摘要: EXPLOITATION - XSS VULNS XSS - CROSS SITE SCRIPTING VULNS Allow an attacker to inject javascript code into the page. The code is executed when the pag 阅读全文
posted @ 2019-10-20 16:40 晨风_Eric 阅读(141) 评论(0) 推荐(0)
摘要: Extracting & Submitting Forms Automatically Target website:http://10.0.0.45/dvwa/vulnerabilities/xss_r/ Class Scanner. Vulnerability scanner. The prog 阅读全文
posted @ 2019-10-20 16:09 晨风_Eric 阅读(303) 评论(0) 推荐(0)
摘要: Polish the Python code using sending requests in a session Class Scanner. Vuln_scanner. The program runs fine. 阅读全文
posted @ 2019-10-20 15:49 晨风_Eric 阅读(136) 评论(0) 推荐(0)
摘要: VULNERABILITY_SCANNER How to discover a vulnerability in a web application? 1. Go into every possible page. 2. Look for ways to send data to web appli 阅读全文
posted @ 2019-10-20 14:51 晨风_Eric 阅读(166) 评论(0) 推荐(0)
摘要: HTTP REQUESTS BASIC INFORMATION FLOW The user clicks on a link. HTML website generates a request(client-side) The request is sent to the server. The s 阅读全文
posted @ 2019-10-20 12:30 晨风_Eric 阅读(113) 评论(0) 推荐(0)
摘要: Guessing Login Information on Login Pages Our target website: http://10.0.0.45/dvwa/login.php Execute the Python Script. 阅读全文
posted @ 2019-10-20 10:18 晨风_Eric 阅读(124) 评论(0) 推荐(0)
摘要: CRAWING SPIDER Goal -> Recursively list all links starting from a base URL. 1. Read page HTML. 2. Extract all links. 3. Repeat for each new link that 阅读全文
posted @ 2019-10-20 08:44 晨风_Eric 阅读(329) 评论(0) 推荐(0)