07 2020 档案

Penetration Test - Survey the Target(1)
摘要：Scanning and Enumeration INFORMATION GATHERING Scanning Process of looking at some number of "things" to determine characteristics Commonly used in pe 阅读全文
posted @ 2020-07-30 21:38 晨风_Eric 阅读(107) 评论(0) 推荐(0) 编辑
Penetration Test - Planning and Scoping(10)
摘要：Scope Vulnerabilities SCHEDULING AND SCOPE CREEP Scheduling When can/should tests be run? Who should be notified? When must tests be completed? Scope 阅读全文
posted @ 2020-07-29 21:18 晨风_Eric 阅读(66) 评论(0) 推荐(0) 编辑
Penetration Test - Planning and Scoping(9)
摘要：Project Strategy and Risk CONSIDERATIONS White-listed No one can access resources unless specifically granted Black-listed Everyone can access unless 阅读全文
posted @ 2020-07-27 20:10 晨风_Eric 阅读(114) 评论(0) 推荐(0) 编辑
Penetration Test - Planning and Scoping(8)
摘要：Lab Environment Setup ENV1: Kali Linux Install a Kali Linux Virtual Machine. https://www.kali.org/ ENV2: DVWA - DAMN VULNERABLE WEB APPLICATION Downlo 阅读全文
posted @ 2020-07-26 20:57 晨风_Eric 阅读(168) 评论(0) 推荐(0) 编辑
Penetration Test - Planning and Scoping(7)
摘要：Penetration Test - Planning and Scoping(7) TYPES OF ASSESSMENTS Goal-based Goals created upfront Tests set up to fulfill goal(s) Objectives-based Defi 阅读全文
posted @ 2020-07-21 20:43 晨风_Eric 阅读(95) 评论(0) 推荐(0) 编辑
Penetration Test - Planning and Scoping(6)
摘要：Penetration Test - Planning and Scoping(6) LEGAL CONCEPTS Statement of Work(SOW) Clearly states what tasks are to be accomplished Master Service Agree 阅读全文
posted @ 2020-07-20 21:21 晨风_Eric 阅读(101) 评论(0) 推荐(0) 编辑
Penetration Test - Planning and Scoping(5)
摘要：Penetration Test - Planning and Scoping(5) SUPPORT RESOURCES WSDL/WADL Web services/application description language XML file with lots of info about 阅读全文
posted @ 2020-07-20 20:49 晨风_Eric 阅读(120) 评论(0) 推荐(0) 编辑
Penetration Test - Planning and Scoping(4)
摘要：Penetration Test - Planning and Scoping(4) SET EXPECTATIONS Impact The result of testing Report vulnerabilities Remediation How should client respond? 阅读全文
posted @ 2020-07-20 20:19 晨风_Eric 阅读(106) 评论(0) 推荐(0) 编辑
Penetration Test - Planning and Scoping(3)
摘要：Penetration Test - Planning and Scoping(3) RESOURCES AND REQUIREMENTS What does each party provide? At what point does the engagement begin? Confident 阅读全文
posted @ 2020-07-19 22:27 晨风_Eric 阅读(108) 评论(0) 推荐(0) 编辑
Penetration Test - Planning and Scoping(2)
摘要：Penetration Test - Planning and Scoping(2) TARGET AUDIENCE AND ROE Know your target audience Who is sponsoring the pen test? What is the purpose of th 阅读全文
posted @ 2020-07-19 21:25 晨风_Eric 阅读(100) 评论(0) 推荐(0) 编辑
Penetration Test - Planning and Scoping(1)
摘要：Penetration Test - Planning and Scoping(1) PLANNING AND SCOPING Get Permission Know how much work you have to do Don't do more than that Watch out for 阅读全文
posted @ 2020-07-19 20:55 晨风_Eric 阅读(133) 评论(0) 推荐(0) 编辑
CISSP 考试经验分享
摘要：复习资料： 《Eleventh Hour CISSP》 《某哲培训讲义》 《CISSP Official Security Professional》Eighth Edition 《官方习题集》 复习： 关于是否报班：这个看个人的实际情况，对于时间比较紧的人，建议报班。 因为之前CISA，CISM都 阅读全文
posted @ 2020-07-16 20:06 晨风_Eric 阅读(1033) 评论(3) 推荐(0) 编辑

点击右上角即可分享
微信分享提示