{"id":12354,"date":"2017-12-04T22:30:36","date_gmt":"2017-12-04T19:30:36","guid":{"rendered":"https:\/\/codeby.net\/?p=12354"},"modified":"2020-11-01T20:31:50","modified_gmt":"2020-11-01T17:31:50","slug":"lunar-instrument-audita-bezopasnosti-unix","status":"publish","type":"post","link":"https:\/\/codeby.net\/blogs\/lunar-instrument-audita-bezopasnosti-unix\/","title":{"rendered":"Lunar &#8212; \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u0430\u0443\u0434\u0438\u0442\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 UNIX"},"content":{"rendered":"<p><img decoding=\"async\" class=\"aligncenter\" src=\"https:\/\/codeby.net\/blogs\/wp-content\/uploads\/2017\/07\/071017_2225_1.jpg\" alt=\"\u0418\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u0430\u0443\u0434\u0438\u0442\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 UNIX: lunar\" \/><\/p>\n<h2 style=\"text-align: center;\"><span style=\"color: #ff6600;\">\u0418\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u0430\u0443\u0434\u0438\u0442\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 UNIX: lunar<\/span><\/h2>\n<h3 style=\"text-align: center;\">\u0411\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0430 \u0430\u0443\u0434\u0438\u0442\u0430 \u0438 \u043e\u0442\u0447\u0435\u0442\u043d\u043e\u0441\u0442\u0438 UNIX<\/h3>\n<p style=\"text-align: center;\"><a href=\"https:\/\/github.com\/lateralblast\/lunar\/wiki\" target=\"_blank\" rel=\"noopener noreferrer\">Wiki \u043f\u0440\u043e\u0435\u043a\u0442\u0430<\/a><\/p>\n<p style=\"text-align: center;\"><a href=\"https:\/\/github.com\/lateralblast\/lunar\" target=\"_blank\" rel=\"noopener noreferrer\">\u0421\u043a\u0430\u0447\u0430\u0442\u044c Lunar<\/a><\/p>\n<p style=\"text-align: justify;\">\u042d\u0442\u0438 \u0441\u043a\u0440\u0438\u043f\u0442\u044b \u0433\u0435\u043d\u0435\u0440\u0438\u0440\u0443\u044e\u0442 \u0437\u0430\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435 \u0430\u0443\u0434\u0438\u0442\u043e\u0440\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0445\u043e\u0441\u0442\u0430 <a href=\"https:\/\/codeby.net\/blogs\/kak-izmenit-ssh-port-na-linux-ili-unix-servere\/\" target=\"_blank\" rel=\"noopener noreferrer\">Unix<\/a>. \u041e\u043d \u043e\u0441\u043d\u043e\u0432\u0430\u043d \u043d\u0430 CIS \u0438 \u0434\u0440\u0443\u0433\u0438\u0445 <a href=\"https:\/\/codeby.net\/threads\/osnovnye-komponenty-net-framework-clr-i-framework-class-library.65650\/\" target=\"_blank\" rel=\"noopener noreferrer\">\u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0430\u0445<\/a>.<\/p>\n<p style=\"text-align: justify;\"><strong>\u041f\u043e\u0447\u0435\u043c\u0443 \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u0439 \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0438?<\/strong> \u041c\u043d\u0435 \u043d\u0443\u0436\u0435\u043d \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043c\u043e\u0433 \u0431\u044b \u0440\u0430\u0431\u043e\u0442\u0430\u0442\u044c \u043d\u0430 \u0437\u0430\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445, \u0433\u0434\u0435 \u0434\u0440\u0443\u0433\u0438\u0435 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u044b \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u043d\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b. \u041c\u043d\u0435 \u0442\u0430\u043a\u0436\u0435 \u043d\u0443\u0436\u0435\u043d \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u043b\u0441\u044f \u0431\u044b \u0432\u043e \u0432\u0441\u0435\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 UNIX. \u0421\u043a\u0430\u0437\u0430\u0432, \u0447\u0442\u043e \u0435\u0441\u0442\u044c \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0440\u0430\u0437\u043b\u0438\u0447\u0438\u044f \u043c\u0435\u0436\u0434\u0443 sh \u0438 bash, \u0438 \u0438\u043c\u0435\u043d\u043d\u043e \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b \u0444\u0443\u043d\u043a\u0446\u0438\u0438 \u0442\u043e\u043b\u044c\u043a\u043e \u0438\u0437 sh.<\/p>\n<p style=\"text-align: justify;\">\u041e\u043d \u0442\u0430\u043a\u0436\u0435 \u043c\u043e\u0436\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0443. \u0412 \u043e\u0442\u043b\u0438\u0447\u0438\u0435 \u043e\u0442 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u043a\u0440\u0438\u043f\u0442\u043e\u0432 \u044f \u0434\u043e\u0431\u0430\u0432\u0438\u043b \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u043e\u0442\u0441\u0442\u0443\u043f\u043b\u0435\u043d\u0438\u0439. \u0424\u0430\u0439\u043b\u044b \u0440\u0435\u0437\u0435\u0440\u0432\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e cpio \u0432 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0430\u043d\u0438\u0438 \u0434\u0430\u0442\u044b (\u0441\u043c. \u041f\u0440\u0438\u043c\u0435\u0440\u044b \u043d\u0438\u0436\u0435).