January 2021
Intermediate to advanced
547 pages
12h 4m
Chinese
Content preview from 网络安全评估（第三版）
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.
常见网络服务评估
｜
191
获取有效的认证凭据之后，可以人工进行权限提升。很多
FTP
服务器漏洞是
通过伪造服务器端恶意文件结构进行渗透利用的，因此能创建相应内容是关
键。
已知的
FTP
漏洞
流行的
FTP
服务器包括
Microsoft IIS FTP Server
、
ProFTPD
和
Pure-FTPd
。
表
7-2
～表
7-4
列出了这些
FTP
服务器相关的一些已知漏洞。其他一些实现
通常也存在可攻击渗透的漏洞，在进行指纹识别以理解已知风险时，应对
NVD
进行查询。
表
7
-
2
：Microsoft IIS FTP Server 漏洞
CVE
编号
影响版本
注释
CVE-2010-3972 IIS 7.0
和
7.5
堆溢出远程利用
a
CVE-2009-3023 IIS 5.0
和
6.0 NLIST
溢出导致通过经过身份验证的会话执行代码
b
a. Metasploit
iis75_ftpd_iac_bof
module.
b. Metasploit
ms09_053_ftpd_nlst
module.
表
7
-
3
：ProFTPD 漏洞
CVE
编号
影响版本
注释
CVE-2015-3306 ProFTPD 1.3.5
mod_copy
中的缺陷使得攻击者可以对任意位
置读写
CVE-2014-6271 ProFTPD (
all versions
) GNU
bash shellshock
中
FTP
服务中
USER
命令
的脆弱性
a
CVE-2011-4130 ProFTPD 1.3.3f
认证后任意使用的错误
，
导致登录时执行代码
CVE-2010-4652 ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access
More than 5,000 organizations count on O’Reilly
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.Julian F.
I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.Addison B.
I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.Amir M.
I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.