{"id":477801,"date":"2023-08-09T09:20:26","date_gmt":"2023-08-09T09:20:26","guid":{"rendered":""},"modified":"2023-09-05T11:15:27","modified_gmt":"2023-09-05T11:15:27","slug":"lateral-movement","status":"publish","type":"wiki","link":"https:\/\/oneproxy.pro\/vn\/wiki\/lateral-movement\/","title":{"rendered":"Chuy\u1ec3n \u0111\u1ed9ng b\u00ean"},"content":{"rendered":"

Chuy\u1ec3n \u0111\u1ed9ng ngang \u0111\u1ec1 c\u1eadp \u0111\u1ebfn k\u1ef9 thu\u1eadt \u0111\u01b0\u1ee3c nh\u1eefng k\u1ebb t\u1ea5n c\u00f4ng m\u1ea1ng s\u1eed d\u1ee5ng \u0111\u1ec3 ph\u00e1t t\u00e1n v\u00e0 xoay tr\u1ee5c qua m\u1ea1ng sau khi c\u00f3 \u0111\u01b0\u1ee3c quy\u1ec1n truy c\u1eadp ban \u0111\u1ea7u. N\u00f3 cho ph\u00e9p c\u00e1c t\u00e1c nh\u00e2n \u0111e d\u1ecda di chuy\u1ec3n theo chi\u1ec1u ngang tr\u00ean c\u01a1 s\u1edf h\u1ea1 t\u1ea7ng c\u1ee7a t\u1ed5 ch\u1ee9c, kh\u00e1m ph\u00e1 v\u00e0 khai th\u00e1c c\u00e1c h\u1ec7 th\u1ed1ng kh\u00e1c nhau m\u00e0 kh\u00f4ng g\u00e2y nghi ng\u1edd ngay l\u1eadp t\u1ee9c. Ph\u01b0\u01a1ng ph\u00e1p n\u00e0y \u0111\u1eb7c bi\u1ec7t \u0111\u00e1ng lo ng\u1ea1i \u0111\u1ed1i v\u1edbi c\u00e1c doanh nghi\u1ec7p v\u00ec vi\u1ec7c di chuy\u1ec3n ngang c\u00f3 th\u1ec3 d\u1eabn \u0111\u1ebfn vi ph\u1ea1m d\u1eef li\u1ec7u, truy c\u1eadp tr\u00e1i ph\u00e9p v\u00e0 x\u00e2m ph\u1ea1m b\u1ea3o m\u1eadt nghi\u00eam tr\u1ecdng.<\/p>\n

L\u1ecbch s\u1eed v\u1ec1 ngu\u1ed3n g\u1ed1c c\u1ee7a phong tr\u00e0o B\u00ean v\u00e0 l\u1ea7n \u0111\u1ea7u ti\u00ean \u0111\u1ec1 c\u1eadp \u0111\u1ebfn n\u00f3<\/h2>\n

Kh\u00e1i ni\u1ec7m chuy\u1ec3n \u0111\u1ed9ng ngang xu\u1ea5t hi\u1ec7n c\u00f9ng v\u1edbi s\u1ef1 ph\u00e1t tri\u1ec3n c\u1ee7a h\u1ec7 th\u1ed1ng m\u00e1y t\u00ednh n\u1ed1i m\u1ea1ng v\u00e0o cu\u1ed1i th\u1ebf k\u1ef7 20. Khi c\u00e1c t\u1ed5 ch\u1ee9c b\u1eaft \u0111\u1ea7u k\u1ebft n\u1ed1i nhi\u1ec1u m\u00e1y t\u00ednh trong m\u1ea1ng n\u1ed9i b\u1ed9 c\u1ee7a h\u1ecd, tin t\u1eb7c \u0111\u00e3 t\u00ecm m\u1ecdi c\u00e1ch \u0111\u1ec3 v\u01b0\u1ee3t qua c\u00e1c h\u1ec7 th\u1ed1ng \u0111\u01b0\u1ee3c k\u1ebft n\u1ed1i n\u00e0y \u0111\u1ec3 truy c\u1eadp d\u1eef li\u1ec7u c\u00f3 gi\u00e1 tr\u1ecb ho\u1eb7c g\u00e2y h\u1ea1i. Thu\u1eadt ng\u1eef \u201cchuy\u1ec3n \u0111\u1ed9ng ngang\u201d \u0111\u00e3 tr\u1edf n\u00ean n\u1ed5i b\u1eadt trong l\u0129nh v\u1ef1c an ninh m\u1ea1ng v\u00e0o \u0111\u1ea7u nh\u1eefng n\u0103m 2000 khi nh\u1eefng ng\u01b0\u1eddi b\u1ea3o v\u1ec7 quan s\u00e1t th\u1ea5y nh\u1eefng k\u1ebb t\u1ea5n c\u00f4ng \u0111ang di chuy\u1ec3n qua c\u00e1c m\u1ea1ng b\u1eb1ng nhi\u1ec1u k\u1ef9 thu\u1eadt kh\u00e1c nhau.<\/p>\n

