晨风_Eric - 博客园

2020年12月17日

Penetration Test - Reporting_and_Communication(3)

摘要： Mitigation strategies RECOMMEND MITIGATION STRATEGIES Nearly every pen test will discover multiple vulnerabilities. A pen test report should contain r 阅读全文

posted @ 2020-12-17 21:58 晨风_Eric 阅读(55) 评论(0) 推荐(0)

Penetration Test - Reporting_and_Communication(2)

摘要： Post-report Activities POST-REPORT DELIVERY ACTIVITIES Delivering the report isn't the end There is more work to do Delivering may include presenting 阅读全文

posted @ 2020-12-17 21:33 晨风_Eric 阅读(87) 评论(0) 推荐(0)

2020年12月15日

Penetration Test - Reporting_and_Communication(1)

摘要： Writing Reports PEN TEST REPORT Communicate findings AND recommendations Primary recommendations Only change to make your points Digest of all activit 阅读全文

posted @ 2020-12-15 21:21 晨风_Eric 阅读(212) 评论(0) 推荐(0)

2020年12月14日

Penetration Test - Using_Scripting_in_Pen_Testing(7)

摘要： Scripting languages comparison Comparing Scripting Languages Bash PowerShell Ruby Python Comments # # or <# #> # or =begin =end # Variables - assign v 阅读全文

posted @ 2020-12-14 20:30 晨风_Eric 阅读(130) 评论(0) 推荐(0)

2020年12月13日

Penetration Test - Using_Scripting_in_Pen_Testing(6)

摘要： Python Scripts DEMO portscan.py import sys, socket target = sys.argv[1] minport = int(sys.argv[2]) maxport = int(sys.argv[3]) def porttry(cur_target, 阅读全文

posted @ 2020-12-13 18:27 晨风_Eric 阅读(63) 评论(0) 推荐(0)

Penetration Test - Using_Scripting_in_Pen_Testing(5)

摘要： Ruby Script Demo Portscan.rb #!/usr/bin/ruby require 'socket' TARGET = ARGV[0] || '192.168.2.22' MINPORT = ARGV[1] || 22 MAXPORT = ARGV[2] || 80 $i = 阅读全文

posted @ 2020-12-13 18:08 晨风_Eric 阅读(50) 评论(0) 推荐(0)

2020年12月5日

Penetration Test - Using_Scripting_in_Pen_Testing(4)

摘要： PowerShell scripts Run PowerShell on Windows as a administrator. And set the execution policy. Set-ExecutionPolicy Unrestricted Following is a simple 阅读全文

posted @ 2020-12-05 19:34 晨风_Eric 阅读(58) 评论(0) 推荐(0)

Penetration Test - Using_Scripting_in_Pen_Testing(3)

摘要： Bash scripting techniques BASH SCRIPTING I/O I/O - File vs. terminal vs. network Input from a terminal read -p "Enter your name:" name; echo "Hi," $na 阅读全文

posted @ 2020-12-05 18:58 晨风_Eric 阅读(73) 评论(0) 推荐(0)

Penetration Test - Using_Scripting_in_Pen_Testing(2)

摘要： Bash Scripting Basics COMMENTS Help you remember what you were thinking All comments start with the '#' character Anything after '#' is ignored by the 阅读全文

posted @ 2020-12-05 16:32 晨风_Eric 阅读(45) 评论(0) 推荐(0)

Penetration Test - Using_Scripting_in_Pen_Testing(1)

摘要： Using scripting in pen testing SCRIPTING FOR PENETRATION TESTING Why bother with scripts? Automate mundane/repetitive tasks Faster Less error prone Re 阅读全文

posted @ 2020-12-05 10:00 晨风_Eric 阅读(53) 评论(0) 推荐(0)

一蓑烟雨

该面对的绝不逃避，该执著的永不怨悔，该舍弃的不再留念，该珍惜的好好把握。

公告