找到
25
篇与
Web
相关的结果
-
Web安全：白帽子黑客训练营 Web安全：白帽子黑客训练营 图片1 教程介绍 首先，这门课程循序渐进。从Web基础知识和安全基础开始介绍，案例通俗易懂，即便是新手小白也不用担心，可以很快入门。然后介绍Web常用安全工具，以及手把手搭建环境和示范安全实战，最后作为安全从业人员给出了Web安全体系建设的指导。 其次，这门课程有的放矢，突出重点。作为新手，往往会想着先去了解各种Web开发基础，包括前后端知识，但这样往往需要花费大量时间。这门课着重介绍Web安全相关所需的知识和工具，能够更快的上手。当然，并不是说基础不重要，但是可以在做中学，学中做。 最后，这门课理论与实践结合。对新手来说，最怕的就是看书看懂了，操作起来一头雾水，或遇到问题过不去，在这门课程中亲自示范了各种Web安全攻防实战。 当然，这门课程比较适合与小白与刚入门的Web安全爱好者，起到提纲挈领，普及介绍的作用，如果你是已经入门且有一定经验的老手，那这门课对你用处不大。受限于课程时间，课程中对每一个知识点都只能点到即止，未能深入分析，需要自己在课后多钻研，多动手。 学习地址 百度：https://pan.baidu.com/s/16bQkwMx-fkhGxWj2jx4rLQ 天翼：https://cloud.189.cn/t/mMFvYnrANfq2 微云：https://share.weiyun.com/ir7i6cqe 文件信息 文件大小: 2716489480 字节 MD5: 65EF20557512E1C23B8B16BFF1FDA557 SHA1: D0B75762E4B3125B43E349F5280EAD507290F9F1 CRC32: 96A5E06C 下载后请先检查文件完整性，如有问题请在评论区反馈
-
深度评测：web-check 这款工具到底怎么样 推荐一个实用的开源工具——web-check。项目由lissy93开发维护，GitHub上获得了 34690 个Star。简单来说，它是一款用于分析任何网站的一🕵️♂️体化OSINT工具，对于站长和开发者来说是个不错的工具。 工具功能介绍 Web-Check Comprehensive, on-demand open source intelligence for any website 🌐 web-check.xyz---Kindly supported by: NinjaPear API to get a full B2B profiles from any URL Terminal Trove The $HOME of all things in the terminal Warp Built for coding with multiple AI agents About Screenshot Live Demo Mirror Features Usage Deployment Option#1: Netlify Option#2: Vercel Option#3: Docker Option#4: Render Option#5: Source Configuration Options Developer Setup Community Contributing Bugs Support License--- About Get an insight into the inner-workings of a given website: uncover potential attack vectors, analyse server architecture, view security configurations, and learn what technologies a site is using.Currently the dashboard will show: IP info, SSL chain, DNS records, cookies, headers, domain info, search crawl rules, page map, server location, redirect ledger, open ports, traceroute, DNS security extensions, site performance, trackers, associated hostnames, carbon footprint. Stay tuned, as I'll add more soon!The aim is to help you easily understand, optimize and secure your website. Screenshot Expand ScreenshotScreenshotScreenshot Live DemoA hosted version can be accessed at: web-check.as93.net Mirror The source for this repo is mirrored to CodeBerg, available at: codeberg.org/alicia/web-check Status Build & Deploys: Repo Management & Miscellaneous: Features Click to expand / collapse sectionNote _this list needs updating, many more jobs have been added since..._The following section outlines the core features, and briefly explains why this data might be useful for you to know, as well as linking to further resources for learning more. IP Info Description An IP address (Internet Protocol address) is a numerical label assigned to each device connected to a network / the internet. The IP associated with a given domain can be found by querying the Domain Name System (DNS) for the domain's A (address) record. Use CasesFinding the IP of a given server is the first step to conducting further investigations, as it allows us to probe the server for additional info. Including creating a detailed map of a target's network infrastructure, pinpointing the physical location of a server, identifying the hosting service, and even discovering other domains that are hosted on the same IP address. Useful Links- Understanding IP Addresses IP Addresses - Wiki RFC-791 Internet Protocol whatismyipaddress.com SSL Chain DescriptionSSL certificates are digital certificates that authenticate the identity of a website or server, enable secure encrypted communication (HTTPS), and establish trust between clients and servers. A valid SSL certificate is required for a website to be able to use the HTTPS protocol, and encrypt user + site data in transit. SSL certificates are issued by