|
所在平台: Udemy |
课程主页: https://www.udemy.com/course/hands-on-penetration-testing-labs-20/
课程评论：没有评论
课程名称：动手渗透测试实验室 2.0 课程概述：欢迎参加动手渗透测试实验室 2.0 课程。该课程独立于我的另一个课程“动手渗透实验室 1.0”，两者都有原创内容，您不需要单独购买其中任何一个。此课程注重实践，主要通过技术应用而非理论讲解，迅速进入实操环节。 在本课程中，您将使用 VirtualBox 构建一个仅主机的实验室环境，帮助您深入了解渗透测试的应用，并掌握创建自己测试和研究环境的技能。实验室将包括 Kali Linux，以及多种有意设置漏洞的 Linux 和 Windows 虚拟机。课程内容包括信息枚举、漏洞扫描、本地和远程利用等，使用行业标准的渗透测试工具如 nmap、dirb、nikto、Metasploit 及独立利用工具。 我们还将重点学习利用开发，详细讲解如何为自定义的 Linux 和 Windows 二进制文件编写缓冲区溢出利用。为了实现缓冲区溢出利用的开发与调试，我们将构建一台 Windows 7 分析和攻击机器，配备行业标准的利用开发工具，如 Immunity Debugger，并学习使用 Kali Linux 内置的 GNU 调试器。 本课程所使用的技术和方法在录制时（2019 年 1 月）是最新的。如果您在此日期之后观看，也不必担心，内容对渗透测试初学者仍然具备高度的相关性。此外，我还将向您介绍一些我认为在获得渗透测试认证（如 OSCP 和 eWPT）之前非常有帮助的免费培训平台，这些培训也帮助我快速提升为一名熟练的渗透测试专家。 我期待与大家一起学习。如有问题，请通过问答系统或直接消息联系我，但请确保问题详细具体。希望您进行独立研究，寻找未遇到的问题的解决方案，这是作为渗透测试者最重要的技能。我建议您在离开评论前尽可能多地学习本课程，以准确评估课程的整体质量。我始终欢迎建设性的反馈，鼓励学生与我分享任何认为可以增补的有价值内容。感谢您的参与，祝您学习愉快！
NOTE: This is independent from my other course, Hands-on Pentration Labs 1.0 - they both have original content and you're not required to buy one or the other by itself.Welcome to my Hands-on Penetration Testing Labs 2.0 course. You can think of this as part 2 of my other course which has a similar name. This lecture will provide an overview of what you can expect for the remainder of this course.First of all, this course is extremely hands-on. This means we're not going to be doing much talking about the theory of penetration testing, we're going to be diving into hands on technical application right away. We'll be using VirtualBox as a software hypervisor to build a host-only lab environment. Not only will this help you gain insight into penetration testing, but will give you the skills and resources to create your own environment to test and research beyond what you learn in this course.The lab is going to consist of Kali Linux, and a variety of intentionally vulnerable Linux and Windows VMs. Some of the things we'll be covering are enumeration and vulnerability scanning and local and remote exploitation with industry standard penetration testing tools such as nmap, dirb, and nikto, Metasploit and standalone exploits. We're also going to focus upon exploit development, covering in detail how to craft a buffer overflow exploit for a custom Linux and Windows binary.In order to accomplish this goal of buffer over flow exploit development and debugging, we're going to be creating a Windows 7 analysis and attack machine. This will have industry standard tools for exploit dev such as Immunity Debugger. We're also going to learn how to use Kali Linux's built in gnu debugger for this purpose.The technology and methodology used is in this course is current at the time of this recording, which is January 2019. If you're watching this after the stated date, don't be worried too much, as this content should still be highly relevant for aspiring penetration testers. I will also be introducing you to several free training platforms which I've found to be extremely helpful prior to earning my many hands-on penetration testing certs including OSCP and eWPT. This training has also helped sky rocket my progress as a skilled senior penetration tester and subject matter expert.I truly hope that you enjoy my course and I'm very excited to be working with all of you. If you have any trouble, please don't hesitate to reach out to me via the Q & A system or by direct message. However, please make sure you include a detailed and specific question, not something like "I can't get it to work". Also, I highly encourage independent research and attempting to find answers on your own. This is the single most important skill as a penetration tester, the ability to find solutions to problems you haven't yet encountered.I ask you to please go through the majority of this course prior to leaving a review so that you can accurately measure the course's quality in entirety. I always appreciate constructive feedback, and encourage students to reach out to me if they think anything valuable could be added to the coursework. Thanks, and have fun!
