c.实践与心得:03.tryhackme:module1:1.introduction_to_cyber_security:1.intro_to_offensive_security

差别

这里会显示出您选择的修订版和当前版本之间的差别。

到此差别页面的链接

--- c.实践与心得:03.tryhackme:module1:1.introduction_to_cyber_security:1.intro_to_offensive_security [2024/02/24 13:02] – 移除 - 外部编辑 (未知日期) 127.0.0.1
+++ c.实践与心得:03.tryhackme:module1:1.introduction_to_cyber_security:1.intro_to_offensive_security [2024/04/22 13:31] (当前版本) – jackie67
@@ 行 1: / 行 1: @@
+#### Task1: What is Offensive Security? 什么是进攻性安全?
+<blockquote>The process of breaking into computer systems, exploiting <wrap em>software bugs</wrap>, and finding <wrap em>loopholes</wrap> in application to gain <wrap em>unauthorized access</wrap> to them.</blockquote>
+想要打败黑客,就要先成为黑客(就像星爷《九品芝麻官》里说的,想惩治贪官,就要比贪官还奸).
+{{:c.实践与心得:03.tryhackme:module1:1.introduction_to_cyber_security:pasted:20240422-133004.png?x400}}
+Find vulnerabilities and recommending patches before a cybercriminal does.
+Offensive security $\Leftrightarrow$ Defensive Security
+----
+:?: Which of the following options better represents the process where you simulate a hacker's actions to find vulnerabilities in a system?
+:!: <wrap spoiler> Defensive Security</wrap> 答案需要用鼠标选中才会显示.8-)
+----
+#### Task2: Hacking your first machine 黑入你的第一台机器
+在介绍Cyber Security  Careers和offensive security之前,先当一个黑客体验一下.
+  - 打开终端Terminal
+  - 找到隐藏的网页
+{{:c.实践与心得:03.tryhackme:1.introduction_to_cyber_security:pasted:20240224-073322.png}}
+执行的命令为
+<code>gobuster -u http://fakebank.com -w wordlist.txt dir </code>
+-u 表示给出网页的状态(301表示Redirect重定向,200表示HTTP连接成功网页可访问)
+-w 表示使用给定txt文件中的单词迭代查询隐藏网页.
+结果显示,网站根目录下/bank-transfer是可访问的
+{{:c.实践与心得:03.tryhackme:1.introduction_to_cyber_security:pasted:20240224-073648.png}}
+按网站提示,将帐户2276的钱转2000$到账户8881中.
+再加到自己账户确认到账情况,并得到
+通关密码: <wrap spoiler>BANK-HACKED</wrap>
+{{:c.实践与心得:03.tryhackme:1.introduction_to_cyber_security:pasted:20240224-073815.png}}
+补充说明:
+<note>如果你的身份是penetration tester或是security consultant,那么你刚才的操作就相当于对公司网站进行漏洞检测.</note>
+#### Task3:Careers in cyber security
+在网络安全行业,有许多可选的职种,列举一部分如下:
+ * Penetration Tester: Responsible for testing technology products for finding exploitable security vulnerabilities.
+ * Red Teamer - Plays the role of an adversary, attacking an organization and providing feedback from an enemy's perspective.
+ * Security Engineer - Design, monitor, and maintain security controls, networks, and systems to help prevent cyberattacks.
+{{tag>Done}}