[{"id":302,"title":"AD Pentest Tools","content":"<h1>JAWS (Just Another Windows Script): Windows Bilgi Toplama ve G&uuml;venlik Analizi Arac\u0131<\/h1>\r\n<h3>PowerShell Tabanl\u0131 Windows Enumerasyon Scripti Rehberi<\/h3>\r\n<p><iframe style=\"width: 637px; height: 357px;\" src=\"https:\/\/www.youtube.com\/embed\/OASnDBRgM04\" width=\"637\" height=\"357\" allowfullscreen=\"allowfullscreen\"><\/iframe><\/p>\r\n<p>&nbsp;<\/p>\r\n<p>Windows ortamlar\u0131nda bilgi toplamak, g&uuml;venlik a&ccedil;\u0131klar\u0131n\u0131 analiz etmek ve potansiyel privilege escalation (ayr\u0131cal\u0131k y&uuml;kseltme) noktalar\u0131n\u0131 belirlemek i&ccedil;in kullan\u0131lan <strong>JAWS<\/strong>, g&uuml;venlik ara\u015ft\u0131rmac\u0131lar\u0131 ve penetrasyon testi uzmanlar\u0131 aras\u0131nda olduk&ccedil;a pop&uuml;ler bir ara&ccedil;t\u0131r.<\/p>\r\n<p>Bu yaz\u0131da JAWS arac\u0131n\u0131n ne oldu\u011funu, hangi durumlarda kullan\u0131ld\u0131\u011f\u0131n\u0131, &ouml;zelliklerini ve nas\u0131l &ccedil;al\u0131\u015ft\u0131r\u0131laca\u011f\u0131n\u0131 detayl\u0131 bir rehber h&acirc;line getirdim.<\/p>\r\n<hr>\r\n<h1>\ud83d\udd0d JAWS Nedir?<\/h1>\r\n<p>JAWS (<strong>Just Another Windows Script<\/strong>), Windows sistemlerde kapsaml\u0131 bilgi toplama (enumeration) yapmak i&ccedil;in geli\u015ftirilmi\u015f <strong>PowerShell tabanl\u0131 bir g&uuml;venlik arac\u0131d\u0131r<\/strong>.<\/p>\r\n<p>GitHub projesi:<br>\ud83d\udc49 <a href=\"https:\/\/github.com\/TheJoyOfHacking\/411Hall-JAWS\">https:\/\/github.com\/TheJoyOfHacking\/411Hall-JAWS<\/a><\/p>\r\n<p>Bu ara&ccedil;, bir Windows makinesinin:<\/p>\r\n<ul>\r\n<li>\r\n<p>G&uuml;venlik durumu<\/p>\r\n<\/li>\r\n<li>\r\n<p>Yap\u0131land\u0131rma hatalar\u0131<\/p>\r\n<\/li>\r\n<li>\r\n<p>Eksik yamalar<\/p>\r\n<\/li>\r\n<li>\r\n<p>Privilege escalation f\u0131rsatlar\u0131<\/p>\r\n<\/li>\r\n<\/ul>\r\n<p>gibi kritik noktalar\u0131n\u0131 otomatik olarak analiz eder.<\/p>\r\n<hr>\r\n<h1>\u2b50 JAWS&rsquo;\u0131n Ba\u015fl\u0131ca &Ouml;zellikleri<\/h1>\r\n<p><img src=\"https:\/\/redmondmag.com\/articles\/2015\/01\/23\/~\/media\/ECG\/redmondmag\/Images\/2015\/01\/PowerShellInfo_Fig2.ashx?utm_source=chatgpt.com\" alt=\"Image\"><\/p>\r\n<p><img src=\"https:\/\/redmondmag.com\/articles\/2015\/01\/23\/~\/media\/ECG\/redmondmag\/Images\/2015\/01\/PowerShellInfo_Fig3.ashx?utm_source=chatgpt.com\" alt=\"Image\"><\/p>\r\n<p><img