O'quv darsi / Web Application Security

ZAP, WFuzz, Dirbuster

Zaiflikni avtomatik aniqlash va yashirin yo'llarni topish.

20 daq.o'rta3 komanda5/5

Dars holati

Davom etmoqda

Amaliy komandalar0/3

Streak saqlash uchun kiring

Maqsadlar

ZAP active scan
WFuzz parametr fuzzing
Dirbuster wordlist

Faqat ruxsat etilgan muhitda mashq qiling

Bu darsdagi buyruqlar o'quv simulyatori va o'zingizga tegishli lablar uchun. Begona tizimlarni skanlash yoki sinash qonuniy javobgarlikka olib keladi.

Komandalar

Run tugmasi buyruqni o'ngdagi simulyatorga yuboradi; Copy esa real Kali terminalingiz uchun.

$zap-cli quick-scan --self-contained http://target.lab

$wfuzz -c -z file,wordlist.txt http://target.lab/FUZZ

$gobuster dir -u http://target.lab -w /usr/share/wordlists/dirb/common.txt

Oldingi dars