|
所在平台: Udemy |
课程主页: https://www.udemy.com/course/ethical-hacking-web-enumeration/
课程评论:没有评论
**课程名称:** 道德黑客:Web 枚举 **课程概述:** 本课程是 Coursera 上关于道德黑客(Ethical Hacking)和网络安全(Cyber Security)的入门级课程,专注于 Web 枚举(Web Enumeration)技术。Web 枚举是黑客在攻击 Web 服务器和网站时使用的一项关键技术。其核心目标是在渗透过程中,**识别目标 Web 应用程序可能存在的脆弱点**,包括但不限于: * **查找目录和文件:** 发现应用程序下可能存在的敏感文件、隐藏文件或配置错误的文件,这些文件可能暴露服务器信息、SSH 密钥、PDF 文档等。 * **子域名侦测:** 识别目标网站下是否存在其他子域名,这些子域名可能托管着易受攻击的应用程序。 * **WordPress 漏洞扫描:** 学习如何针对使用 WordPress 构建的博客进行漏洞扫描。 课程强调,虽然手动扫描是可能的,但效率低下且耗时。因此,本课程将重点介绍**如何实现对目标服务器的自动化扫描**,以提高效率和准确性。 **先决条件:** * 对道德黑客或网络安全感兴趣。 * **无需任何先验知识。** * **建议准备 Kali Linux 环境:** Kali Linux 是一个包含大量黑客工具的操作系统,课程鼓励使用其预置的强大工具集,而不是手动安装。Kali Linux 可以免费下载为 Live USB 或 Virtualbox 镜像,也可选择云部署。 **学习目标:** 学习者将掌握 Web 枚举的核心技术,能够有效地扫描和识别 Web 应用程序的潜在漏洞点,为后续的渗透测试打下坚实基础。
web enumeration is a techniques hackers use when targeting web servers and web sites. When attempting to hack an application with a vulnerabilty, you first have to find out what files, subdomains or directories the applications are vulnerable to. On top of that, you may find hidden files that could give you access to the file server. Perhaps you can access SSH keys, pdfs or find hidden directories. It might be there is a vulnerable app running on one of the sub domains. There are many ways the server could be accessible and web enumeration is the first step.In this course you will learn how to scan for directories, files, subdomains but also how to scan blogs made with wordpress for vulnerabilities. While you can do manual scanning, that quickly becomes cumbersome. In this course we explain how you can do automated scans on your target server.This is a beginners course for those interested in Ethical Hacking or Cyber Security. You don't need any prior knowledge when doing this course, but you should have Kali Linux at hands. Kali Linux is a computer system that contains many hacking tools, sometimes it's simply called Kali. It can be downloaded for free as a Live USB or Virtualbox image, there's also a cloud option. While you can install the tools manually, there are so many hacking tools that it's easier to use a dedicated Linux system like Kali.