25
使用Netsparker扫描及**某站点-simeon技术专栏
source link: http://blog.51cto.com/simeon/2284291
Go to the source link to view the article. You can view the picture content, updated content and better typesetting reading experience. If the link is broken, please click the button below to view the snapshot at that time.
目前市面上漏洞扫描软件有多款，前面介绍了一些扫描软件例如awvs对目标站点进行扫描，其实国外还有一款扫描软件Netsparker也挺厉害，扫描误报率低，扫描效果还不错。在本文中，对一个目标站点进行扫描，并未发现高危漏洞，但通过列目录漏洞以及敏感信息泄露文件，成功获取了某网站的webshell及其服务器权限
Recommend
About Joyk
Aggregate valuable and interesting links.
Joyk means Joy of geeK