Penetration Testing Chen Liguo
What 渗透测试是通过模拟恶意黑客的攻击方法,来评估计算机网络系 统安全的一种评估方法。
Targets Servers Dynamic websites Web server Database server Php Asp jsp
Platforms & Tools By hand… Kali ->OS modified from debain https://www.kali.org/downloads/ Metasploit ->intergrated platform Nmap ->get info Sqlmap ->database Openvas ->OS Burpsuite ->proxy WVS ->a spider to analysis the weakness of website
Steps 0x01: get information about your target 0x02: analysis & crack & test 0x03: penetration 0x04: docs