Repository navigation
Expand file tree
/
Copy path15446864537652.html
More file actions
493 lines (293 loc) · 15.2 KB
/
Copy path15446864537652.html
File metadata and controls
493 lines (293 loc) · 15.2 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
<!doctype html>
<html class="no-js" lang="en">
<head>
<meta charset="utf-8" />
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
<title>
Web安全工程师求职清单 - lonelyorのblog
</title>
<link href="atom.xml" rel="alternate" title="lonelyorのblog" type="application/atom+xml">
<link rel="stylesheet" href="asset/css/foundation.min.css" />
<link rel="stylesheet" href="asset/css/docs.css" />
<script src="asset/js/vendor/modernizr.js"></script>
<script src="asset/js/vendor/jquery.js"></script>
<script src="asset/highlightjs/highlight.pack.js"></script>
<link href="asset/highlightjs/styles/github.css" media="screen, projection" rel="stylesheet" type="text/css">
<script>hljs.initHighlightingOnLoad();</script>
<script type="text/javascript">
function before_search(){
var searchVal = 'site:www.lonelyor.org/lonelyorNotes ' + document.getElementById('search_input').value;
document.getElementById('search_q').value = searchVal;
return true;
}
</script>
</head>
<body class="antialiased hide-extras">
<div class="marketing off-canvas-wrap" data-offcanvas>
<div class="inner-wrap">
<nav class="top-bar docs-bar hide-for-small" data-topbar>
<section class="top-bar-section">
<div class="row">
<div style="position: relative;width:100%;"><div style="position: absolute; width:100%;">
<ul id="main-menu" class="left">
<li id=""><a target="_self" href="index.html">主页</a></li>
<li id=""><a target="_self" href="archives.html">归档</a></li>
<li id=""><a target="_self" href="lost.html">失乐园</a></li>
<li id=""><a target="_self" href="about.html">关于</a></li>
</ul>
<ul class="right" id="search-wrap">
<li>
<form target="_blank" onsubmit="return before_search();" action="https://google.com/search" method="get">
<input type="hidden" id="search_q" name="q" value="" />
<input tabindex="1" type="search" id="search_input" placeholder="Search"/>
</form>
</li>
</ul>
</div></div>
</div>
</section>
</nav>
<nav class="tab-bar show-for-small">
<a href="javascript:void(0)" class="left-off-canvas-toggle menu-icon">
<span> lonelyorのblog</span>
</a>
</nav>
<aside class="left-off-canvas-menu">
<ul class="off-canvas-list">
<li><a target="_self" href="index.html">主页</a></li>
<li><a target="_self" href="archives.html">归档</a></li>
<li><a target="_self" href="lost.html">失乐园</a></li>
<li><a target="_self" href="about.html">关于</a></li>
<li><label>Categories</label></li>
<li><a href="Web%E6%94%BB%E9%98%B2.html">Web攻防</a></li>
<li><a href="%E6%93%8D%E4%BD%9C%E7%B3%BB%E7%BB%9F.html">操作系统</a></li>
<li><a href="%E8%99%9A%E6%8B%9F%E5%AE%9E%E9%AA%8C%E5%AE%A4.html">虚拟实验室</a></li>
<li><a href="CTF.html">CTF</a></li>
<li><a href="%E5%BC%80%E5%8F%91.html">开发</a></li>
<li><a href="%E6%B5%8F%E8%A7%88%E5%99%A8.html">浏览器</a></li>