Th\u00f4ng tin chi ti\u1ebft v\u1ec1 chuy\u1ec3n \u0111\u1ed9ng b\u00ean. M\u1edf r\u1ed9ng ch\u1ee7 \u0111\u1ec1 Chuy\u1ec3n \u0111\u1ed9ng b\u00ean<\/h2>\n

Chuy\u1ec3n \u0111\u1ed9ng ngang l\u00e0 m\u1ed9t giai \u0111o\u1ea1n quan tr\u1ecdng c\u1ee7a chu\u1ed7i ti\u00eau di\u1ec7t m\u1ea1ng, m\u1ed9t m\u00f4 h\u00ecnh minh h\u1ecda c\u00e1c giai \u0111o\u1ea1n kh\u00e1c nhau c\u1ee7a m\u1ed9t cu\u1ed9c t\u1ea5n c\u00f4ng m\u1ea1ng. Sau khi \u0111\u00e3 thi\u1ebft l\u1eadp \u0111\u01b0\u1ee3c ch\u1ed7 \u0111\u1ee9ng ban \u0111\u1ea7u, th\u00f4ng qua k\u1ef9 thu\u1eadt x\u00e3 h\u1ed9i, khai th\u00e1c l\u1ed7 h\u1ed5ng ph\u1ea7n m\u1ec1m ho\u1eb7c c\u00e1c ph\u01b0\u01a1ng ti\u1ec7n kh\u00e1c, k\u1ebb t\u1ea5n c\u00f4ng nh\u1eb1m m\u1ee5c \u0111\u00edch di chuy\u1ec3n theo chi\u1ec1u ngang \u0111\u1ec3 c\u00f3 \u0111\u01b0\u1ee3c quy\u1ec1n truy c\u1eadp v\u00e0 ki\u1ec3m so\u00e1t m\u1ea1ng \u0111\u00e1ng k\u1ec3 h\u01a1n.<\/p>\n

Trong qu\u00e1 tr\u00ecnh di chuy\u1ec3n ngang, nh\u1eefng k\u1ebb t\u1ea5n c\u00f4ng th\u01b0\u1eddng th\u1ef1c hi\u1ec7n trinh s\u00e1t \u0111\u1ec3 x\u00e1c \u0111\u1ecbnh c\u00e1c m\u1ee5c ti\u00eau c\u00f3 gi\u00e1 tr\u1ecb cao, n\u00e2ng cao \u0111\u1eb7c quy\u1ec1n v\u00e0 ph\u00e1t t\u00e1n ph\u1ea7n m\u1ec1m \u0111\u1ed9c h\u1ea1i ho\u1eb7c c\u00f4ng c\u1ee5 tr\u00ean m\u1ea1ng. H\u1ecd c\u00f3 th\u1ec3 s\u1eed d\u1ee5ng th\u00f4ng tin \u0111\u0103ng nh\u1eadp b\u1ecb x\u00e2m ph\u1ea1m, t\u1ea5n c\u00f4ng b\u1eb1ng h\u00e0m b\u0103m, th\u1ef1c thi m\u00e3 t\u1eeb xa ho\u1eb7c c\u00e1c k\u1ef9 thu\u1eadt ph\u1ee9c t\u1ea1p kh\u00e1c \u0111\u1ec3 m\u1edf r\u1ed9ng \u1ea3nh h\u01b0\u1edfng c\u1ee7a h\u1ecd trong t\u1ed5 ch\u1ee9c.<\/p>\n

C\u1ea5u tr\u00fac b\u00ean trong c\u1ee7a phong tr\u00e0o b\u00ean. Chuy\u1ec3n \u0111\u1ed9ng b\u00ean ho\u1ea1t \u0111\u1ed9ng nh\u01b0 th\u1ebf n\u00e0o<\/h2>\n

