Security assessment testing process and necessary environment

The WEB security assessment process basically consists of the following processes:

Information collection: including website middleware / scripting language / CMS/ scripting language /

Vulnerability search: including SQL injection vulnerability / XSS vulnerability / file upload and download vulnerability / directory traversal vulnerability

Local authentication: use the VMware virtual machine to build the same environment as the target based on the information collected by the target website

Implementation: after configuring the proxy server, you can start to exploit the target site.

Maintain: leave your own back door for the target site that has been taken and delete the pages that exist on the site

Write reports: write reports on the test process

The workstation version of vmware series products can be used to build the same network environment as the target site.

The latest version of VMware workstation is VMware workstation 15

Product key:

YG5H2-ANZ0H-M8ERY-TXZZZ-YKRV8

UG5J2-0ME12-M89WY-NPWXX-WQH88

UA5DR-2ZD4H-089FY-6YQ5T-YPRX6

GA590-86Y05-4806Y-X4PEE-ZV8E0

ZF582-0NW5N-H8D2P-0XZEE-Z22VA

YA18K-0WY8P-H85DY-L4NZG-X7RAD

Activation key for batch use based on type-30-day trial period for virtual machines can be exempted after product activation

The operations of the virtual machine are:

1: virtual building and deletion

2: movement and cloning of virtual machine files

3: creation and reply of virtual machine snapshot

4: configuration of virtual machine network editor

5: use vmware workstations to control the vmware server version of ESXI

6: install vmware tools enhancement tools and some tips for virtual machines