src=\"https:\/\/i.sstatic.net\/r2FBA.png?utm_source=chatgpt.com\" alt=\"Image\"><\/p>\r\n<p><img src=\"https:\/\/www.manageengine.com\/products\/active-directory-audit\/powershell\/images\/powershell-script-for-security-1.png?utm_source=chatgpt.com\" alt=\"Image\"><\/p>\r\n<p><img src=\"https:\/\/delinea.com\/hs-fs\/hubfs\/delinea-blog-12-privilege-escalation-example-of-the%20steps-an-attacker-will-take.jpg?name=delinea-blog-12-privilege-escalation-example-of-the+steps-an-attacker-will-take.jpg&amp;width=750&amp;utm_source=chatgpt.com\" alt=\"Image\"><\/p>\r\n<p><img src=\"https:\/\/delinea.com\/hs-fs\/hubfs\/delinea-blog-7-privilege-escalation-default-groups-that-determine-privileges-of-users.jpg?name=delinea-blog-7-privilege-escalation-default-groups-that-determine-privileges-of-users.jpg&amp;width=750&amp;utm_source=chatgpt.com\" alt=\"Image\"><\/p>\r\n<p>JAWS bir&ccedil;ok &ouml;nemli g&uuml;venlik bile\u015fenini otomatik olarak raporlar.<\/p>\r\n<hr>\r\n<h2>1. \ud83d\udda5\ufe0f Sistem Bilgisi Toplama<\/h2>\r\n<p>Arac\u0131n temel i\u015flevi, sistem hakk\u0131nda kritik bilgileri toplamak ve analiz etmektir:<\/p>\r\n<ul>\r\n<li>\r\n<p>Windows s&uuml;r&uuml;m&uuml;, build numaras\u0131 ve sistem mimarisi<\/p>\r\n<\/li>\r\n<li>\r\n<p>Y&uuml;kl&uuml; programlar<\/p>\r\n<\/li>\r\n<li>\r\n<p>Patch seviyeleri<\/p>\r\n<\/li>\r\n<li>\r\n<p>&Ccedil;al\u0131\u015fan servisler<\/p>\r\n<\/li>\r\n<li>\r\n<p>\u0130\u015flemler (process listesi)<\/p>\r\n<\/li>\r\n<\/ul>\r\n<p>Bu veriler, sistemde eksik g&uuml;venlik g&uuml;ncellemelerini tespit etmeye yard\u0131mc\u0131 olur.<\/p>\r\n<hr>\r\n<h2>2. \ud83d\udc64 Kullan\u0131c\u0131 Hesaplar\u0131 ve Yetki Analizi<\/h2>\r\n<p>JAWS, sistemde kullan\u0131c\u0131 ve grup yap\u0131land\u0131rmalar\u0131n\u0131 derinlemesine tarar:<\/p>\r\n<ul>\r\n<li>\r\n<p>Kullan\u0131c\u0131 hesaplar\u0131<\/p>\r\n<\/li>\r\n<li>\r\n<p>Y&ouml;netici grubu &uuml;yeleri<\/p>\r\n<\/li>\r\n<li>\r\n<p>Oturum a&ccedil;an son kullan\u0131c\u0131lar<\/p>\r\n<\/li>\r\n<li>\r\n<p>Kullan\u0131c\u0131 privilege seviyeleri<\/p>\r\n<\/li>\r\n<li>\r\n<p>Potansiyel yetki y&uuml;kseltme a&ccedil;\u0131klar\u0131<\/p>\r\n<\/li>\r\n<\/ul>\r\n<p>Bu &ouml;zellik &ouml;zellikle <strong>s\u0131zma testi<\/strong> s\u0131ras\u0131nda &ccedil;ok &ouml;nemlidir.