“exploit”的搜索结果

Plan and execute a comprehensive red team engagement covering reconnaissance through post-exploitation using MITRE ATT&CK-aligned TTPs to evaluate an organization's detection and response capabilities.

中文简介正在准备中。当前显示原文说明。

Build and configure a resilient command-and-control infrastructure using BishopFox's Sliver C2 framework with redirectors, HTTPS listeners, and multi-operator support for authorized red team engagements.

中文简介正在准备中。当前显示原文说明。

Analyzes network traffic captures and flow data to identify adversary activity during security incidents, including command-and-control communications, lateral movement, data exfiltration, and exploitation attempts. Uses Wireshark, Zeek, and NetFlow analysis techniques. Activates for requests involving network traffic analysis, packet capture investigation, PCAP analysis, network forensics, C2 traffic detection, or exfiltration detection.

中文简介正在准备中。当前显示原文说明。

Zigbee, Thread, and Matter mesh-protocol attack methodology — IEEE 802.15.4 sniffing with TI CC2531 / CC2540 / Sonoff Zigbee Dongle E, KillerBee toolkit, Touchlink commissioning abuse with the well-known transport key, replay/injection attacks, Zigbee Cluster Library command abuse for door locks and bulbs, Thread network credential theft, Matter commissioning chain analysis, and 6LoWPAN/IPv6 routing exploitation. Use when targeting smart-home or commercial mesh deployments, Zigbee-based door locks, lighting, or sensor networks.

中文简介正在准备中。当前显示原文说明。

You are helping a penetration tester exploit HTTP request smuggling

中文简介正在准备中。当前显示原文说明。

You are helping a penetration tester exploit PHP deserialization

中文简介正在准备中。当前显示原文说明。

You are helping a penetration tester exploit UNION-based SQL injection. The

中文简介正在准备中。当前显示原文说明。

You are helping a penetration tester exploit server-side template injection in a

中文简介正在准备中。当前显示原文说明。

You are helping a penetration tester exploit stacked query SQL injection

中文简介正在准备中。当前显示原文说明。

You are helping a penetration tester exploit file inclusion vulnerabilities. The

中文简介正在准备中。当前显示原文说明。

You are helping a penetration tester exploit .NET deserialization

中文简介正在准备中。当前显示原文说明。

You are helping a penetration tester exploit server-side template injection in a

中文简介正在准备中。当前显示原文说明。

You are helping a penetration tester exploit authenticated access to Apache

中文简介正在准备中。当前显示原文说明。

You are helping a penetration tester exploit DOM-based cross-site scripting. The

中文简介正在准备中。当前显示原文说明。

You are helping a penetration tester exploit reflected cross-site scripting. The

中文简介正在准备中。当前显示原文说明。

You are helping a penetration tester exploit XXE injection. The target application

中文简介正在准备中。当前显示原文说明。

IoT and embedded device security testing methodology. Covers hardware reconnaissance (UART, JTAG, SWD, SPI flash, I2C EEPROM, eMMC chip-off), firmware acquisition (vendor portals, OTA capture, flash dump, binwalk extraction), firmware analysis (filesystem mounting, binary triage, hardcoded secrets, default credential discovery), bootloader attacks (U-Boot console, secure-boot bypass, fault injection), runtime attacks on embedded Linux/RTOS (busybox CVEs, MTD writes, /dev/mem), wireless protocol attacks (Zigbee, BLE, Z-Wave, LoRaWAN, Thread/Matter, sub-GHz), MQTT/CoAP/Modbus/BACnet/OPC-UA exploitation, mobile companion app analysis, cloud-IoT API abuse, and side-channel/glitching basics. Use for IoT pentest, smart-home assessment, ICS/OT testing, or embedded vulnerability research.

中文简介正在准备中。当前显示原文说明。

You are helping a penetration tester exploit Apache JServ Protocol (AJP)

中文简介正在准备中。当前显示原文说明。

You are helping a penetration tester exploit OS command injection. The target

中文简介正在准备中。当前显示原文说明。

You are helping a penetration tester exploit Cross-Origin Resource Sharing

中文简介正在准备中。当前显示原文说明。

You are helping a penetration tester exploit CSRF vulnerabilities. The target

中文简介正在准备中。当前显示原文说明。

You are helping a penetration tester exploit Java deserialization

中文简介正在准备中。当前显示原文说明。

You are helping a penetration tester exploit Insecure Direct Object Reference

中文简介正在准备中。当前显示原文说明。

You are helping a penetration tester exploit JWT (JSON Web Token)

中文简介正在准备中。当前显示原文说明。