January 2021
Intermediate to advanced
547 pages
12h 4m
Chinese
Overview
你的网络有多安全？使用与攻击者识别和利用脆弱性相同的策略，来对你的网络开展攻击，是找出答案的最好方法。通过这本实用指南，你将学习如何以结构化的方式执行基于网络的渗透测试。本书作者演示了常见的脆弱性，以及在你的环境中识别这些脆弱性的步骤。
系统的复杂性和攻击平面都在持续增长，本书提供了一个帮助你降低网络风险的过程。每章都包括一份总结攻击者技术的清单，以及你可以立即使用的有效对策。
本书可以学到如何有效测试系统组件，包括:
- 公共服务，如SSH、FTP、Kerberos、SNMP和LDAP。
- 微软公司服务，包括NetBIOS、SMB、RPC和RDP。
- SMTP、POP3和IMAP电子邮件服务。
- 提供安全网络访问的IPsec和PPTP服务。
- 提供运输安全的TLS协议和功能。
- 网络服务器软件，包括微软公司的IIS、Apache和Nginx。
- 框架，包括Rails、Django、微软ASP.NET和PHP。
- 数据库服务器、存储协议和键值对存储。
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access
More than 5,000 organizations count on O’Reilly
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.Julian F.
I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.Addison B.
I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.Amir M.
I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.