<\/p>\r\n<hr>\r\n<h2>3. \ud83c\udf10 A\u011f Yap\u0131land\u0131rmas\u0131 ve Ba\u011flant\u0131lar<\/h2>\r\n<p>JAWS, a\u011f taraf\u0131nda a\u015fa\u011f\u0131daki bilgileri enumerate eder:<\/p>\r\n<ul>\r\n<li>\r\n<p>A\u011f arabirimleri<\/p>\r\n<\/li>\r\n<li>\r\n<p>IP yap\u0131land\u0131rmalar\u0131<\/p>\r\n<\/li>\r\n<li>\r\n<p>Firewall kurallar\u0131<\/p>\r\n<\/li>\r\n<li>\r\n<p>ARP tablosu<\/p>\r\n<\/li>\r\n<li>\r\n<p>Routing tablosu<\/p>\r\n<\/li>\r\n<li>\r\n<p>A&ccedil;\u0131k ba\u011flant\u0131lar ve portlar<\/p>\r\n<\/li>\r\n<\/ul>\r\n<p>Bu veriler a\u011f g&uuml;venli\u011fini analiz etmek i&ccedil;in kritik &ouml;nem ta\u015f\u0131r.<\/p>\r\n<hr>\r\n<h2>4. \ud83d\udd10 G&uuml;venlik Kontrolleri ve Zafiyet Tespiti<\/h2>\r\n<p>Ara&ccedil; ayr\u0131ca g&uuml;venlikle ilgili &ccedil;e\u015fitli kontroller yapar:<\/p>\r\n<ul>\r\n<li>\r\n<p>Antivir&uuml;s durumu<\/p>\r\n<\/li>\r\n<li>\r\n<p>AppLocker politikalar\u0131<\/p>\r\n<\/li>\r\n<li>\r\n<p>UAC ayarlar\u0131<\/p>\r\n<\/li>\r\n<li>\r\n<p>\u015e&uuml;pheli izinler<\/p>\r\n<\/li>\r\n<li>\r\n<p>Zay\u0131f ACL yap\u0131land\u0131rmalar\u0131<\/p>\r\n<\/li>\r\n<\/ul>\r\n<p>Bu alanlar, &ccedil;o\u011fu zaman privilege escalation i&ccedil;in en &ccedil;ok kullan\u0131lan yanl\u0131\u015f yap\u0131land\u0131rmalard\u0131r.<\/p>\r\n<hr>\r\n<h1>\ud83c\udfaf JAWS Ne \u0130&ccedil;in Kullan\u0131l\u0131r?<\/h1>\r\n<p>JAWS, hem g&uuml;venlik uzmanlar\u0131 hem de sistem y&ouml;neticileri taraf\u0131ndan farkl\u0131 ama&ccedil;larla kullan\u0131labilir.<\/p>\r\n<p><img src=\"https:\/\/www.hackthebox.com\/storage\/blog\/VYcNKHs3A899YeiU1Z2G2fkRqxaoHgxm.jpg?utm_source=chatgpt.com\" alt=\"Image\"><\/p>\r\n<p><img src=\"https:\/\/cdn.prod.website-files.com\/61dd9339d05701829d0b3241\/61dd9339d0570139770b350a_1%2A2Y66B1rrGJunV574QGPOlw.png?utm_source=chatgpt.com\" alt=\"Image\"><\/p>\r\n<p><img src=\"https:\/\/d2ds8yldqp7gxv.cloudfront.net\/Blog%2BExplanatory%2BImages\/Ethical%2BHacking%2BTools%2B2.webp?utm_source=chatgpt.com\" alt=\"Image\"><\/p>\r\n<p><img src=\"https:\/\/www.nopsec.com\/wp-content\/uploads\/2021\/08\/Nmap_screenshot.width-800.png?utm_source=chatgpt.com\" alt=\"Image\"><\/p>\r\n<p><img src=\"https:\/\/miro.medium.com\/1%2AHx8zzXY1IjFJ00xFPT5sTg.png?utm_source=chatgpt.com\" alt=\"Image\"><\/p>\r\n<p><img src=\"https:\/\/miro.medium.com\/v2\/resize%3Afit%3A1400\/1%2A6Dc4VwT2B7T-z1QQTr8OsA.png?utm_source=chatgpt.com\" alt=\"Image\"><\/p>\r\n<h3>\u2714 1. Penetrasyon Testlerinde Enumerasyon<\/h3>\r\n<p>S\u0131zma testi s&uuml;recinin en kritik a\u015famalar\u0131ndan biri sistem bilgisinin toplanmas\u0131d\u0131r.