全网最全资料---测试开发工程师必备技能---渗透测试（已完结）【建议收藏】

待我称王封你为后i 2022-10-10 15:59 233阅读 0赞

初遇我ㄖ寸の热情呢？一个喜欢装非主流的主流土鳖程序员。新的系列，让我们一起进入 渗透测试（白帽子） 世界。  
一个测试工程师，一直喜欢探索各种技术栈

![在这里插入图片描述][20210629103732982.gif]

> 现在，安全研究者对网站或者应用程序进行渗透测试而不用任何自动化工具似乎已经越来越难。因此选择一个正确的工具则变得尤为重要，正确的选择甚至可以占到渗透测试成功的半壁江山。  
> ![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzM3NjE1MDk4_size_16_color_FFFFFF_t_70]

[渗透测试1—网络安全法规与岗位技能][1]  
[渗透测试2—软件安全测试知识体系][2]  
[渗透测试3—web渗透测试流程][3_web]  
[渗透测试4—web渗透测试环境搭建][4_web]  
[渗透测试面试基础知识][Link 1]  
[渗透测试5—kaliLinux典型指令][5_kaliLinux]  
[渗透测试6—神器nc，frp内网穿透，window下的netsh端口转发，window下的内网穿透工具lcx][6_nc_frp_window_netsh_window_lcx]  
[渗透测试8—回顾][8]  
[渗透测试9—TCP/IP包分析技术&SYN洪水攻击][9_TCP_IP_SYN]  
[渗透测试10—网络防护工具-防火墙技术][10_-]  
[渗透测试11—被动信息收集技术基础][11]  
[渗透测试12—网络扫描技术][12]  
[渗透测试13—代理原理与技术][13]  
[渗透测试14—shodan和Googlehack语法][14_shodan_Googlehack]  
[渗透测试15—流量识别与控制][15]  
[渗透测试16—渗透测试复习][16]  
[渗透测试17—Metasploit(MSF)部署与功能][17_Metasploit_MSF]  
[渗透测试18—Metasploit实战][18_Metasploit]  
[渗透测试19—AWVS技术][19_AWVS]  
[渗透测试20—burpsuit工具][20_burpsuit]  
[渗透测试21—渗透测试中的数据库][21]  
[渗透测试22—SQL注入实战1][22_SQL_1]  
[渗透测试23—SQL注入实战2][23_SQL_2]  
[渗透测试24—SQLMAP原理及基础][24_SQLMAP]  
[渗透测试25—SQLMAP技术进阶][25_SQLMAP]  
[渗透测试26—xss漏洞技术][26_xss]  
[渗透测试27—xss漏洞实战][27_xss]  
[渗透测试28—CSRF原理、方法和渗透实战][28_CSRF]  
[渗透测试29—命令注入漏洞原理与技术][29]  
[渗透测试30—文件包含漏洞原理与技术][30]  
[渗透测试31—远程文件包含漏洞][31]  
[渗透测试32—文件上传漏洞原理与技术][32]  
[渗透测试33—上传漏洞案例实战][33]  
[渗透测试34—网页后门原理与技术（webshell，weevely，大马（missile，b374k），菜刀）][34_webshell_weevely_missile_b374k]

[20210629103732982.gif]: /images/20221005/55a7385f1ed145d6a64b825b4d574001.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzM3NjE1MDk4_size_16_color_FFFFFF_t_70]: /images/20221005/12ea351c2a98482489697f6acf76806d.png
[1]: https://xuefei.blog.csdn.net/article/details/102684825
[2]: https://xuefei.blog.csdn.net/article/details/102685151
[3_web]: https://xuefei.blog.csdn.net/article/details/102735210
[4_web]: https://xuefei.blog.csdn.net/article/details/102735263
[Link 1]: https://xuefei.blog.csdn.net/article/details/102739090
[5_kaliLinux]: https://xuefei.blog.csdn.net/article/details/102756184
[6_nc_frp_window_netsh_window_lcx]: https://xuefei.blog.csdn.net/article/details/102763252
[8]: https://xuefei.blog.csdn.net/article/details/102878411
[9_TCP_IP_SYN]: https://xuefei.blog.csdn.net/article/details/103260439
[10_-]: https://xuefei.blog.csdn.net/article/details/103273962
[11]: https://xuefei.blog.csdn.net/article/details/103284837
[12]: https://xuefei.blog.csdn.net/article/details/103303513
[13]: https://xuefei.blog.csdn.net/article/details/103341855
[14_shodan_Googlehack]: https://xuefei.blog.csdn.net/article/details/103350953
[15]: https://xuefei.blog.csdn.net/article/details/103385907
[16]: https://xuefei.blog.csdn.net/article/details/103534631
[17_Metasploit_MSF]: https://xuefei.blog.csdn.net/article/details/103545075
[18_Metasploit]: https://xuefei.blog.csdn.net/article/details/103555751
[19_AWVS]: https://xuefei.blog.csdn.net/article/details/103607204
[20_burpsuit]: https://xuefei.blog.csdn.net/article/details/103640311
[21]: https://xuefei.blog.csdn.net/article/details/103658449
[22_SQL_1]: https://xuefei.blog.csdn.net/article/details/103691884
[23_SQL_2]: https://xuefei.blog.csdn.net/article/details/103758549
[24_SQLMAP]: https://xuefei.blog.csdn.net/article/details/103759872
[25_SQLMAP]: https://xuefei.blog.csdn.net/article/details/103797614
[26_xss]: https://xuefei.blog.csdn.net/article/details/103828648
[27_xss]: https://xuefei.blog.csdn.net/article/details/103848670
[28_CSRF]: https://xuefei.blog.csdn.net/article/details/103849457
[29]: https://xuefei.blog.csdn.net/article/details/104077765
[30]: https://xuefei.blog.csdn.net/article/details/104102343
[31]: https://xuefei.blog.csdn.net/article/details/104116674
[32]: https://xuefei.blog.csdn.net/article/details/104126129
[33]: https://xuefei.blog.csdn.net/article/details/104137032
[34_webshell_weevely_missile_b374k]: https://xuefei.blog.csdn.net/article/details/104143773