Certificate Authorities (CAs), which are trusted third parties that verify the identity and legitimacy of the certificate holder. Use CasesSSL certificates not only provide the assurance that data transmission to and from the website is secure, but they also provide valuable OSINT data. Information from an SSL certificate can include the issuing authority, the domain name, its validity period, and sometimes even organization details. This can be useful for verifying the authenticity of a website, understanding its security setup, or even for discovering associated subdomains or other services. Useful Links- TLS - Wiki What is SSL (via Cloudflare learning) RFC-8446 - TLS SSL Checker DNS Records Description This task involves looking up the DNS records associated with a specific domain. DNS is a system that translates human-readable domain names into IP addresses that computers use to communicate. Various types of DNS records exist, including A (address), MX (mail exchange), NS (name server), CNAME (canonical name), and TXT (text), among others. Use CasesExtracting DNS records can provide a wealth of information in an OSINT investigation. For example, A and AAAA records can disclose IP addresses associated with a domain, potentially revealing the location of servers. MX records can give clues about a domain's email provider. TXT records are often used for various administrative purposes and can sometimes inadvertently leak internal information. Understanding a domain's DNS setup can also be useful in understanding how its online infrastructure is built and managed. Useful Links- What are DNS records? (via Cloudflare learning) DNS Record Types RFC-1035 - DNS DNS Lookup (via MxToolbox) Cookies Description The Cookies task involves examining the HTTP cookies set by the target website. Cookies are small pieces of data stored on the user's computer by the web browser while browsing a website. They hold a modest amount of data specific to a particular client and website, such as site preferences, the state of the user's session, or tracking information. Use CasesCookies can disclose information about how the website tracks and interacts with its users. For instance, session cookies can reveal how user sessions are managed, and tracking cookies can hint at what kind of tracking or analytics frameworks are being used. Additionally, examining cookie policies and practices can offer insights into the site's security settings and compliance with privacy regulations. Useful Links- HTTP Cookie Docs (Mozilla) What are Cookies (via Cloudflare Learning) Testing for Cookie Attributes (OWASP) RFC-6265 - Cookies Crawl Rules Description Robots.txt is a file found (usually) at the root of a domain, and is used to implement the Robots Exclusion Protocol (REP) to indicate which pages should be ignored by which crawlers and bots. It's good practice to avoid search engine crawlers from over-loading your site, but should not be used to keep pages out of search results (use the noindex meta tag or header instead). Use CasesIt's often useful to check the robots.txt file during an investigation, as it can sometimes disclose the directories and pages that the site owner doesn't want to be indexed, potentially because they contain sensitive information, or reveal the existence of otherwise hidden or unlinked directories. Additionally, understanding crawl rules may offer insights into a website's SEO strategies. Useful Links- Google Search Docs - Robots.txt Learn about robots.txt (via Moz.com) RFC-9309 - Robots Exclusion Protocol Robots.txt - wiki Headers Description The Headers task involves extracting and interpreting the HTTP headers sent by the target website during the request-response