classification
exclusiveBlack box penetration testing guidance passed down
I. attack scenarios
Upload webshell directly
Describe many application systems...
Free 
exclusiveDownload penetration testing guidance
attack scenarios
Download without defense
Description:
Many application systems or components provide...
Free 
exclusiveForwarding and redirecting black box penetration testing guidance
forward(forward)
It is a jump on the server side, where a request is sent from the client to the service...
Free 
exclusiveBlack Box Penetration Testing Guide Cross-site Forging Request CSRF
CSRF ( Cross Site Request Forgery) is a Web application attacker...
Free 
exclusivePenetration testing guidance document contains attacks
1. Attack scenario
File inclusion attack
described
The file contains vulnerabilities that are "code notes...
Free 
exclusiveBlack Box Penetration Testing Guide: SQL Injection
Test using automated scanning tools
Tools:AppScan,WebInspect,AWVS, etc.
Test method: Use automatic...
Free
exclusiveBlack Box Penetration Testing Guide: XML Injection
I. attack scenarios
Send XML requests directly
described
Many application systems or components require...
Free 
English 
Chinese