January 2021
Intermediate to advanced
547 pages
12h 4m
Chinese
Content preview from 网络安全评估（第三版）
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.
188
第 7 章
常见网络服务评估
本章详细介绍了用于对
FTP
、
SSH
、
Telnet
、
DNS
、
NTP
、
SNMP
、
LDAP
和
Kerberos
等协议进行评估的策略和技术。漏洞扫描器可用于对网络服务进行
自动化脚本测试，人工手段可用于完成如下任务：
•
对自动化工具的输出信息进行评判。
•
理解目标环境的低层配置。
•
填补测试覆盖度的差距。
表
7-1
列出了本章讲述的各种服务对应的缺省
TCP
、
UDP
端口，最后一列用
于标注
THC Hydra
注
1
工具是否支持对该协议进行暴力破解。从表
7-1
中可以
看到，一些
RPC
服务使用动态的高端口。此外，
SSH
和
FTP
等服务可以使用
替代的端口。
表
7
-
1
：本章详细描述的服务
端口
协议
TLS
名称
描述
Hydra
TCP UDP
21
●
– –
ftp
文件传输协议
●
990
●
–
●
ftps
注 1： 参见
https://www.thc.org/thc-hydra/
。
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access
More than 5,000 organizations count on O’Reilly
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.Julian F.
I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.Addison B.
I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.Amir M.
I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.