C\u00e1c k\u1ef9 thu\u1eadt di chuy\u1ec3n ngang c\u00f3 th\u1ec3 kh\u00e1c nhau t\u00f9y thu\u1ed9c v\u00e0o c\u1ea5p \u0111\u1ed9 k\u1ef9 n\u0103ng c\u1ee7a k\u1ebb t\u1ea5n c\u00f4ng, t\u00ecnh h\u00ecnh b\u1ea3o m\u1eadt c\u1ee7a t\u1ed5 ch\u1ee9c v\u00e0 c\u00e1c c\u00f4ng c\u1ee5 c\u00f3 s\u1eb5n. Tuy nhi\u00ean, m\u1ed9t s\u1ed1 chi\u1ebfn l\u01b0\u1ee3c ph\u1ed5 bi\u1ebfn bao g\u1ed3m:<\/p>\n

    \n
  1. \n

    T\u1ea5n c\u00f4ng Pass-the-Hash (PtH)<\/strong>: K\u1ebb t\u1ea5n c\u00f4ng tr\u00edch xu\u1ea5t m\u1eadt kh\u1ea9u b\u0103m t\u1eeb m\u1ed9t h\u1ec7 th\u1ed1ng b\u1ecb x\u00e2m nh\u1eadp v\u00e0 s\u1eed d\u1ee5ng ch\u00fang \u0111\u1ec3 x\u00e1c th\u1ef1c tr\u00ean c\u00e1c h\u1ec7 th\u1ed1ng kh\u00e1c m\u00e0 kh\u00f4ng c\u1ea7n bi\u1ebft m\u1eadt kh\u1ea9u g\u1ed1c.<\/p>\n<\/li>\n

  2. \n

    Th\u1ef1c thi m\u00e3 t\u1eeb xa (RCE)<\/strong>: Khai th\u00e1c l\u1ed7 h\u1ed5ng trong \u1ee9ng d\u1ee5ng ho\u1eb7c d\u1ecbch v\u1ee5 \u0111\u1ec3 th\u1ef1c thi m\u00e3 t\u00f9y \u00fd tr\u00ean h\u1ec7 th\u1ed1ng t\u1eeb xa, c\u1ea5p quy\u1ec1n truy c\u1eadp tr\u00e1i ph\u00e9p.<\/p>\n<\/li>\n

  3. \n

    T\u1ea5n c\u00f4ng v\u0169 phu<\/strong>: Li\u00ean t\u1ee5c c\u1ed1 g\u1eafng k\u1ebft h\u1ee3p t\u00ean ng\u01b0\u1eddi d\u00f9ng v\u00e0 m\u1eadt kh\u1ea9u kh\u00e1c nhau \u0111\u1ec3 c\u00f3 quy\u1ec1n truy c\u1eadp tr\u00e1i ph\u00e9p v\u00e0o h\u1ec7 th\u1ed1ng.<\/p>\n<\/li>\n

  4. \n

    Khai th\u00e1c m\u1ed1i quan h\u1ec7 tin c\u1eady<\/strong>: Khai th\u00e1c ni\u1ec1m tin \u0111\u01b0\u1ee3c thi\u1ebft l\u1eadp gi\u1eefa c\u00e1c h\u1ec7 th\u1ed1ng ho\u1eb7c mi\u1ec1n \u0111\u1ec3 di chuy\u1ec3n ngang qua m\u1ea1ng.<\/p>\n<\/li>\n

  5. \n

    Xoay v\u00f2ng qua Trojan truy c\u1eadp t\u1eeb xa (RAT)<\/strong>: S\u1eed d\u1ee5ng c\u00e1c c\u00f4ng c\u1ee5 truy c\u1eadp t\u1eeb xa \u0111\u1ec3 ki\u1ec3m so\u00e1t c\u00e1c h\u1ec7 th\u1ed1ng b\u1ecb x\u00e2m nh\u1eadp v\u00e0 s\u1eed d\u1ee5ng ch\u00fang l\u00e0m b\u01b0\u1edbc \u0111\u1ec7m \u0111\u1ec3 truy c\u1eadp c\u00e1c ph\u1ea7n kh\u00e1c c\u1ee7a m\u1ea1ng.<\/p>\n<\/li>\n

  6. \n

    Khai th\u00e1c c\u1ea5u h\u00ecnh sai<\/strong>: L\u1ee3i d\u1ee5ng c\u00e1c h\u1ec7 th\u1ed1ng ho\u1eb7c d\u1ecbch v\u1ee5 \u0111\u01b0\u1ee3c \u0111\u1ecbnh c\u1ea5u h\u00ecnh sai \u0111\u1ec3 c\u00f3 \u0111\u01b0\u1ee3c quy\u1ec1n truy c\u1eadp tr\u00e1i ph\u00e9p.<\/p>\n<\/li>\n<\/ol>\n

