首页  思维导图  详情

渗透标准

2019-11-06 10:41:04   15  举报





AI智能生成

渗透测试

渗透

作者其他创作

大纲/内容

Web漏洞检测表

1 收集web相关信息，开放端口信息，服务信息等。

2 严禁增/删/改防火墙iptables，私自开通高危端口

3 检查Flash跨域策略文件crossdomain.xml是否合法

4 检查是否有CSRF漏洞,(根据系统条件进行检测)

5 信息泄露漏洞安全性检查（例如test.cgi、phpinfo.php、info.pho、.svn/entries、HTTP认证泄漏漏洞、管理后台泄漏漏洞、内网信息泄漏漏洞、错误详情信息泄漏等）

6 检查是否有XSS漏洞（不合法的参数不能在页面原样返回，特别是openid/openkey）

7 检查是否泄漏后台默认文件漏洞

8检查Flash跨域策略文件的安全性。避免Flash注入javascript或者actionscript脚本在浏览器或者flash中执行跨站攻击

9 Cookie安全性检查

10检查是否有跳转漏洞

11 检查是否有Header注入漏洞

12 检查是否有源代码泄漏漏洞或者备份文件

13 检查是否有Frame-proxy攻击漏洞

14 检查是否有SQL注入攻击漏洞

15 检查是否有并发漏洞

16 敏感信息检查。应用需要对可能造成客户的敏感内容，以及用户生成内容（UGC，由用户发表的言论）进行检查和过滤

17 检查通过WEB页面发起的临时会话窗口的所有显示内容

18 目录浏览漏洞安全性检查

19 检查是否泄漏员工电子邮箱漏洞以及分机号码

20 查看是否有验证码机制，以及验证码机制是否完善

21 检查用户名是否可进行枚举

22 检测网站路径中是否存在robots.txt

23 检查是否部署了Web服务器的控制台，控制台是否存在默认帐号、口令，是否存在弱口令

24 检查网站目录是否可列

25 检测目标认证系统是否存在绕过的可能，未授权访问等

26 检测网站登录后修改密码是否存在缺陷

27 检测Web程序在处理登录过程中用户名和口令的传输是否采用了加密传输的机制

28 检测弱口令，web控制台，数据库，ftp，ssh，telnet，操作系统等

29 检测是否提供注销登陆功能，或者退出后session自动失效

30 检测是否存在浏览器窗口闲置超时后需重新登录的机制

31 检测页面中是否存在的横向越权操作

32 检测应用中存在的URL是否存在纵向越权操作

33 检测是否存在任意文件上传漏洞，并且是否可以解析相关木马文件

34 检测是否存在任意下载，遍历下载系统或者web内的文件

35 检测Web网站在处理用户提交的不存在的URL时会返回错误信息，是否可通过返回的错误信息来确认有敏感信息的泄漏问题

36 检测是否存在遗留的测试页面

37 检测是否会在本地存储不安全的敏感文件

38 检测是否存在命令执行漏洞

40 检测逻辑上的安全问题，是否存在篡改

41 检测是否可通过搜索引擎进行信息收集

认证和授权类

密码明文传输

用户名枚举

暴力攻击

会话标示未更新

未授权访问

文件上传漏洞

任意文件下载

脆弱的SSL算法

越权访问

命令执行类

<span style="font-size:9.0pt;mso-bidi-font-size: 10.5pt;line-height:150%;font-family:"Arial","sans-serif";mso-fareast-font-family: 黑体;mso-bidi-font-family:"Times New Roman";mso-ansi-language:EN-US;mso-fareast-language: ZH-CN;mso-bidi-language:AR-SA;layout-grid-mode:line" lang="EN-US">Struts2 <span style="font-size:9.0pt;mso-bidi-font-size:10.5pt;line-height:150%;font-family: 黑体;mso-ascii-font-family:Arial;mso-hansi-font-family:Arial;mso-bidi-font-family: "Times New Roman";mso-ansi-language:EN-US;mso-fareast-language:ZH-CN; mso-bidi-language:AR-SA;layout-grid-mode:line">远程命令执行