<li><a href="%E5%A5%87%E6%B7%AB%E5%B7%A7%E6%8A%80.html">奇淫巧技</a></li>
</ul>
</aside>
<a class="exit-off-canvas" href="#"></a>
<section id="main-content" role="main" class="scroll-container">
<script type="text/javascript">
$(function(){
$('#menu_item_index').addClass('is_active');
});
</script>
<div class="row">
<div class="large-8 medium-8 columns">
<div class="markdown-body article-wrap">
<div class="article">
<h1>Web安全工程师求职清单</h1>
<div class="read-more clearfix">
<span class="date">2018/12/13 15:34 下午</span>
<span>posted in </span>
<span class="posted-in"><a href='Checklist.html'>Checklist</a></span>
<span class="comments">
</span>
</div>
</div><!-- article -->
<div class="article-content">
<blockquote>
<p>一年前写的一点玩意，没什么卵用</p>
</blockquote>
<h2 id="toc_0">安全资讯</h2>
<p><a href="http://www.freebuf.com/">freebuf</a></p>
<p><a href="https://www.t00ls.net/">tools</a></p>
<p><a href="https://www.secpulse.com/">安全脉搏</a></p>
<p><a href="https://packetstormsecurity.com/">数据包风暴</a></p>
<p><a href="http://www.4hou.com/">嘶吼</a></p>
<p><a href="https://www.aqniu.com/">安全牛</a></p>
<p><a href="https://www.anquanke.com/">安全客</a></p>
<p><a href="https://www.sec-wiki.com/">sec-wiki</a></p>
<p><a href="http://www.secdoctor.com/">中国信息安全博士网</a></p>
<h2 id="toc_1">威胁情报</h2>
<p>暂略</p>
<h2 id="toc_2">安全工具</h2>
<p><a href="https://www.ctftools.com/down/">最强安全工具集</a></p>
<ul>
<li>burpsuite(抓包)</li>
<li>sqlmap(sql注入)</li>
<li>whireshark(网络抓包)</li>
<li>中国菜刀(webshell、一句话后门)</li>
<li>HxD(十六进制编辑器和磁盘编辑器)</li>
<li>nmap(扫描)</li>
<li>hydra(爆破)</li>
<li>cain(爆破)</li>
<li>metasploit(漏洞利用)</li>
<li>mitmproxy(http/https代理)</li>
<li>commix(命令注入)</li>
<li>httrack(网站克隆)</li>
<li>netcat(瑞士军刀-网络调试和探测工具)</li>
<li>scapy(python的交互式数据包操作程序和库)</li>
<li>empire(域渗透)</li>
</ul>
<h2 id="toc_3">靶机环境</h2>
<h2 id="toc_4">安全知识库</h2>
<p><a href="https://www.anquanquan.info/">安全圈</a></p>
<p><a href="http://wiki.open.qq.com/wiki/%E7%AC%AC%E4%B8%89%E6%96%B9%E5%BA%94%E7%94%A8%E5%BC%80%E5%8F%91%E5%AE%89%E5%85%A8%E8%A7%84%E8%8C%83">腾讯安全开发规范</a></p>
<p><a href="https://highon.coffee/blog/cheat-sheet/">安全研究备忘单</a></p>
<p><a href="https://portswigger.net/kb/issues">Burp漏洞定义</a></p>
<p><a href="https://www.offensive-security.com/metasploit-unleashed/">MSF框架终极指南</a></p>
<p><a href="https://www.owasp.org/index.php/Main_Page">OWASP</a></p>
<p><a href="http://vipread.com/index">vipread知识库</a></p>
<p><a href="https://kb.help.rapid7.com/docs/">Rapid7知识库</a></p>
<p><a href="https://kernelnewbies.org/">linux内核研究</a></p>
<p><a href="http://www.loner.fm/bugs/">乌云漏洞</a></p>
<p><a href="https://wooyun.js.org/">乌云文章</a></p>
<p><a href="http://www.office-cn.net/t/api/index.html?web.htm">WindowsAPI参考手册</a></p>
<p><a href="https://support.portswigger.net/customer/portal/articles/2326039-the-burp-methodology">Burp方法论</a></p>
<p><a href="https://ctf-wiki.github.io/ctf-wiki/">CTF-Wiki</a></p>
<p><a href="https://github.com/ctfs/">CTFs</a></p>
<p><a href="https://ctftime.org">ctftime</a></p>
