|
所在平台: Udemy |
课程主页: https://www.udemy.com/course/network-security-auditing-with-nmap/
课程评论：没有评论
课程名称：使用 Nmap 进行网络安全审计 课程概述： 本课程专为想要掌握 Nmap 工具的学员设计，Nmap 是渗透测试人员、网络管理员、安全爱好者和漏洞赏金猎人广泛使用的最流行和灵活的工具。课程提供清晰易懂的指引和实践演示，内容和技术均来源于我作为网络和网络应用渗透测试人员的经验，涵盖最相关和直接有效的技术。 课程内容： 课程将从 TCP 三次握手的基本知识开始，为 Nmap 扫描打下基础，进而深入到使用 Nmap 安全扫描器进行网络安全评估的高级技术。主要内容包括： - Nmap 入门 - 扫描基本原理 - Nmap 的基本扫描技术 - 检测主机、操作系统及服务版本 - 有用的 Nmap 脚本扫描以发现漏洞和审计服务 - 在 Zenmap（Nmap 前端）上创建扫描配置 - 绕过和测试防火墙 - 提高扫描性能 - 报告创建 - 自动化 Nmap 扫描 学习成果： 完成本课程后，学员将能够熟练掌握： - 端口扫描技术，并优化 Nmap 的速度和准确性 - 利用 Nmap 脚本的选项进行一键式复杂扫描 - 使用强大的 Nmap 脚本引擎对Web服务器、邮件服务器和Web应用进行漏洞评估 - 对 FTP、TELNET、SSH 等活动服务进行密码审计 - 测试不正确配置的防火墙/入侵检测系统并绕过弱规则集 - 创建 Nmap 扫描报告，自动化和管理网络范围内的扫描，监控资产的任何错误配置和/或漏洞。 通过这门课程，您将获得实用的网络安全审计技能，为网络安全测试打下坚实的基础。
Course SnapshotNmap is the most popular and flexible tool widely used by Penetration testers, network administrators, security enthusiasts & bug bounty hunters. Nmap offers a ton of options to perform scans. This course is created to master the nmap tool with clear and easy to follow instructions & hands-on demonstrations.The contents & techniques in the course are derived from my experience as a network & web application pentester. So, I will be touching on the most relevant & straight forward techniques that actually have worked during my experience on-field.The course will start with explanation on Basics of TCP 3-way handshake to build up the base for nmap scans to advanced for performing network security assessments with nmap security scanner.Practical examples and underlying concepts of nmap scanner and will teach you on: Getting started with nmap Fundamentals of scanning. Basic scan techniques of nmap Detecting hosts, Operating Systems & Service versions. Useful Nmap script scans for vulnerability detection & auditing services. Creating scan profiles on Zenmap - Frontend for nmap. Evading and testing firewalls Improving scan performance Report creation Automating nmap scansAt the end of the course, you will be proficient in:Port scanning techniques & fine-tune nmap for speed & accuracy.Implement the options provided by nmap scripts to perform complex scans in one go.With powerful Nmap Scripting Engine, perform vulnerability assessments for webservers, mail servers, web applications.Do password auditing for active services like FTP, TELNET, SSH, etc.Test for misconfigured firewalls/IDSes and bypass weak rulesets.Create nmap scan reports, Automate and manage network-wide scans, monitor the assets for any misconfigurations and/or vulnerabilities.
