- 博客(166)
- 收藏
- 关注
原创 4.13.3附录 D. 编码注入
Character encoding is the process of mapping characters, numbers and other symbols to a standard format. Typically, this is done to create a message ready for transmission between sender and receiver. It is, in simple terms, the conversion of characters (b
2024-07-18 13:08:20
901
原创 4.13.3 附录 B. 建议阅读
Suggested ReadingWhitepapersThe Economic Impacts of Inadequate Infrastructure for Software TestingImproving Web Application Security: Threats and CountermeasuresNIST PublicationsFundamental Practices for Secure Software DevelopmentThe OWASP Guide Pr
2024-07-18 13:06:58
111
原创 4.13.3 附录 A. 测试工具资源
This appendix is intended to provide a list of common tools that are used for web application testing. It does not aim to be a complete tool reference, and the inclusion of a tool here should not be seen as a specific endorsement of that tool by OWASP.The
2024-07-18 13:05:59
898
原创 4.13.2 命名方案
With a constantly growing number of IT assets to administer, security practitioners require new and more powerful tools to perform automated and large scale analysis. Thanks to software attention can be focused on the more creative and intellectually chall
2024-07-18 13:04:32
690
原创 4.13.1 报告结构
Performing the technical side of the assessment is only half of the overall assessment process. The final product is the production of a well written and informative report. A report should be easy to understand and should highlight all the risks found dur
2024-07-18 13:03:43
576
原创 关于nessus安装过程中遇到的问题
1.安装和解除IP限制以及解决重启失效的后遗症参考这位大佬的博客https://www.cnblogs.com/zoey979/p/16201985.html,https://www.cnblogs.com/zoey979/p/16200724.html。更新包时,需要修改 plugin_feed_info.inc中的时间。,然后再次运行脚本,发现插件已经清除了,需要重新解压缩。更新插件和激活步骤一样,先去官网申请新的激活码。当插件包空的时候用这个命令重新解压。等待更新完毕,每次开机需重启。
2023-12-24 00:43:33
855
原创 4.7.20-Testing_for_Mass_Assignment
【代码】4.7.20-Testing_for_Mass_Assignment。
2023-10-19 10:04:53
114
1
原创 4.7.19-Testing_for_Server-Side_Request_Forgery
【代码】4.7.19-Testing_for_Server-Side_Request_Forgery。
2023-10-19 10:04:13
89
原创 4.7.18-Testing_for_Server-side_Template_Injection
【代码】4.7.18-Testing_for_Server-side_Template_Injection。
2023-10-19 10:03:30
95
原创 4.7.17-Testing_for_Host_Header_Injection
【代码】4.7.17-Testing_for_Host_Header_Injection。
2023-10-19 10:02:47
66
原创 4.7.16-Testing_for_HTTP_Incoming_Requests
This section describes how to monitor all incoming/outgoing HTTP requests on both client-side or server-side. The purpose of this testing is to verify if there is unnecessary or suspicious HTTP request sending in the background.Most of Web security testing
2023-10-19 10:02:11
39
原创 4.7.15-Testing_for_HTTP_Splitting_Smuggling
【代码】4.7.15-Testing_for_HTTP_Splitting_Smuggling。
2023-10-19 10:01:36
54
原创 4.7.14-Testing_for_Incubated_Vulnerability
【代码】4.7.14-Testing_for_Incubated_Vulnerability。
2023-10-19 10:01:06
34
原创 4.7.13-Testing_for_Format_String_Injection
【代码】4.7.13-Testing_for_Format_String_Injection。
2023-10-19 10:00:31
33
原创 4.7.12-Testing_for_Command_Injection
【代码】4.7.12-Testing_for_Command_Injection。
2023-10-19 09:58:01
37
原创 4.7.11.0-Testing_for_Code_Injection
【代码】4.7.11.0-Testing_for_Code_Injection。
2023-10-19 09:56:05
31
原创 4.7.10-Testing_for_IMAP_SMTP_Injection
【代码】4.7.10-Testing_for_IMAP_SMTP_Injection。
2023-10-19 09:55:23
58
原创 4.7.5.6-Testing_for_NoSQL_Injection
NoSQL databases provide looser consistency restrictions than traditional SQL databases. By requiring fewer relational constraints and consistency checks, NoSQL databases often offer performance and scaling benefits. Yet these databases are still potentiall
2023-10-19 09:51:16
29
原创 4.7.5.4-Testing_PostgreSQL
In this section, some SQL Injection techniques for PostgreSQL will be discussed. These techniques have the following characteristics:From now on it is assumed that is vulnerable to SQL Injection attacks.When a SQL Injection has been found, you need to car
2023-10-19 09:50:12
33
原创 4.7.4-Testing_for_HTTP_Parameter_Pollution
【代码】4.7.4-Testing_for_HTTP_Parameter_Pollution。
2023-10-19 09:45:56
53
原创 4.7.3-Testing_for_HTTP_Verb_Tampering
This content has been merged into: Test HTTP Methods
2023-10-19 09:45:18
33
原创 4.7.2-Testing_for_Stored_Cross_Site_Scripting
【代码】4.7.2-Testing_for_Stored_Cross_Site_Scripting。
2023-10-19 09:44:32
25
原创 4.7.1-Testing_for_Reflected_Cross_Site_Scripting
【代码】4.7.1-Testing_for_Reflected_Cross_Site_Scripting。
2023-10-19 09:44:01
37
原创 4.11.14-Testing_for_Reverse_Tabnabbing
【代码】4.11.14-Testing_for_Reverse_Tabnabbing。
2023-10-19 09:41:01
36
Burp Suite使用教程1.pdf
2023-05-12
一直路由转发失败,请教一下是什么原因导致的
2024-06-07
TA创建的收藏夹 TA关注的收藏夹
TA关注的人