摘要：
Implementing Code To Discover XSS in Parameters 1. Watch the URL of the XSS reflected page carefully. 2. Add the test_xss_in_link method in the Scanne 阅读全文
posted @ 2019-10-29 22:57
晨风_Eric
阅读(173)
评论(0)
推荐(0)
摘要：
VULNERABILITY_SCANNER How to discover a vulnerability in a web application? 1. Go into every possible page. 2. Look for ways to send data to the web a 阅读全文
posted @ 2019-10-28 22:55
晨风_Eric
阅读(162)
评论(0)
推荐(0)
摘要：
EXPLOITATION - XSS VULNS EXPLOITING XSS Run any javascript code. Beef framework can be used to hook targets. Inject Beef hook in vulnerable pages. Exe 阅读全文
posted @ 2019-10-28 22:15
晨风_Eric
阅读(131)
评论(0)
推荐(0)
摘要：
EXPLOITATION - XSS VULNS XSS - CROSS SITE SCRIPTING VULNS Allow an attacker to inject javascript code into the page. The code is executed when the pag 阅读全文
posted @ 2019-10-20 16:40
晨风_Eric
阅读(141)
评论(0)
推荐(0)
摘要：
Extracting & Submitting Forms Automatically Target website:http://10.0.0.45/dvwa/vulnerabilities/xss_r/ Class Scanner. Vulnerability scanner. The prog 阅读全文
posted @ 2019-10-20 16:09
晨风_Eric
阅读(303)
评论(0)
推荐(0)
摘要：
Polish the Python code using sending requests in a session Class Scanner. Vuln_scanner. The program runs fine. 阅读全文
posted @ 2019-10-20 15:49
晨风_Eric
阅读(136)
评论(0)
推荐(0)
摘要：
VULNERABILITY_SCANNER How to discover a vulnerability in a web application? 1. Go into every possible page. 2. Look for ways to send data to web appli 阅读全文
posted @ 2019-10-20 14:51
晨风_Eric
阅读(166)
评论(0)
推荐(0)
摘要：
HTTP REQUESTS BASIC INFORMATION FLOW The user clicks on a link. HTML website generates a request(client-side) The request is sent to the server. The s 阅读全文
posted @ 2019-10-20 12:30
晨风_Eric
阅读(113)
评论(0)
推荐(0)
摘要：
Guessing Login Information on Login Pages Our target website: http://10.0.0.45/dvwa/login.php Execute the Python Script. 阅读全文
posted @ 2019-10-20 10:18
晨风_Eric
阅读(124)
评论(0)
推荐(0)
摘要：
CRAWING SPIDER Goal -> Recursively list all links starting from a base URL. 1. Read page HTML. 2. Extract all links. 3. Repeat for each new link that 阅读全文
posted @ 2019-10-20 08:44
晨风_Eric
阅读(329)
评论(0)
推荐(0)
浙公网安备 33010602011771号