- Hands-On Bug Hunting for Penetration Testers
- Joseph Marshall
- 87字
- 2021-07-16 17:53:11
Building a Process
If we think about how to build processes the Unix way, with small scripts responsible for single concerns, chained together into more complex workflows (all built on the common foundation of plain text) it makes sense to boil down our automated reconnaissance tools into the smallest reusable parts.
One part is that wrapper script we just wrote, scanjs.sh. This script scans the client-side code of a website (currently from a repo) and compiles a report in json, which it both saves and displays.
推薦閱讀
- Extending Symfony2 Web Application Framework
- 信息安全導論(在線實驗+在線自測)
- 等級保護測評理論及應用
- 數據安全實踐指南
- Digital Forensics with Kali Linux
- CTF特訓營:技術詳解、解題方法與競賽技巧
- 網絡服務安全與監控
- 黑客攻防從入門到精通:黑客與反黑客工具篇(第2版)
- Real-World SRE
- 黑客攻防從入門到精通:實戰篇(第2版)
- BeagleBone for Secret Agents
- 互聯網域名國際化與安全技術導論
- 復雜網絡環境下訪問控制技術
- 防火墻和VPN技術與實踐
- INSTANT Penetration Testing:Setting Up a Test Lab How-to