Metasploit渗透测试实例分析.doc

Metasploit渗透测试实例分析
摘要:随着信息技术的飞速发展,信息安全的概念也在逐步深入人心。为了更好的保护用户信息,提高系统的安全性,渗透测试技术应运而生。简而言之,渗透测试就是模拟黑客的技术手段去检测系统的安全性。
本文选择 Metasploit 渗透测试框架为平台,阐述了Metasploit框架的内容,详细讲解了不同界面下 Metasploit 渗透框架的使用方法,详细讲解了Metasploit的所用功能和参数。然后,本文以实际操作为基础,讲解怎样通过查找的漏洞进行对目标主机攻击来获得Meterpreter shell。成功获取Meterpreter shell之后就可以通过Metasploit一些基本的命令来收集更多的信息,以便达到对目标主机的长期控制和不被用户察觉。
关键词:渗透;Metasploit;Meterpreter shell。
Metasploit ration testing example analysis
Abstract:With the rapid development of information technology, information security is gradually ing more popular. In order to protect user information and to improve system security, ration testing techniques have emerged. In short, ration testing is a technology that simulates the means of hackers to check the security of a system.
Paper chooses Metasploit ration testing framework as a platform to explain the contents of the Metasploit Framework, a detailed account of the use of different interfaces under the Metasploit ration framework Metasploit explained in detail by using the function and parameters. Then, the
paper-based practice, explain how to find loopholes through the target host attack to get Meterpreter shell. After essfully obtaining Meterpreter shell can to collect more information through Metasploit some mands in order to achieve long-term control of the target host and are not aware of the user.
Key words:permeation;Metasploit;Meterpreter shell.
第一章引言...................................................... 1
第二章概述...................................................... 1
METASPLOIT框架................................................. 1
渗透测试...................................................... 2
概念...................................................... 2
方法论.................................................... 3
框架...................................................... 4
第三章模拟渗透测试实例分析....................................... 5
前期交互.................................................