    Ph\u00e2n t\u00edch c\u00e1c t\u00ednh n\u0103ng ch\u00ednh c\u1ee7a chuy\u1ec3n \u0111\u1ed9ng b\u00ean<\/h2>\n

    Chuy\u1ec3n \u0111\u1ed9ng ngang s\u1edf h\u1eefu m\u1ed9t s\u1ed1 \u0111\u1eb7c \u0111i\u1ec3m ch\u00ednh khi\u1ebfn n\u00f3 tr\u1edf th\u00e0nh m\u1ed1i \u0111e d\u1ecda \u0111\u1ea7y th\u00e1ch th\u1ee9c khi chi\u1ebfn \u0111\u1ea5u:<\/p>\n

      \n
    1. \n

      T\u00e0ng h\u00ecnh v\u00e0 ki\u00ean tr\u00ec<\/strong>: Nh\u1eefng k\u1ebb t\u1ea5n c\u00f4ng s\u1eed d\u1ee5ng c\u00e1c k\u1ef9 thu\u1eadt ph\u1ee9c t\u1ea1p \u0111\u1ec3 kh\u00f4ng b\u1ecb ph\u00e1t hi\u1ec7n v\u00e0 duy tr\u00ec quy\u1ec1n truy c\u1eadp v\u00e0o m\u1ea1ng trong th\u1eddi gian d\u00e0i.<\/p>\n<\/li>\n

    2. \n

      T\u1ed1c \u0111\u1ed9 v\u00e0 T\u1ef1 \u0111\u1ed9ng h\u00f3a<\/strong>: C\u00e1c c\u00f4ng c\u1ee5 t\u1ef1 \u0111\u1ed9ng cho ph\u00e9p k\u1ebb t\u1ea5n c\u00f4ng di chuy\u1ec3n nhanh ch\u00f3ng qua m\u1ea1ng, gi\u1ea3m thi\u1ec3u th\u1eddi gian gi\u1eefa l\u1ea7n x\u00e2m nh\u1eadp ban \u0111\u1ea7u v\u00e0 ti\u1ebfp c\u1eadn t\u00e0i s\u1ea3n c\u00f3 gi\u00e1 tr\u1ecb cao.<\/p>\n<\/li>\n

    3. \n

      S\u1ef1 ti\u1ebfn h\u00f3a v\u00e0 th\u00edch \u1ee9ng<\/strong>: C\u00e1c k\u1ef9 thu\u1eadt chuy\u1ec3n \u0111\u1ed9ng ngang kh\u00f4ng ng\u1eebng ph\u00e1t tri\u1ec3n \u0111\u1ec3 v\u01b0\u1ee3t qua c\u00e1c bi\u1ec7n ph\u00e1p b\u1ea3o m\u1eadt v\u00e0 th\u00edch \u1ee9ng v\u1edbi m\u00f4i tr\u01b0\u1eddng m\u1ea1ng thay \u0111\u1ed5i.<\/p>\n<\/li>\n

    4. \n

      \u0110\u1ed9 ph\u1ee9c t\u1ea1p<\/strong>: Nh\u1eefng k\u1ebb t\u1ea5n c\u00f4ng th\u01b0\u1eddng s\u1eed d\u1ee5ng k\u1ebft h\u1ee3p nhi\u1ec1u k\u1ef9 thu\u1eadt \u0111\u1ec3 v\u01b0\u1ee3t qua m\u1ea1ng, khi\u1ebfn nh\u1eefng k\u1ebb ph\u00f2ng th\u1ee7 kh\u00f3 ph\u00e1t hi\u1ec7n v\u00e0 ng\u0103n ch\u1eb7n chuy\u1ec3n \u0111\u1ed9ng ngang h\u01a1n.<\/p>\n<\/li>\n<\/ol>\n