<\/p>\n<p style=\"text-align: justify;\"><strong>\u041f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u043c\u044b\u0435 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b:<\/strong><\/p>\n<ul style=\"text-align: justify;\">\n<li>Linux\n<ul>\n<li>Red Hat<\/li>\n<li>Centos<\/li>\n<li>Scientific Linux<\/li>\n<li>SLES<\/li>\n<li>Debian<\/li>\n<li>Ubuntu<\/li>\n<\/ul>\n<\/li>\n<li>Solaris (6,7,8,9,10 \u0438 11)<\/li>\n<li>Mac OS X<\/li>\n<li>FreeBSD (\u0442\u0440\u0435\u0431\u0443\u0435\u0442 \u0431\u043e\u043b\u0435\u0435 \u0434\u0435\u0442\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f)<\/li>\n<li>AIX (\u0442\u0440\u0435\u0431\u0443\u0435\u0442 \u0431\u043e\u043b\u0435\u0435 \u0434\u0435\u0442\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f)<\/li>\n<li>ESXi (\u0438\u0441\u0445\u043e\u0434\u043d\u0430\u044f \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 \u2013 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0442\u0435\u0441\u0442\u044b)<\/li>\n<\/ul>\n<p><strong>\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435<\/strong><\/p>\n<pre class=\"lang:default decode:true \">lunar [-a|c|l|h|V] [-u]\n\n-a: Run in audit mode (no changes made to system)\n-A: Run in audit mode (no changes made to system)\n    [includes filesystem checks which take some time]\n-s: Run in selective mode (only run tests you want to)\n-S: List functions available to selective mode\n-l: Run in lockdown mode (changes made to system)\n-L: Run in lockdown mode (changes made to system)\n    [includes filesystem checks which take some time]\n-d: Show changes previously made to system\n-p: Show previousl versions of file\n-u: Undo lockdown (changes made to system)\n-h: Display usage\n-V: Display version\n-v: Verbose mode [used with -a and -A]\n    [Provides more information about the audit taking place]<\/pre>\n<h3>\u041f\u0440\u0438\u043c\u0435\u0440\u044b<\/h3>\n<p>\u0417\u0430\u043f\u0443\u0441\u043a \u0432 \u0440\u0435\u0436\u0438\u043c\u0435 \u0430\u0443\u0434\u0438\u0442\u0430:<\/p>\n<pre class=\"lang:default decode:true \">.\/lunar.sh -a<\/pre>\n<p>\u0417\u0430\u043f\u0443\u0441\u043a \u0432 \u0440\u0435\u0436\u0438\u043c\u0435 \u0430\u0443\u0434\u0438\u0442\u0430 \u0438 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u043e\u043b\u044c\u0448\u0435\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438:<\/p>\n<pre class=\"lang:default decode:true \">.\/lunar.sh -a -v<\/pre>\n<p>\u041e\u0442\u043e\u0431\u0440\u0430\u0436\u0435\u043d\u0438\u0435 \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0438\u0445 \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u044b\u0445 \u043a\u043e\u043f\u0438\u0439:<\/p>\n<pre class=\"lang:default decode:true\">.\/lunar.sh -b\nPrevious backups:\n21_12_2012_19_45_05 21_12_2012_20_35_54 21_12_2012_21_57_25<\/pre>\n<p>\u0412\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0438\u0437 \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0438\u0445 \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u044b\u0445 \u043a\u043e\u043f\u0438\u0439:<\/p>\n<pre class=\"lang:default decode:true \">.\/lunar.sh -u 21_12_2012_19_45_05<\/pre>\n<p>\u041f\u0435\u0440\u0435\u0447\u0438\u0441\u043b\u0438\u0442\u044c \u0442\u0435\u0441\u0442\u044b:<\/p>\n<pre class=\"lang:default decode:true \">.\/lunar.sh -S<\/pre>\n<p>\u0412\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u0442\u043e\u043b\u044c\u043a\u043e \u0442\u0435\u0441\u0442\u044b \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0438:<\/p>\n<pre class=\"lang:default decode:true \">.\/lunar.sh -s audit_shell_services<\/pre>\n<p style=\"text-align: right;\">\u041f\u0435\u0440\u0435\u0432\u043e\u0434: <a href=\"https:\/\/codeby.net\/members\/annadavydova.66672\/\" target=\"_blank\" rel=\"noopener noreferrer\">\u0410\u043d\u043d\u0430 \u0414\u0430\u0432\u044b\u0434\u043e\u0432\u0430<\/a><br \/>\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: <a href=\"https:\/\/n0where.net\/unix-security-auditing-tool-lunar\" target=\"_blank\" rel=\"noopener noreferrer\">n0where.net<\/a><\/p>\n<p><strong>\u042d\u0442\u043e \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u043e:<\/strong><\/p>\n<ul style=\"text-align: justify; margin-left: 20px;\">\n<li><a href=\"https:\/\/codeby.net\/threads\/kak-popast-v-darknet-polnoe-rukovodstvo.65278\/\" target=\"_blank\" rel=\"noopener noreferrer\">\u041a\u0430\u043a \u043f\u043e\u043f\u0430\u0441\u0442\u044c \u0432 Darknet? \u041f\u043e\u043b\u043d\u043e\u0435 \u0420\u0443\u043a\u043e\u0432\u043e\u0434\u0441\u0442\u0432\u043e !