<\/p>\r\n<h3>\u2714 2. Privilege Escalation Analizi<\/h3>\r\n<p>Yanl\u0131\u015f yap\u0131land\u0131r\u0131lm\u0131\u015f haklar, zay\u0131f servisler veya ayr\u0131cal\u0131kl\u0131 dosyalar tespit edilebilir.<\/p>\r\n<h3>\u2714 3. Sistem Y&ouml;neticileri \u0130&ccedil;in G&uuml;venlik Denetimi<\/h3>\r\n<p>Sistemlerin g&uuml;venlik seviyesini analiz etmek i&ccedil;in kullan\u0131labilir.<\/p>\r\n<h3>\u2714 4. CTF Yar\u0131\u015fmalar\u0131 ve E\u011fitim<\/h3>\r\n<p>&Ouml;\u011frenme ama&ccedil;l\u0131, Windows g&uuml;venlik mekanizmalar\u0131n\u0131 anlamak i&ccedil;in s\u0131k&ccedil;a tercih edilir.<\/p>\r\n<hr>\r\n<h1>\u26a0\ufe0f Yasal Uyar\u0131<\/h1>\r\n<p>JAWS yaln\u0131zca:<\/p>\r\n<ul>\r\n<li>\r\n<p>Kendi sistemlerinizde<\/p>\r\n<\/li>\r\n<li>\r\n<p>Size ait olmayan sistemlerde <strong>yaz\u0131l\u0131 izin al\u0131nm\u0131\u015fsa<\/strong><\/p>\r\n<\/li>\r\n<li>\r\n<p>E\u011fitim ve laboratuvar ortamlar\u0131nda<\/p>\r\n<\/li>\r\n<\/ul>\r\n<p>kullan\u0131lmal\u0131d\u0131r.<\/p>\r\n<blockquote>\r\n<p><strong>Yetkisiz sistemlere y&ouml;nelik kullan\u0131m\u0131 yasa d\u0131\u015f\u0131d\u0131r ve ciddi sorumluluk do\u011furur.<\/strong><\/p>\r\n<\/blockquote>\r\n<hr>\r\n<h1>\ud83d\udee0\ufe0f Kurulum ve Kullan\u0131m<\/h1>\r\n<p>JAWS bir PowerShell scripti oldu\u011fu i&ccedil;in &ccedil;al\u0131\u015ft\u0131rmas\u0131 olduk&ccedil;a kolayd\u0131r.<\/p>\r\n<h3>GitHub&rsquo;dan indir:<\/h3>\r\n<p><a href=\"https:\/\/github.com\/TheJoyOfHacking\/411Hall-JAWS\">https:\/\/github.com\/TheJoyOfHacking\/411Hall-JAWS<\/a><\/p>\r\n<hr>\r\n<h1>\u25b6\ufe0f Temel Kullan\u0131m Komutlar\u0131<\/h1>\r\n<hr>\r\n<h2>1. CMD &Uuml;zerinden &Ccedil;al\u0131\u015ft\u0131rma (&Ccedil;\u0131kt\u0131y\u0131 Dosyaya Yazma)<\/h2>\r\n<pre><code class=\"language-cmd\">C:\\temp&gt; powershell.exe -ExecutionPolicy Bypass -File .\\jaws-enum.ps1 -OutputFilename JAWS-Enum.txt\r\n<\/code><\/pre>\r\n<p>Bu komut &ccedil;al\u0131\u015ft\u0131\u011f\u0131nda sistem hakk\u0131nda <strong>kapsaml\u0131 bir rapor dosyas\u0131<\/strong> olu\u015fturur.<\/p>\r\n<hr>\r\n<h2>2. CMD &Uuml;zerinden Standart &Ccedil;al\u0131\u015ft\u0131rma<\/h2>\r\n<pre><code class=\"language-cmd\">C:\\temp&gt; powershell.exe -ExecutionPolicy Bypass -File .