      C\u00e1c lo\u1ea1i chuy\u1ec3n \u0111\u1ed9ng b\u00ean<\/h2>\n

      Chuy\u1ec3n \u0111\u1ed9ng ngang c\u00f3 th\u1ec3 c\u00f3 nhi\u1ec1u h\u00ecnh th\u1ee9c kh\u00e1c nhau, t\u00f9y thu\u1ed9c v\u00e0o m\u1ee5c ti\u00eau c\u1ee7a k\u1ebb t\u1ea5n c\u00f4ng v\u00e0 ki\u1ebfn tr\u00fac c\u1ee7a m\u1ea1ng. M\u1ed9t s\u1ed1 lo\u1ea1i chuy\u1ec3n \u0111\u1ed9ng b\u00ean ph\u1ed5 bi\u1ebfn bao g\u1ed3m:<\/p>\n\n\n\n\n\n\n\n\n\n
      Ki\u1ec3u<\/th>\nS\u1ef1 mi\u00eau t\u1ea3<\/th>\n<\/tr>\n<\/thead>\n
      Truy\u1ec1n Hash (PtH)<\/td>\nS\u1eed d\u1ee5ng th\u00f4ng tin x\u00e1c th\u1ef1c \u0111\u01b0\u1ee3c b\u0103m \u0111\u1ec3 x\u00e1c th\u1ef1c tr\u00ean c\u00e1c h\u1ec7 th\u1ed1ng kh\u00e1c.<\/td>\n<\/tr>\n
      Th\u1ef1c thi m\u00e3 t\u1eeb xa<\/td>\nKhai th\u00e1c l\u1ed7 h\u1ed5ng \u0111\u1ec3 th\u1ef1c thi m\u00e3 t\u1eeb xa.<\/td>\n<\/tr>\n
      Chuy\u1ec3n \u0111\u1ed9ng b\u00ean d\u1ef1a tr\u00ean WMI<\/td>\nT\u1eadn d\u1ee5ng C\u00f4ng c\u1ee5 qu\u1ea3n l\u00fd Windows \u0111\u1ec3 di chuy\u1ec3n theo chi\u1ec1u ngang.<\/td>\n<\/tr>\n
      Kerberoasting<\/td>\nTr\u00edch xu\u1ea5t th\u00f4ng tin x\u00e1c th\u1ef1c t\u00e0i kho\u1ea3n d\u1ecbch v\u1ee5 t\u1eeb Active Directory.<\/td>\n<\/tr>\n
      Phong tr\u00e0o b\u00ean SMB<\/td>\nS\u1eed d\u1ee5ng giao th\u1ee9c Kh\u1ed1i tin nh\u1eafn m\u00e1y ch\u1ee7 \u0111\u1ec3 di chuy\u1ec3n ngang.<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

      C\u00e1ch s\u1eed d\u1ee5ng Chuy\u1ec3n \u0111\u1ed9ng b\u00ean, c\u00e1c v\u1ea5n \u0111\u1ec1 v\u00e0 gi\u1ea3i ph\u00e1p li\u00ean quan \u0111\u1ebfn vi\u1ec7c s\u1eed d\u1ee5ng<\/h2>\n

      S\u1eed d\u1ee5ng chuy\u1ec3n \u0111\u1ed9ng b\u00ean:<\/h3>\n
        \n
      1. \n

        B\u00e0i t\u1eadp c\u1ee7a \u0111\u1ed9i \u0111\u1ecf<\/strong>: C\u00e1c chuy\u00ean gia b\u1ea3o m\u1eadt s\u1eed d\u1ee5ng c\u00e1c k\u1ef9 thu\u1eadt di chuy\u1ec3n ngang \u0111\u1ec3 m\u00f4 ph\u1ecfng c\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng m\u1ea1ng trong th\u1ebf gi\u1edbi th\u1ef1c v\u00e0 \u0111\u00e1nh gi\u00e1 t\u00ecnh h\u00ecnh b\u1ea3o m\u1eadt c\u1ee7a t\u1ed5 ch\u1ee9c.<\/p>\n<\/li>\n

      2. \n

        \u0110\u00e1nh gi\u00e1 an ninh<\/strong>: C\u00e1c t\u1ed5 ch\u1ee9c s\u1eed d\u1ee5ng \u0111\u00e1nh gi\u00e1 chuy\u1ec3n \u0111\u1ed9ng ngang \u0111\u1ec3 x\u00e1c \u0111\u1ecbnh v\u00e0 kh\u1eafc ph\u1ee5c c\u00e1c l\u1ed7 h\u1ed5ng trong m\u1ea1ng c\u1ee7a h\u1ecd.<\/p>\n<\/li>\n<\/ol>\n

        V\u1ea5n \u0111\u1ec1 v\u00e0 gi\u1ea3i ph\u00e1p:<\/h3>\n
          \n
        1. \n