<p><a href="https://www.codesec.net/">代码安全</a></p>
<p><a href="https://silic.wiki/doku.php">习科小黑板</a></p>
<p><a href="https://bbs.safewiki.org/portal.php">安全文库</a></p>
<p><a href="http://webscan.360.cn/vul">360网站常见漏洞</a></p>
<h2 id="toc_5">漏洞平台</h2>
<p><a href="https://butian.360.cn/">补天</a></p>
<p><a href="https://www.vulbox.com/">漏洞盒子</a></p>
<p><a href="https://www.bugbank.cn/">漏洞银行</a></p>
<p><a href="http://www.cnvd.org.cn/">CNVD国家信息安全漏洞共享平台</a></p>
<p><a href="https://src.edu-info.edu.cn/">教育行业漏洞报告平台</a></p>
<p><a href="https://www.seebug.org">Seebug</a></p>
<p><a href="http://0xsafe.org/vuldb.html">Vuldbs漏洞平台</a></p>
<h2 id="toc_6">技能要求</h2>
<ul>
<li>不同场景下的渗透测试流程、方法</li>
<li>常见漏洞的攻击方法和防御方法</li>
<li>代码级白盒测试能力</li>
<li>owasp_top10概念、原理、测试方法、防御方法</li>
<li>主流防火墙、IDS、IPS、漏洞扫描工具的安装、使用方法</li>
<li>熟悉python、php、javascript、c、c++等语言的一种或多种</li>
<li>cissp之类的证书或ctf解题能力是加分项</li>
<li>各种靶机环境搭建</li>
<li>安全分析报告的编写</li>
<li>对业务快速熟悉的能力（业务安全重点、应用范围划分、业务安全基线）</li>
<li>spring、struts、hibernate框架安全相关</li>
<li>web组件加固、服务器加固、数据库加固</li>
<li>域渗透、dns、arp等内网渗透知识</li>
<li>各类提权如系统提权、数据库提权等</li>
<li>风险评估、等级保护、安全体系规划、安全体系建设。包括信息资产管理、安全威胁和风险评估、安全解决方案制定、信息安全体系实施</li>
<li>Nginx、Apache、Tomcat等安全配置基线</li>
<li>各类安全测试标准(ISSAF、OSSTMM、OWASP、微软SDLC、OPENSAMM、BSIMM、SSECMM)</li>
<li>网络日志分析、攻击流量检测</li>
<li>hadoop、openstack、sdn云安全</li>
<li>mongodb、redis、HBASE等nosql安全</li>
<li>burpsuite插件编写</li>
<li>python脚本开发能力、shell脚本开发能力</li>
</ul>
</div>
<div class="row">
<div class="large-6 columns">
<p class="text-left" style="padding:15px 0px;">
<a href="15446866501207.html"
title="Previous Post: IIS短文件名漏洞">« IIS短文件名漏洞</a>
</p>
</div>
<div class="large-6 columns">
<p class="text-right" style="padding:15px 0px;">
<a href="15446861280668.html"
title="Next Post: hackthebox邀请码">hackthebox邀请码 »</a>
</p>
</div>
</div>
<div class="comments-wrap">
<div class="share-comments">
</div>
</div>
</div><!-- article-wrap -->
</div><!-- large 8 -->
<link rel="bookmark" href="http://images.lonelyor.org/favicon.ico" />
<link rel="shortcut icon" href="http://images.lonelyor.org/favicon.ico" />
<script id="dsq-count-scr" src="//lonelyor.disqus.com/count.js" async></script>
<div class="large-4 medium-4 columns">
<div class="hide-for-small">
<div id="sidebar" class="sidebar">
<div id="site-info" class="site-info">
<div class="site-a-logo"><img src="http://images.lonelyor.org/lonelyornotesico.jpeg" /></div>
</br>
<h1>lonelyorのblog</h1>
<div class="site-des">一个用来记录学习笔记的网站</div>
<div class="social">
<a target="_blank" class="github" target="_blank" href="https://github.com/AlShelley/lonelyorNotes" title="GitHub">GitHub</a>
<a target="_blank" class="email" href="mailto:lonelyor.org@gmail.com" title="Email">Email</a>
<a target="_blank" class="rss" href="atom.xml" title="RSS">RSS</a>
</div>
</div>
<div id="site-categories" class="side-item ">
<div class="side-header">
<h2>分类</h2>
</div>
<div class="side-content">
<p class="cat-list">
<a href="Web%E6%94%BB%E9%98%B2.html"><strong>Web攻防</strong></a>