<span style="font-size:9.0pt;mso-bidi-font-size: 10.5pt;line-height:150%;font-family:"Arial","sans-serif";mso-fareast-font-family: 黑体;mso-bidi-font-family:"Times New Roman";mso-ansi-language:EN-US;mso-fareast-language: ZH-CN;mso-bidi-language:AR-SA;layout-grid-mode:line" lang="EN-US">Jboss<span style="font-size:9.0pt;mso-bidi-font-size:10.5pt;line-height:150%;font-family: 黑体;mso-ascii-font-family:Arial;mso-hansi-font-family:Arial;mso-bidi-font-family: "Times New Roman";mso-ansi-language:EN-US;mso-fareast-language:ZH-CN; mso-bidi-language:AR-SA;layout-grid-mode:line">远程命令执行

<span style="font-size:9.0pt;mso-bidi-font-size: 10.5pt;line-height:150%;font-family:"Arial","sans-serif";mso-fareast-font-family: 黑体;mso-bidi-font-family:"Times New Roman";mso-ansi-language:EN-US;mso-fareast-language: ZH-CN;mso-bidi-language:AR-SA;layout-grid-mode:line" lang="EN-US">HTTP.sys<span style="font-size:9.0pt;mso-bidi-font-size:10.5pt;line-height:150%;font-family: 黑体;mso-ascii-font-family:Arial;mso-hansi-font-family:Arial;mso-bidi-font-family: "Times New Roman";mso-ansi-language:EN-US;mso-fareast-language:ZH-CN; mso-bidi-language:AR-SA;layout-grid-mode:line">远程代码执行漏洞

<span style="font-size:9.0pt;mso-bidi-font-size:10.5pt; line-height:150%;font-family:黑体;mso-ascii-font-family:Arial;mso-hansi-font-family: Arial;mso-bidi-font-family:"Times New Roman";mso-ansi-language:EN-US; mso-fareast-language:ZH-CN;mso-bidi-language:AR-SA;layout-grid-mode:line">文件包含

逻辑攻击类

<span style="font-size:9.0pt;mso-bidi-font-size:10.5pt; line-height:150%;font-family:黑体;mso-ascii-font-family:Arial;mso-hansi-font-family: Arial;mso-bidi-font-family:"Times New Roman";mso-ansi-language:EN-US; mso-fareast-language:ZH-CN;mso-bidi-language:AR-SA;layout-grid-mode:line">验证码功能缺陷

<span style="font-size:9.0pt;mso-bidi-font-size:10.5pt; line-height:150%;font-family:黑体;mso-ascii-font-family:Arial;mso-hansi-font-family: Arial;mso-bidi-font-family:"Times New Roman";mso-ansi-language:EN-US; mso-fareast-language:ZH-CN;mso-bidi-language:AR-SA;layout-grid-mode:line">并发漏洞

10.5pt;line-height:150%;font-family:"Arial","sans-serif";mso-fareast-font-family: 黑体;mso-bidi-font-family:"Times New Roman";mso-ansi-language:EN-US;mso-fareast-language: ZH-CN;mso-bidi-language:AR-SA;layout-grid-mode:line" lang="EN-US">Slow Http attack黑体;mso-ascii-font-family:Arial;mso-hansi-font-family:Arial;mso-bidi-font-family: "Times New Roman";mso-ansi-language:EN-US;mso-fareast-language:ZH-CN; mso-bidi-language:AR-SA;layout-grid-mode:line">、慢速攻击

短信攻击

注入攻击类

SQL注入

XML注入

CRLF注入

XFF注入

XPATH注入

命令注入

连接或框架注入

<span style="font-size:9.0pt;mso-bidi-font-size: 10.5pt;line-height:150%;font-family:"Arial","sans-serif";mso-fareast-font-family: 黑体;mso-bidi-font-family:"Times New Roman";mso-ansi-language:EN-US;mso-fareast-language: ZH-CN;mso-bidi-language:AR-SA;layout-grid-mode:line" lang="EN-US">Json<span style="font-size:9.0pt;mso-bidi-font-size:10.5pt;line-height:150%;font-family: 黑体;mso-ascii-font-family:Arial;mso-hansi-font-family:Arial;mso-bidi-font-family: "Times New Roman";mso-ansi-language:EN-US;mso-fareast-language:ZH-CN; mso-bidi-language:AR-SA;layout-grid-mode:line">劫持漏洞