<\/a><\/li>\n<li><a href=\"https:\/\/codeby.net\/threads\/luchshie-xakerskie-programmy-instrumenty-dlja-pentesta.66866\/\" target=\"_blank\" rel=\"noopener noreferrer\">\u041b\u0443\u0447\u0448\u0438\u0435 \u0445\u0430\u043a\u0435\u0440\u0441\u043a\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b<\/a><\/li>\n<li><a href=\"https:\/\/codeby.net\/threads\/kak-vzlomat-wi-fi-s-telefona.66384\/\" target=\"_blank\" rel=\"noopener noreferrer\">\u041a\u0430\u043a \u0432\u0437\u043b\u043e\u043c\u0430\u0442\u044c wi fi \u0441 \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u0430<\/a><\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"<p>\u0418\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u0430\u0443\u0434\u0438\u0442\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 UNIX: lunar \u0411\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0430 \u0430\u0443\u0434\u0438\u0442\u0430 \u0438 \u043e\u0442\u0447\u0435\u0442\u043d\u043e\u0441\u0442\u0438 UNIX Wiki \u043f\u0440\u043e\u0435\u043a\u0442\u0430 \u0421\u043a\u0430\u0447\u0430\u0442\u044c Lunar \u042d\u0442\u0438 \u0441\u043a\u0440\u0438\u043f\u0442\u044b \u0433\u0435\u043d\u0435\u0440\u0438\u0440\u0443\u044e\u0442 \u0437\u0430\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435 \u0430\u0443\u0434\u0438\u0442\u043e\u0440\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0445\u043e\u0441\u0442\u0430 Unix. \u041e\u043d \u043e\u0441\u043d\u043e\u0432\u0430\u043d \u043d\u0430 CIS \u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0430\u0445. \u041f\u043e\u0447\u0435\u043c\u0443 \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u0439 \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0438? \u041c\u043d\u0435 \u043d\u0443\u0436\u0435\u043d \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043c\u043e\u0433 \u0431\u044b \u0440\u0430\u0431\u043e\u0442\u0430\u0442\u044c \u043d\u0430 \u0437\u0430\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445, \u0433\u0434\u0435 \u0434\u0440\u0443\u0433\u0438\u0435 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u044b \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u043d\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b. \u041c\u043d\u0435 \u0442\u0430\u043a\u0436\u0435 \u043d\u0443\u0436\u0435\u043d \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u043b\u0441\u044f \u0431\u044b &#8230; <a title=\"Lunar &#8212; \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u0430\u0443\u0434\u0438\u0442\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 UNIX\" class=\"read-more\" href=\"https:\/\/codeby.net\/blogs\/lunar-instrument-audita-bezopasnosti-unix\/\" aria-label=\"\u041f\u0440\u043e\u0447\u0438\u0442\u0430\u0442\u044c \u0431\u043e\u043b\u044c\u0448\u0435 \u043e Lunar &#8212; \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u0430\u0443\u0434\u0438\u0442\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 UNIX\">\u0427\u0438\u0442\u0430\u0442\u044c \u0434\u0430\u043b\u0435\u0435<\/a><\/p>\n","protected":false},"author":66057,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1764],"tags":[1763,574,595],"class_list":["post-12354","post","type-post","status-publish","format-standard","hentry","category-audit-bezopasnosti","tag-lunar","tag-skanery-ujazvimostej","tag-testirovanie-na-proniknovenie"],"_links":{"self":[{"href":"https:\/\/codeby.net\/blogs\/wp-json\/wp\/v2\/posts\/12354","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/codeby.net\/blogs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/codeby.net\/blogs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/codeby.net\/blogs\/wp-json\/wp\/v2\/users\/66057"}],"replies":[{"embeddable":true,"href":"https:\/\/codeby.net\/blogs\/wp-json\/wp\/v2\/comments?post=12354"}],"version-history":[{"count":0,"href":"https:\/\/codeby.net\/blogs\/wp-json\/wp\/v2\/posts\/12354\/revisions"}],"wp:attachment":[{"href":"https:\/\/codeby.net\/blogs\/wp-json\/wp\/v2\/media?parent=12354"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/codeby.net\/blogs\/wp-json\/wp\/v2\/categories?post=12354"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/codeby.net\/blogs\/wp-json\/wp\/v2\/tags?post=12354"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}