\\jaws-enum.ps1\r\n<\/code><\/pre>\r\n<hr>\r\n<h2>3. PowerShell &Uuml;zerinden &Ccedil;al\u0131\u015ft\u0131rma (Output dosyas\u0131na yazma)<\/h2>\r\n<pre><code class=\"language-powershell\">PS C:\\temp&gt; .\\jaws-enum.ps1 -OutputFileName Jaws-Enum.txt\r\n<\/code><\/pre>\r\n<hr>\r\n<h1>\ud83d\udcc4 &Ccedil;\u0131kt\u0131 Dosyas\u0131 Neler \u0130&ccedil;erir?<\/h1>\r\n<p>JAWS &ccedil;al\u0131\u015ft\u0131ktan sonra:<\/p>\r\n<ul>\r\n<li>\r\n<p>Sistem bilgisi<\/p>\r\n<\/li>\r\n<li>\r\n<p>A\u011f konfig&uuml;rasyonlar\u0131<\/p>\r\n<\/li>\r\n<li>\r\n<p>Kullan\u0131c\u0131\/grup bilgileri<\/p>\r\n<\/li>\r\n<li>\r\n<p>G&uuml;venlik ayarlar\u0131<\/p>\r\n<\/li>\r\n<li>\r\n<p>Yetki analizleri<\/p>\r\n<\/li>\r\n<li>\r\n<p>Zay\u0131f nokta tespitleri<\/p>\r\n<\/li>\r\n<\/ul>\r\n<p>gibi y&uuml;zlerce sat\u0131rdan olu\u015fan ayr\u0131nt\u0131l\u0131 bir rapor &uuml;retir.<\/p>\r\n<p>Bu rapor &ouml;zellikle penetrasyon testlerinde &ldquo;gizli hazineler&rdquo; sunar.<\/p>\r\n<hr>\r\n<h1>\ud83c\udfc1 Sonu&ccedil;<\/h1>\r\n<p>JAWS, Windows sistemler i&ccedil;in geli\u015ftirilen en kapsaml\u0131 PowerShell tabanl\u0131 bilgi toplama ara&ccedil;lar\u0131ndan biridir.<br>Penetrasyon testlerinden e\u011fitim ortamlar\u0131na kadar bir&ccedil;ok kullan\u0131m alan\u0131na sahiptir.<\/p>\r\n<p>Bu yaz\u0131da:<\/p>\r\n<ul>\r\n<li>\r\n<p>JAWS&rsquo;\u0131n ne oldu\u011funu<\/p>\r\n<\/li>\r\n<li>\r\n<p>Hangi &ouml;zelliklere sahip oldu\u011funu<\/p>\r\n<\/li>\r\n<li>\r\n<p>Kullan\u0131m senaryolar\u0131n\u0131<\/p>\r\n<\/li>\r\n<li>\r\n<p>CMD ve PowerShell &uuml;zerinden nas\u0131l &ccedil;al\u0131\u015ft\u0131r\u0131ld\u0131\u011f\u0131n\u0131<\/p>\r\n<\/li>\r\n<li>\r\n<p>Yasal kullan\u0131m gerekliliklerini<\/p>\r\n<\/li>\r\n<\/ul>\r\n<p>detayl\u0131 olarak ele ald\u0131k.<\/p>","excerpt":"GitHub'da bulunan (https:\/\/github.com\/TheJoyOfHacking\/411Hall-JAWS) projesi, Windows sistemlerinde bilgi toplama ve enumerasyon i\u00e7in tasarlanm\u0131\u015f...","created_at":"2021-12-05 20:03:24","updated_at":"2026-09-05 13:59:38","category_id":7,"view_count":522,"reading_time":4,"status":"published","editor_choice":0,"is_editor_choice":0,"published_at":"2021-12-05 20:03:00","featured_image":"ba17999369878142d1d7aa7e06477668.png","slug":"ad-pentest-tools","category_name":"Cyber Security","category_slug":"cyber-security","category_color":"#10b981"}]