宽字节注入

客户端攻击类

XSS跨站脚本漏洞

跨站伪造请求（CSRF）

不安全的HTTP方法

信息泄露类

目录遍历

<a name="_Toc421000541"><span style="font-size:9.0pt;mso-bidi-font-size:10.5pt;line-height:150%;font-family: "Arial","sans-serif";mso-fareast-font-family:黑体;mso-bidi-font-family:"Times New Roman"; mso-ansi-language:EN-US;mso-fareast-language:ZH-CN;mso-bidi-language:AR-SA; layout-grid-mode:line" lang="EN-US">Web<span style="font-size:9.0pt;mso-bidi-font-size: 10.5pt;line-height:150%;font-family:黑体;mso-ascii-font-family:Arial;mso-hansi-font-family: Arial;mso-bidi-font-family:"Times New Roman";mso-ansi-language:EN-US; mso-fareast-language:ZH-CN;mso-bidi-language:AR-SA;layout-grid-mode:line">容器控制台地址泄漏</a>

PHPInfo()信息泄漏

<span style="font-size:9.0pt;mso-bidi-font-size: 10.5pt;line-height:150%;font-family:"Arial","sans-serif";mso-fareast-font-family: 黑体;mso-bidi-font-family:"Times New Roman";mso-ansi-language:EN-US;mso-fareast-language: ZH-CN;mso-bidi-language:AR-SA;layout-grid-mode:line" lang="EN-US">POODLE<span style="font-size:9.0pt;mso-bidi-font-size:10.5pt;line-height:150%;font-family: 黑体;mso-ascii-font-family:Arial;mso-hansi-font-family:Arial;mso-bidi-font-family: "Times New Roman";mso-ansi-language:EN-US;mso-fareast-language:ZH-CN; mso-bidi-language:AR-SA;layout-grid-mode:line">信息泄露漏洞

SVN信息泄露

备份文件泄露

内网IP地址泄露

Cookie信息泄露

异常信息泄露

敏感信息泄露

IIS断文件名泄露

Robots文件信息泄露

其他类型

跨域访问漏洞

URL重定向

DNS域传送漏洞

开放多余端口

<span style="font-size:9.0pt;mso-bidi-font-size: 10.5pt;line-height:150%;font-family:"Arial","sans-serif";mso-fareast-font-family: 黑体;mso-bidi-font-family:"Times New Roman";mso-ansi-language:EN-US;mso-fareast-language: ZH-CN;mso-bidi-language:AR-SA;layout-grid-mode:line" lang="EN-US">PHP multipart/form-data

. ASP.NET Padding Oracle攻击

 HTTP Host头攻击

SSRF攻击

 TLS1/SSLv3 重协商漏洞

Web服务器解析漏洞

附录

Web安全常见检测工具

APPScan

<span style="font-size:9.0pt;mso-bidi-font-size: 10.5pt;line-height:150%;font-family:"Arial","sans-serif";mso-fareast-font-family: 黑体;mso-bidi-font-family:"Times New Roman";mso-ansi-language:EN-US;mso-fareast-language: ZH-CN;mso-bidi-language:AR-SA;layout-grid-mode:line" lang="EN-US">IBM Rational AppScan<span style="font-size:9.0pt;mso-bidi-font-size:10.5pt;line-height:150%;font-family: 黑体;mso-ascii-font-family:Arial;mso-hansi-font-family:Arial;mso-bidi-font-family: "Times New Roman";mso-ansi-language:EN-US;mso-fareast-language:ZH-CN; mso-bidi-language:AR-SA;layout-grid-mode:line">，在<span style="font-size:9.0pt;mso-bidi-font-size:10.5pt;line-height:150%;font-family: "Arial","sans-serif";mso-fareast-font-family:黑体;mso-bidi-font-family:"Times New Roman"; mso-ansi-language:EN-US;mso-fareast-language:ZH-CN;mso-bidi-language:AR-SA; layout-grid-mode:line" lang="EN-US">Web<span style="font-size:9.0pt;mso-bidi-font-size: 10.5pt;line-height:150%;font-family:黑体;mso-ascii-font-family:Arial;mso-hansi-font-family: Arial;mso-bidi-font-family:"Times New Roman";mso-ansi-language:EN-US; mso-fareast-language:ZH-CN;mso-bidi-language:AR-SA;layout-grid-mode:line">安全测试中所使用的自动化扫描工具