          Ph\u00e2n \u0111o\u1ea1n m\u1ea1ng kh\u00f4ng \u0111\u1ee7<\/strong>: C\u00e1c m\u1ea1ng ph\u00e2n chia h\u1ee3p l\u00fd c\u00f3 th\u1ec3 h\u1ea1n ch\u1ebf t\u00e1c \u0111\u1ed9ng ti\u1ec1m \u1ea9n c\u1ee7a chuy\u1ec3n \u0111\u1ed9ng ngang b\u1eb1ng c\u00e1ch ng\u0103n ch\u1eb7n k\u1ebb t\u1ea5n c\u00f4ng trong c\u00e1c khu v\u1ef1c c\u1ee5 th\u1ec3.<\/p>\n<\/li>\n

        2. \n

          L\u1ed7 h\u1ed5ng leo thang \u0111\u1eb7c quy\u1ec1n<\/strong>: Th\u01b0\u1eddng xuy\u00ean xem x\u00e9t v\u00e0 qu\u1ea3n l\u00fd c\u00e1c \u0111\u1eb7c quy\u1ec1n c\u1ee7a ng\u01b0\u1eddi d\u00f9ng \u0111\u1ec3 ng\u0103n ch\u1eb7n vi\u1ec7c leo thang tr\u00e1i ph\u00e9p.<\/p>\n<\/li>\n

        3. \n

          Ki\u1ec3m so\u00e1t truy c\u1eadp kh\u00f4ng \u0111\u1ea7y \u0111\u1ee7<\/strong>: Tri\u1ec3n khai c\u00e1c bi\u1ec7n ph\u00e1p ki\u1ec3m so\u00e1t truy c\u1eadp m\u1ea1nh m\u1ebd v\u00e0 x\u00e1c th\u1ef1c hai y\u1ebfu t\u1ed1 \u0111\u1ec3 h\u1ea1n ch\u1ebf chuy\u1ec3n \u0111\u1ed9ng ngang tr\u00e1i ph\u00e9p.<\/p>\n<\/li>\n<\/ol>\n

          C\u00e1c \u0111\u1eb7c \u0111i\u1ec3m ch\u00ednh v\u00e0 so s\u00e1nh kh\u00e1c v\u1edbi c\u00e1c thu\u1eadt ng\u1eef t\u01b0\u01a1ng t\u1ef1<\/h2>\n\n\n\n\n\n\n
          Thu\u1eadt ng\u1eef<\/th>\nS\u1ef1 mi\u00eau t\u1ea3<\/th>\n<\/tr>\n<\/thead>\n
          Chuy\u1ec3n \u0111\u1ed9ng d\u1ecdc<\/td>\n\u0110\u1ec1 c\u1eadp \u0111\u1ebfn c\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng t\u1eadp trung v\u00e0o vi\u1ec7c leo thang \u0111\u1eb7c quy\u1ec1n ho\u1eb7c di chuy\u1ec3n gi\u1eefa c\u00e1c c\u1ea5p \u0111\u1ed9 tin c\u1eady.<\/td>\n<\/tr>\n
          Chuy\u1ec3n \u0111\u1ed9ng ngang<\/td>\nM\u1ed9t thu\u1eadt ng\u1eef kh\u00e1c \u0111\u01b0\u1ee3c s\u1eed d\u1ee5ng thay th\u1ebf cho chuy\u1ec3n \u0111\u1ed9ng b\u00ean, t\u1eadp trung v\u00e0o vi\u1ec7c truy\u1ec1n t\u1ea3i m\u1ea1ng.<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

          Quan \u0111i\u1ec3m v\u00e0 c\u00f4ng ngh\u1ec7 c\u1ee7a t\u01b0\u01a1ng lai li\u00ean quan \u0111\u1ebfn chuy\u1ec3n \u0111\u1ed9ng b\u00ean<\/h2>\n

          T\u01b0\u01a1ng lai c\u1ee7a ph\u00f2ng th\u1ee7 chuy\u1ec3n \u0111\u1ed9ng ngang n\u1eb1m \u1edf vi\u1ec7c t\u1eadn d\u1ee5ng c\u00e1c c\u00f4ng ngh\u1ec7 ti\u00ean ti\u1ebfn nh\u01b0:<\/p>\n

            \n
          1. \n

            Ph\u00e2n t\u00edch h\u00e0nh vi<\/strong>: S\u1eed d\u1ee5ng m\u00e1y h\u1ecdc \u0111\u1ec3 ph\u00e1t hi\u1ec7n c\u00e1c ki\u1ec3u chuy\u1ec3n \u0111\u1ed9ng ngang b\u1ea5t th\u01b0\u1eddng v\u00e0 x\u00e1c \u0111\u1ecbnh c\u00e1c m\u1ed1i \u0111e d\u1ecda ti\u1ec1m \u1ea9n.<\/p>\n<\/li>\n