<a href="%E6%93%8D%E4%BD%9C%E7%B3%BB%E7%BB%9F.html"><strong>操作系统</strong></a>
<a href="%E8%99%9A%E6%8B%9F%E5%AE%9E%E9%AA%8C%E5%AE%A4.html"><strong>虚拟实验室</strong></a>
<a href="CTF.html"><strong>CTF</strong></a>
<a href="%E5%BC%80%E5%8F%91.html"><strong>开发</strong></a>
<a href="%E6%B5%8F%E8%A7%88%E5%99%A8.html"><strong>浏览器</strong></a>
<a href="%E5%A5%87%E6%B7%AB%E5%B7%A7%E6%8A%80.html"><strong>奇淫巧技</strong></a>
</p>
</div>
</div>
<div id="site-categories" class="side-item">
<div class="side-header">
<h2>最新文章</h2>
</div>
<div class="side-content">
<ul class="posts-list">
<li class="post">
<a href="15453720146052.html">Pycharm编程遇到的技巧</a>
</li>
<li class="post">
<a href="15453717965995.html">npm Cannot find module 'semver' --解决方案</a>
</li>
<li class="post">
<a href="15453716917526.html">mongodb安装配置（arch）</a>
</li>
<li class="post">
<a href="15453714645346.html">linux安装配置aria2及其Web图形界面（debian为例）</a>
</li>
<li class="post">
<a href="15453713553710.html">linux下搜狗输入法不能用的解决办法</a>
</li>
</ul>
</div>
</div>
</div><!-- sidebar -->
</div><!-- hide for small -->
</div><!-- large 4 -->
</div><!-- row -->
<div class="page-bottom clearfix">
<div class="row">
<p class="copyright">Copyright © 2018
Powered by <a target="_blank" href="http://www.mweb.im">MWeb</a>,
Theme used <a target="_blank" href="http://github.com">GitHub CSS</a>,
Author is <a target="_blank" href="http://lonelyor.org">lonelyor</a>
</p>
</div>
</div>
</section>
</div>
</div>
<script src="asset/js/foundation.min.js"></script>
<script>
$(document).foundation();
function fixSidebarHeight(){
var w1 = $('.markdown-body').height();
var w2 = $('#sidebar').height();
if (w1 > w2) { $('#sidebar').height(w1); };
}
$(function(){
fixSidebarHeight();
})
$(window).load(function(){
fixSidebarHeight();
});
</script>
<div class="bdsharebuttonbox"><a href="#" class="bds_more" data-cmd="more">分享到：</a><a href="#" class="bds_qzone" data-cmd="qzone" title="分享到QQ空间">QQ空间</a><a href="#" class="bds_weixin" data-cmd="weixin" title="分享到微信">微信</a><a href="#" class="bds_tsina" data-cmd="tsina" title="分享到新浪微博">新浪微博</a><a href="#" class="bds_tqq" data-cmd="tqq" title="分享到腾讯微博">腾讯微博</a><a href="#" class="bds_fbook" data-cmd="fbook" title="分享到Facebook">Facebook</a></div>
<script>window._bd_share_config={"common":{"bdSnsKey":{},"bdText":"来自：http://www.lonelyor.org/","bdMini":"1","bdMiniList":["sqq","weixin","fbook","twi","qzone","tsina","tqq","tieba","douban","tsohu","linkedin","mshare","copy"],"bdPic":"http://images.lonelyor.org/lonelyornotesico.jpeg","bdStyle":"1","bdSize":"16"},"share":{"bdSize":16},"image":{"viewList":["qzone","weixin","tsina","tqq","fbook"],"viewText":"分享到：","viewSize":"24"},"selectShare":{"bdContainerClass":null,"bdSelectMiniList":["qzone","weixin","tsina","tqq","fbook"]}};with(document)0[(getElementsByTagName('head')[0]||body).appendChild(createElement('script')).src='http://bdimg.share.baidu.com/static/api/js/share.js?v=89860593.js?cdnversion='+~(-new Date()/36e5)];</script>
</body>
</html>