전체 글

DevOps Security Specialist를 목표하는 Security Compliance Engineer의 블로그

old/Web

[자료] How to: Install Fuzzbunch

2017.04.24

down : https://github.com/x0rz/EQGRP_Lost_in_Translation What are Fuzzbunch & DanderSpritz?Fuzzbunch is what Metasploit is to penetration testers. It is an an easy to use framework written in Python, that allows you to launch exploits and interact with different supported implants. DanderSpritz is a Java based management command & control console to administer compromised computers. Think of it ..

old/Web

[자료] LFI 설명

2017.04.24

IntroductionThe intent of this document is to help penetration testers and students identify and test LFI vulnerabilities on future pen testing engagements by consolidating research for local file inclusion LFI testing techniques. LFI vulnerabilities are typically discovered during web app pen tests using the techniques contained within this document. Additionally, some of the techniques mention..

old/Server

[자료] windows cmd 환경에서 모의 침투 시 사용하는 명령어 모음

2017.04.20

http://infosecaddicts.com/using-apt-tactics-techniques-pentests/

[자료] How to: Install Fuzzbunch

[자료] LFI 설명

[자료] windows cmd 환경에서 모의 침투 시 사용하는 명령어 모음

티스토리툴바