發表文章

目前顯示的是有「hacking」標籤的文章

Vulnerability Scanning Tools(漏洞掃描工具)

https://www.owasp.org/index.php/Category:Vulnerability_Scanning_Tools 寫得很清楚 但 OpenSource 就只有幾個 http://rgaucher.info/beta/grabber/ http://sourceforge.net/p/grendel/code/ci/c59780bfd41bdf34cc13b27bc3ce694fd3cb7456/tree/ http://www.cirt.net/nikto2 https://subgraph.com/vega/ http://wapiti.sourceforge.net/ http://www.sensepost.com/research/wikto/ https://www.owasp.org/index.php/OWASP_Xenotix_XSS_Exploit_Framework https://www.owasp.org/index.php/OWASP_Zed_Attack_Proxy_Project 先推薦兩個: 1. vega https://subgraph.com/vega/ 跨平台,用 java 寫的,圖形化界面。 補充一個,無線網路偵測的 https://www.fern-pro.com/download.php

One-way Web Hacking

One-way Web Hacking 前陣子追一個入侵的事件,找到的相關資料.... http://net-square.com/papers/one_way/one_way.html http://blog.aggregatedintelligence.com/2010/02/dotnetnuke-version-zero-day.html http://www.foofus.net/~jmk/iis.html