WVS

Acunetix WVS Reporter 自动化的Web应用程序安全测试工具

Netsparker

一款综合型的web应用安全漏洞扫描工具

<span style="font-size:9.0pt;mso-bidi-font-size: 10.5pt;line-height:150%;font-family:"Arial","sans-serif";mso-fareast-font-family: 黑体;mso-bidi-font-family:"Times New Roman";mso-ansi-language:EN-US;mso-fareast-language: ZH-CN;mso-bidi-language:AR-SA;layout-grid-mode:line" lang="EN-US">Httprint

<span style="font-size:9.0pt;mso-bidi-font-size: 10.5pt;line-height:150%;font-family:"Arial","sans-serif";mso-fareast-font-family: 黑体;mso-bidi-font-family:"Times New Roman";mso-ansi-language:EN-US;mso-fareast-language: ZH-CN;mso-bidi-language:AR-SA;layout-grid-mode:line" lang="EN-US">Web<span style="font-size:9.0pt;mso-bidi-font-size:10.5pt;line-height:150%;font-family: 黑体;mso-ascii-font-family:Arial;mso-hansi-font-family:Arial;mso-bidi-font-family: "Times New Roman";mso-ansi-language:EN-US;mso-fareast-language:ZH-CN; mso-bidi-language:AR-SA;layout-grid-mode:line">服务器类型和版本的探测工具

<span style="font-size:9.0pt;mso-bidi-font-size: 10.5pt;line-height:150%;font-family:"Arial","sans-serif";mso-fareast-font-family: 黑体;mso-bidi-font-family:"Times New Roman";mso-ansi-language:EN-US;mso-fareast-language: ZH-CN;mso-bidi-language:AR-SA;layout-grid-mode:line" lang="EN-US">Sqlmap

<span style="font-size:9.0pt;mso-bidi-font-size: 10.5pt;line-height:150%;font-family:"Arial","sans-serif";mso-fareast-font-family: 黑体;mso-bidi-font-family:"Times New Roman";mso-ansi-language:EN-US;mso-fareast-language: ZH-CN;mso-bidi-language:AR-SA;layout-grid-mode:line" lang="EN-US">SQL<span style="font-size:9.0pt;mso-bidi-font-size:10.5pt;line-height:150%;font-family: 黑体;mso-ascii-font-family:Arial;mso-hansi-font-family:Arial;mso-bidi-font-family: "Times New Roman";mso-ansi-language:EN-US;mso-fareast-language:ZH-CN; mso-bidi-language:AR-SA;layout-grid-mode:line">注入测试工具

10.5pt;line-height:150%;font-family:"Arial","sans-serif";mso-fareast-font-family: 黑体;mso-bidi-font-family:"Times New Roman";mso-ansi-language:EN-US;mso-fareast-language: ZH-CN;mso-bidi-language:AR-SA;layout-grid-mode:line" lang="EN-US">WireShark

<span style="font-size:9.0pt;mso-bidi-font-size:10.5pt; line-height:150%;font-family:黑体;mso-ascii-font-family:Arial;mso-hansi-font-family: Arial;mso-bidi-font-family:"Times New Roman";mso-ansi-language:EN-US; mso-fareast-language:ZH-CN;mso-bidi-language:AR-SA;layout-grid-mode:line">网络协议抓包与分析工具

<span style="font-size:9.0pt;mso-bidi-font-size: 10.5pt;line-height:150%;font-family:"Arial","sans-serif";mso-fareast-font-family: 黑体;mso-bidi-font-family:"Times New Roman";mso-ansi-language:EN-US;mso-fareast-language: ZH-CN;mso-bidi-language:AR-SA;layout-grid-mode:line" lang="EN-US">Burp suite

