January 2021
Intermediate to advanced
547 pages
12h 4m
Chinese
Content preview from 网络安全评估（第三版）
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.
288
｜
第
8
章
•
查询
SMB
和
RPC
服务以枚举系统配置信息。
•
研究可在非认证条件下远程利用的安全漏洞（如
SMB
和
RPC
实现中存在
的漏洞），实现用户枚举、代码执行或特权访问等效果。
•
对暴露的
SMB
、
WMI
和
RDP
接口实施口令暴露破解攻击。
•
进行更深层次的信息查询、代码执行和密钥凭据获取，以及认证后的权限
提升。
微软服务攻击的应对措施
在对微软环境进行加固时，可以考虑如下一些步骤：
•
参阅微软的“
Threats and Countermeasures Guide
”。
•
确保
Windows
系统及时进行更新升级，降低
SMB
、
RPC
和
Kerberos
等关
键服务已知漏洞的影响。
•
严格控制对
SMB
和
RPC
等服务端点的不可信网络访问。
•
使用组策略对象设置实施合理的用户账号锁定策略，降低针对
Windows
域口令暴力破解攻击的有效性。
•
使用
GPO
设置防止对敏感工作站和服务器的网络登录
注
14
，以降低水平式
移动攻击的风险。
•
将本地管理员账号重命名为不显眼的名称，建立一个低权限、强口令的诱
饵式管理员账号。
•
对认证失败进行记录和审计，以便识别标记暴力破解攻击。
SMB
服务的应对措施：
注 14： 参见 Jessica Payne
’
s tweet。
微软服务评估
｜
289
•
限制对命名管道和共享的匿名访问（空会话） ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access
More than 5,000 organizations count on O’Reilly
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.Julian F.
I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.Addison B.
I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.Amir M.
I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.