziqondiswe kochwepheshe bezokuphepha kwe-inthanethi kanye nabafundi abathuthukile.

Ngakolunye uhlangothi, i-Zama i-Hack Me igxile ekufinyelelekeni nasekufundeni okuqondisiwe kusukela ekuqaleni."Amakamelo" abo ayizindlela zokufunda zesitayela sokufundisa, ezihlelwe kakhulu ngendlela yokufundisa, zilungele labo abangakaze bazame ukugenca. Amalebhu ahlelwe kakhulu, agxile ezicini ezithile (njenge-Linux, iwebhu, i-forensics, njll.) futhi anikeza impendulo kanye nezinto eziphathelene nethiyori kanye nokuzivocavoca okusebenzayo.

Zombili izinkundla zinayo amamojula mahhala Okokuqala, inomphakathi osebenzayo kanye nezinselelo eziningi, kodwa i-Hack The Box inenzuzo uma ufuna ulwazi olukhethekile noma ukufunda okusebenzayo okuhlobene kakhulu neqiniso lebhizinisi, kuyilapho i-Try Hack Me ifaneleka uma okubaluleke kakhulu kuwe kuyisisekelo sethiyori, isibuyekezo esiqondisiwe, kanye nentuthuko eqhubekayo.

Ochwepheshe abaningi bahlanganisa zombili izindawo ukuze baqinise ubuthakathaka futhi basebenzise okungcono kakhulu kwepulatifomu ngayinye.

Izinselele, amalebhu kanye nokudlala imidlalo ku-Hack The Box

Izinselele ezitholakala ku-Hack The Box zimboza cishe wonke amagatsha okugenca kanye nokuphepha kwe-inthanethi:

• Ukuhlola izinhlelo zangempela: Kuzodingeka uthole, usebenzise, ​​futhi wandise amalungelo emishinini eminingi, njengoba nje ubungenza ezimweni zokubonisana noma zokuhlola ukungena.
• I-Ingeniería inversa: Hlukanisa ama-binary, hlaziya ikhodi (ngamathuluzi anjenge IGhidra), shintsha izinhlelo, futhi uthole ubuthakathaka ezingeni le-assembler.
• I-Crypto, i-forensics, kanye nokuhlaselwa kwewebhu: Kusukela kuma-ROM e-cryptographic, ukuhlaziywa kwamalogi, ukuhlaselwa kwezinhlelo zokusebenza zewebhu zesimanje, kuya ekususweni kwephasiwedi kanye nokuxazululwa kwamacala obugebengu ngokwezigaba.
• Izimo zebhizinisi kanye ne-Active Directory: Amalabhorethri anikezelwe eBlue Team kanye neRed Team, alingisa izindawo zezinkampani ngokuphepha okuthuthukisiwe, izinqubomgomo zenethiwekhi, ukuhlukaniswa, kanye nezinsizakalo. Windows Iseva.

Ukudlala imidlalo kuvezwa ohlelweni lwezimpumelelo, amaphuzu, kanye nezikhundla, okwengeza ingxenye eyingqayizivele yokugqugquzela.Abasebenzisi abanamaphuzu aphezulu kakhulu bayaziwa emphakathini futhi, ezimweni eziningi, bathola ngisho namathuba okuqeqeshwa noma okuqashwa ngenxa yomlando wabo ngaphakathi kwepulatifomu.