2024年3月30日发(作者：)

渗透测试实施方案

目 录

1、渗透测试项目范围 ------------------------------------------------------------------------------------------------------- 3

2、渗透测试说明 -------------------------------------------------------------------------------------------------------------- 4

渗透测试的必要性 --------------------------------------------------------------------------------------------------------- 4

渗透测试的可行性 --------------------------------------------------------------------------------------------------------- 4

渗透测试的原理 ------------------------------------------------------------------------------------------------------------- 5

3、渗透测试流程 -------------------------------------------------------------------------------------------------------------- 5

客户委托 ----------------------------------------------------------------------------------------------------------------------- 7

信息收集分析 ---------------------------------------------------------------------------------------------------------------- 7

提升权限 ----------------------------------------------------------------------------------------------------------------------- 7

4、工具介绍 --------------------------------------------------------------------------------------------------------------------- 7

系统自带网络工具 --------------------------------------------------------------------------------------------------------- 8

自由软件和渗透测试工具 ----------------------------------------------------------------------------------------------- 8

5、渗透测试常用方法 ------------------------------------------------------------------------------------------------------- 9

注入漏洞 ----------------------------------------------------------------------------------------------------------------------- 9

文件上传 ----------------------------------------------------------------------------------------------------------------------- 9

5.3

目录遍历 ----------------------------------------------------------------------------------------------------------------- 9

5.4

XSS跨站攻击 -------------------------------------------------------------------------------------------------------- 10

5.5

弱口令漏洞 ----------------------------------------------------------------------------------------------------------- 10

5.6

溢出漏洞 --------------------------------------------------------------------------------------------------------------- 10