<span style="font-size:9.0pt;mso-bidi-font-size:10.5pt; line-height:150%;font-family:黑体;mso-ascii-font-family:Arial;mso-hansi-font-family: Arial;mso-bidi-font-family:"Times New Roman";mso-ansi-language:EN-US; mso-fareast-language:ZH-CN;mso-bidi-language:AR-SA;layout-grid-mode:line">神器，可以对浏览器与<span style="font-size:9.0pt;mso-bidi-font-size:10.5pt;line-height:150%; font-family:"Arial","sans-serif";mso-fareast-font-family:黑体;mso-bidi-font-family: "Times New Roman";mso-ansi-language:EN-US;mso-fareast-language:ZH-CN; mso-bidi-language:AR-SA;layout-grid-mode:line" lang="EN-US">Web<span style="font-size:9.0pt;mso-bidi-font-size:10.5pt;line-height:150%;font-family: 黑体;mso-ascii-font-family:Arial;mso-hansi-font-family:Arial;mso-bidi-font-family: "Times New Roman";mso-ansi-language:EN-US;mso-fareast-language:ZH-CN; mso-bidi-language:AR-SA;layout-grid-mode:line">服务器之间的通信数据进行编辑修改

<span style="font-size:9.0pt;mso-bidi-font-size: 10.5pt;line-height:150%;font-family:"Arial","sans-serif";mso-fareast-font-family: 黑体;mso-bidi-font-family:"Times New Roman";mso-ansi-language:EN-US;mso-fareast-language: ZH-CN;mso-bidi-language:AR-SA;layout-grid-mode:line" lang="EN-US">Nmap

<span style="font-size:9.0pt;mso-bidi-font-size:10.5pt; line-height:150%;font-family:黑体;mso-ascii-font-family:Arial;mso-hansi-font-family: Arial;mso-bidi-font-family:"Times New Roman";mso-ansi-language:EN-US; mso-fareast-language:ZH-CN;mso-bidi-language:AR-SA;layout-grid-mode:line">端口扫描，服务识别，操作系统指纹识别

<span style="font-size:9.0pt;mso-bidi-font-size: 10.5pt;line-height:150%;font-family:"Arial","sans-serif";mso-fareast-font-family: 黑体;mso-bidi-font-family:"Times New Roman";mso-ansi-language:EN-US;mso-fareast-language: ZH-CN;mso-bidi-language:AR-SA;layout-grid-mode:line" lang="EN-US">NetCat

<span style="font-size:9.0pt;mso-bidi-font-size:10.5pt; line-height:150%;font-family:黑体;mso-ascii-font-family:Arial;mso-hansi-font-family: Arial;mso-bidi-font-family:"Times New Roman";mso-ansi-language:EN-US; mso-fareast-language:ZH-CN;mso-bidi-language:AR-SA;layout-grid-mode:line">端口连接，数据提交

<span style="font-size:9.0pt;mso-bidi-font-size: 10.5pt;line-height:150%;font-family:"Arial","sans-serif";mso-fareast-font-family: 黑体;mso-bidi-font-family:"Times New Roman";mso-ansi-language:EN-US;mso-fareast-language: ZH-CN;mso-bidi-language:AR-SA;layout-grid-mode:line" lang="EN-US">Tamper IE

<span style="font-size:9.0pt;mso-bidi-font-size: 10.5pt;line-height:150%;font-family:"Arial","sans-serif";mso-fareast-font-family: 黑体;mso-bidi-font-family:"Times New Roman";mso-ansi-language:EN-US;mso-fareast-language: ZH-CN;mso-bidi-language:AR-SA;layout-grid-mode:line" lang="EN-US">HTTP<span style="font-size:9.0pt;mso-bidi-font-size:10.5pt;line-height:150%;font-family: 黑体;mso-ascii-font-family:Arial;mso-hansi-font-family:Arial;mso-bidi-font-family: "Times New Roman";mso-ansi-language:EN-US;mso-fareast-language:ZH-CN; mso-bidi-language:AR-SA;layout-grid-mode:line">数据包修改、转发工具（<span style="font-size:9.0pt;mso-bidi-font-size:10.5pt;line-height:150%; font-family:"Arial","sans-serif";mso-fareast-font-family:黑体;mso-bidi-font-family: "Times New Roman";mso-ansi-language:EN-US;mso-fareast-language:ZH-CN; mso-bidi-language:AR-SA;layout-grid-mode:line" lang="EN-US">Firefox<span style="font-size:9.0pt;mso-bidi-font-size:10.5pt;line-height:150%;font-family: 黑体;mso-ascii-font-family:Arial;mso-hansi-font-family:Arial;mso-bidi-font-family: "Times New Roman";mso-ansi-language:EN-US;mso-fareast-language:ZH-CN; mso-bidi-language:AR-SA;layout-grid-mode:line">插件）

Fiddler

Http协议调试代理工具