          2. \n

            Ki\u1ebfn tr\u00fac Zero Trust<\/strong>: Th\u1ef1c hi\u1ec7n c\u00e1c nguy\u00ean t\u1eafc kh\u00f4ng tin c\u1eady \u0111\u1ec3 gi\u1ea3m thi\u1ec3u t\u00e1c \u0111\u1ed9ng c\u1ee7a chuy\u1ec3n \u0111\u1ed9ng b\u00ean l\u1ec1 b\u1eb1ng c\u00e1ch cho r\u1eb1ng m\u1ecdi n\u1ed7 l\u1ef1c truy c\u1eadp \u0111\u1ec1u c\u00f3 kh\u1ea3 n\u0103ng g\u00e2y \u0111\u1ed9c h\u1ea1i.<\/p>\n<\/li>\n

          3. \n

            Ph\u00e2n \u0111o\u1ea1n m\u1ea1ng v\u00e0 ph\u00e2n \u0111o\u1ea1n vi m\u00f4<\/strong>: T\u0103ng c\u01b0\u1eddng ph\u00e2n \u0111o\u1ea1n m\u1ea1ng \u0111\u1ec3 c\u00f4 l\u1eadp c\u00e1c t\u00e0i s\u1ea3n quan tr\u1ecdng v\u00e0 h\u1ea1n ch\u1ebf s\u1ef1 lan r\u1ed9ng c\u1ee7a chuy\u1ec3n \u0111\u1ed9ng ngang.<\/p>\n<\/li>\n<\/ol>\n

            C\u00e1ch s\u1eed d\u1ee5ng m\u00e1y ch\u1ee7 proxy ho\u1eb7c li\u00ean k\u1ebft v\u1edbi chuy\u1ec3n \u0111\u1ed9ng b\u00ean<\/h2>\n

            M\u00e1y ch\u1ee7 proxy c\u00f3 th\u1ec3 \u0111\u00f3ng m\u1ed9t vai tr\u00f2 quan tr\u1ecdng trong vi\u1ec7c gi\u1ea3m thi\u1ec3u r\u1ee7i ro di chuy\u1ec3n ngang b\u1eb1ng c\u00e1ch:<\/p>\n

              \n
            1. \n

              Gi\u00e1m s\u00e1t giao th\u00f4ng<\/strong>: M\u00e1y ch\u1ee7 proxy c\u00f3 th\u1ec3 ghi nh\u1eadt k\u00fd v\u00e0 ph\u00e2n t\u00edch l\u01b0u l\u01b0\u1ee3ng m\u1ea1ng, cung c\u1ea5p th\u00f4ng tin chi ti\u1ebft v\u1ec1 c\u00e1c ho\u1ea1t \u0111\u1ed9ng di chuy\u1ec3n ngang ti\u1ec1m n\u0103ng.<\/p>\n<\/li>\n

            2. \n

              L\u1ecdc n\u1ed9i dung \u0111\u1ed9c h\u1ea1i<\/strong>: M\u00e1y ch\u1ee7 proxy \u0111\u01b0\u1ee3c trang b\u1ecb c\u00e1c t\u00ednh n\u0103ng b\u1ea3o m\u1eadt c\u00f3 th\u1ec3 ch\u1eb7n l\u01b0u l\u01b0\u1ee3ng \u0111\u1ed9c h\u1ea1i v\u00e0 ng\u0103n ch\u1eb7n c\u00e1c n\u1ed7 l\u1ef1c di chuy\u1ec3n ngang.<\/p>\n<\/li>\n

            3. \n

              C\u00f4 l\u1eadp c\u00e1c ph\u00e2n \u0111o\u1ea1n m\u1ea1ng<\/strong>: M\u00e1y ch\u1ee7 proxy c\u00f3 th\u1ec3 gi\u00fap ph\u00e2n t\u00e1ch c\u00e1c ph\u00e2n \u0111o\u1ea1n m\u1ea1ng kh\u00e1c nhau, h\u1ea1n ch\u1ebf kh\u1ea3 n\u0103ng di chuy\u1ec3n ngang.<\/p>\n<\/li>\n<\/ol>\n