cycle. HTTP headers are key-value pairs sent at the start of an HTTP response, or before the actual data. Headers contain important directives for how to handle the data being transferred, including cache policies, content types, encoding, server information, security policies, and more. Use CasesAnalyzing HTTP headers can provide significant insights in an OSINT investigation. Headers can reveal specific server configurations, chosen technologies, caching directives, and various security settings. This information can help to determine a website's underlying technology stack, server-side security measures, potential vulnerabilities, and general operational practices. Useful Links- HTTP Headers - Docs RFC-7231 Section 7 - Headers List of header response fields OWASP Secure Headers Project Quality Metrics Description Using Lighthouse, the Quality Metrics task measures the performance, accessibility, best practices, and SEO of the target website. This returns a simple checklist of 100 core metrics, along with a score for each category, to gauge the overall quality of a given site. Use CasesUseful for assessing a site's technical health, SEO issues, identify vulnerabilities, and ensure compliance with standards. Useful Links- Lighthouse Docs Google Page Speed Tools W3 Accessibility Tools Google Search Console SEO Checker PWA Builder Server Location Description The Server Location task determines the physical location of the server hosting a given website based on its IP address. This is done by looking up the IP in a location database, which maps the IP to a lat + long of known data centers and ISPs. From the latitude and longitude, it's then possible to show additional contextual info, like a pin on the map, along with address, flag, time zone, currency, etc. Use CasesKnowing the server location is a good first step in better understanding a website. For site owners this aids in optimizing content delivery, ensuring compliance with data residency requirements, and identifying potential latency issues that may impact user experience in specific geographical regions. And for security researchers, it helps assess the risk posed by specific regions or jurisdictions regarding cyber threats and regulations. Useful Links- IP Locator Internet Geolocation - Wiki Associated Hosts Description This task involves identifying and listing all domains and subdomains (hostnames) that are associated with the website's primary domain. This process often involves DNS enumeration to discover any linked domains and hostnames, as well as looking at known DNS records. Use CasesDuring an investigation, understanding the full scope of a target's web presence is critical. Associated domains could lead to uncovering related projects, backup sites, development/test sites, or services linked to the main site. These can sometimes provide additional information or potential security vulnerabilities. A comprehensive list of associated domains and hostnames can also give an overview of the organization's structure and online footprint. Useful Links- DNS Enumeration - Wiki OWASP - Enumerate Applications on Webserver DNS Enumeration - DNS Dumpster Subdomain Finder Redirect Chain Description This task traces the sequence of HTTP redirects that occur from the original URL to the final destination URL. An HTTP redirect is a response with a status code that advises the client to go to another URL. Redirects can occur for several reasons, such as URL normalization (directing to the www version of the site), enforcing HTTPS, URL shorteners, or forwarding users to a new site location. Use CasesUnderstanding the redirect chain can be useful for several reasons. From a security perspective, long or