黑客培训记实(5)

黑客培训记实

Path integrity

IP spoofing

Denial of service

Firewall architectures

Firewall attack scenarios

Insider

Vulnerable services

Firewall identification and enumeration

Banner grabbing

ACL enumeration

Port identification

Liberal ACLs

Port redirection

datapipe

fpi

pe

Web Hacking

E-commerce primer

Information gathering

Port scanning

Web reconnaissance

Enumeration

Vulnerability checking

Site duplication

Source sifting

Key field enumeration

Viewing source

Active server pages

Common gateway interface

Cold fusion

File system traversal

Dot dot bugs

Dot listings

Tilde usage

CIM

Input validation

Metacharacters

Field overflows

Application buffer overflows

Server side includes

Hidden tags

IIS Unicode

Local command execution

Impersonation