              Li\u00ean k\u1ebft li\u00ean quan<\/h2>\n

              \u0110\u1ec3 bi\u1ebft th\u00eam th\u00f4ng tin v\u1ec1 ho\u1ea1t \u0111\u1ed9ng b\u00ean l\u1ec1 v\u00e0 c\u00e1c ph\u01b0\u01a1ng ph\u00e1p hay nh\u1ea5t v\u1ec1 an ninh m\u1ea1ng, vui l\u00f2ng tham kh\u1ea3o c\u00e1c t\u00e0i nguy\u00ean sau:<\/p>\n

                \n
              1. Khung MITER ATT&CK\u00ae<\/a><\/li>\n
              2. H\u01b0\u1edbng d\u1eabn v\u1ec1 chuy\u1ec3n \u0111\u1ed9ng ngang c\u1ee7a CISA<\/a><\/li>\n
              3. Vi\u1ec7n SANS: Phong tr\u00e0o b\u00ean<\/a><\/li>\n
              4. Khung an ninh m\u1ea1ng NIST<\/a><\/li>\n<\/ol>","protected":false},"featured_media":0,"menu_order":0,"template":"","meta":{"_acf_changed":false,"content-type":"","inline_featured_image":false,"footnotes":""},"class_list":["post-477801","wiki","type-wiki","status-publish","hentry"],"acf":{"faq_title":"Frequently Asked Questions about Lateral Movement: Enhancing Network Accessibility and Security<\/mark>","faq_items":[{"question":"What is Lateral Movement?","answer":"

                Lateral movement refers to the technique used by cyber attackers to move horizontally through a network after gaining initial access. It allows them to explore and exploit different systems without being immediately detected.<\/p>"},{"question":"How did Lateral Movement originate?","answer":"

                The concept of lateral movement emerged with the evolution of networked computer systems in the late 20th century. As organizations interconnected multiple computers within their internal networks, hackers sought ways to traverse these systems to access valuable data or cause harm.<\/p>"},{"question":"How does Lateral Movement work?","answer":"

                Once attackers gain initial access to a network, they perform reconnaissance to identify high-value targets and then use various techniques like pass-the-hash attacks, remote code execution, and exploiting trust relationships to expand their influence within the organization.<\/p>"},{"question":"What are the key features of Lateral Movement?","answer":"

                Lateral movement is characterized by stealth and persistence, speed and automation, evolution and adaptation, and complexity. These features make it a challenging threat to combat for organizations.<\/p>"},{"question":"What types of Lateral Movement exist?","answer":"

                There are several types of lateral movement, including Pass-the-Hash (PtH) attacks, Remote Code Execution (RCE), WMI-based lateral movement, Kerberoasting, and SMB lateral movement.<\/p>"},{"question":"How can Lateral Movement be used, and what are the associated problems and solutions?","answer":"

                Lateral movement can be simulated in Red Team exercises and used for security assessments. Problems may arise due to insufficient network segmentation, privilege escalation vulnerabilities, and inadequate access controls. Solutions involve proper network segmentation, user privilege management, and robust access controls.<\/p>"},{"question":"How is Lateral Movement compared to similar terms?","answer":"

                Lateral movement is synonymous with horizontal movement, both describing the technique of traversing networks after gaining initial access. It is different from vertical movement, which focuses on privilege escalation.<\/p>"},{"question":"What are the future perspectives and technologies related to Lateral Movement?","answer":"

                The future of lateral movement defense lies in leveraging advanced technologies like behavioral analytics, zero trust architecture, and network segmentation to isolate critical assets.<\/p>"},{"question":"How can proxy servers be used in association with Lateral Movement?","answer":"

                Proxy servers can play a crucial role in mitigating lateral movement risks by monitoring traffic, filtering malicious content, and isolating network segments.<\/p>"},{"question":"Where can I find more information about Lateral Movement and cybersecurity best practices?","answer":"

                For more information about lateral movement and cybersecurity best practices, you can refer to resources like the MITRE ATT&CK\u00ae Framework, CISA's Guide to Lateral Movement, SANS Institute, and NIST Cybersecurity Framework.<\/p>"}]},"_links":{"self":[{"href":"https:\/\/oneproxy.pro\/vn\/wp-json\/wp\/v2\/wiki\/477801","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/oneproxy.pro\/vn\/wp-json\/wp\/v2\/wiki"}],"about":[{"href":"https:\/\/oneproxy.pro\/vn\/wp-json\/wp\/v2\/types\/wiki"}],"version-history":[{"count":0,"href":"https:\/\/oneproxy.pro\/vn\/wp-json\/wp\/v2\/wiki\/477801\/revisions"}],"wp:attachment":[{"href":"https:\/\/oneproxy.pro\/vn\/wp-json\/wp\/v2\/media?parent=477801"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}