complicated redirect chains can be a sign of potential security risks, such as unencrypted redirects in the chain. Additionally, redirects can impact website performance and SEO, as each redirect introduces additional round-trip-time (RTT). For OSINT, understanding the redirect chain can help identify relationships between different domains or reveal the use of certain technologies or hosting providers. Useful Links- HTTP Redirects - MDN URL Redirection - Wiki 301 Redirects explained TXT Records DescriptionTXT records are a type of DNS record that provides text information to sources outside your domain. They can be used for a variety of purposes, such as verifying domain ownership, ensuring email security, and even preventing unauthorized changes to your website. Use CasesThe TXT records often reveal which external services and technologies are being used with a given domain. They may reveal details about the domain's email configuration, the use of specific services like Google Workspace or Microsoft 365, or security measures in place such as SPF and DKIM. Understanding these details can give an insight into the technologies used by the organization, their email security practices, and potential vulnerabilities. Useful Links- TXT Records (via Cloudflare Learning) TXT Records - Wiki RFC-1464 - TXT Records TXT Record Lookup (via MxToolbox) Server Status Description Checks if a server is online and responding to requests... {card-default label="📦 工具信息" /} 🔗 项目地址：https://github.com/lissy93/web-check ⭐ Star数：34690 💻 开发语言：TypeScript 📝 项目描述：用于分析任何网站的一🕵️♂️体化OSINT工具 {/card-default} 总的来说，web-check是一个功能比较实用的开源工具，适合日常工作和学习使用。如果你正在寻找一款相关工具，不妨下载试试。使用前建议仔细阅读项目文档。
-
从0到1实战移动Web App开发 从0到1实战移动Web App开发 图片1 教程介绍 从0到1 实战webapp，通过热门的web前端技术实现移动端app应用，先基础、后实战，在讲解的同时引导思考，会抛出自己独特的观点，一行一行写代码讲解实现过程。学会前端组件化，学习如何从零搭建一个前端开发环境！ 学习地址 百度：https://pan.baidu.com/s/1bKHvEFeAExd2c54RTtOD0w 天翼：https://cloud.189.cn/t/RZZNBvyiamyy 微云：https://share.weiyun.com/VOXGYZbp UC：https://www.yun.cn/s/76d4d6eeed8641e8aa30000665f583c3 文件信息 MD5: 4364BB7C913E300BD17E8DAF9FAE7E50 SHA1: A85169F7AF8CC54B80803ABF9F7EB7588DEECBC2 CRC32: E0A4F602 下载后请先检查文件完整性，如有问题请在评论区反馈
-
Web安全基础入门+信息收集篇 Web安全基础入门+信息收集篇 图片1 教程介绍 学习信息收集，针对域名信息,解析信息,网站信息,服务器信息等；学习端口扫描，针对端口进行服务探针,理解服务及端口对应关系；学习WEB扫描，主要针对敏感文件,安全漏洞,子域名信息等；学习信息收集方法及实现安全测试，能独立理解WEB架构框架，树立渗透测试开展思路！ 学习地址 百度：https://pan.baidu.com/s/1_78FZ7TWdHa6Qwv6WfrYLg 天翼：https://cloud.189.cn/t/bINn2eV7vuEf 微云：https://share.weiyun.com/HNAfTmgF UC：https://www.yun.cn/s/5439d2c7844442e78d5b10b6d4ba8d5b 文件信息 修改时间: 2020年10月21日, 16:46:42 MD5: A24D1AD051C6F2294244217632524D5A SHA1: C24E965C0AA86CE571926519B2AAEE42EA2CED5A CRC32: 50FCF8EB 下载后请先检查文件完整性，如有问题请在评论区反馈
-
《Web前端工程师修炼之道》 《Web前端工程师修炼之道》 图片1 书籍介绍 你是否也曾想过自己创建网页，但却苦于没有经验？那么从现在开始学习吧！本书由浅入深地讲解了Web设计的一些重要概念、基本原理，以及HTML、CSS和JavaScript的具体使用方法与技巧。当你读完本书后，将会掌握创建适用于移动设备的多列页面的技巧。 《Web前端工程师修炼之道（原书第4版）》将帮助你学习如何使用最新技术、最佳实践经验，以及当今的Web标准，其中包括HTML5和CSS3。每章都提供一些练习和小测验，帮助你了解不同的技术，巩固你对重要概念的理解。 学习地址 百度：https://pan.baidu.com/s/1OxadYZh5o5sKdzbPpvuIpg 天翼：https://cloud.189.cn/t/V3ymEfm2ERba 蓝奏：https://xiaodao.lanzout.com/iUOupynznyj 下载后请先检查文件完整性，如有问题请在评论区反馈
-
2020年web安全渗透测试课 2020年web安全渗透测试课 图片1 教程介绍 大家都知道程序是由代码组成，程序员就是代码的发明者，大家看不懂的代码对于他们来说却像是亲切的孩子，所有的代码在他们手下栩栩如生，但是不是所有的程序员都能够把自己孩子安排妥当，有时候会出现一些错误，但是他们发现不了。虽然网络安全已被高度重视，一些意外情况发生也会令人措手不及，正所谓常在河边走，哪有不湿鞋？一些意外发生之后的应对措施，如果采取的好，可以将损失降低，也算是亡羊补牢，为时未晚吧。 学习地址 百度：https://pan.baidu.com/s/1CjBqASr4u2tp5WkY3w5Zxg 天翼：https://cloud.189.cn/t/vQrAFb6zyqIv 微云：https://share.weiyun.com/B9PO0NM8 UC：https://www.yun.cn/s/8c8bd2611c324f1b8c3ba42063f72ef6 文件信息 文件大小: 2254931802 字节 MD5: EE0DE180F88B09619028BD2BF15324AA SHA1: 1C44E778CB1196ACC07A118707FDD4453914F2A3 CRC32: D5001669 下载后请先检查文件完整性，如有问题请在评论区反馈
-
油管上最火的Web前端教程 油管上最火的Web前端教程 图片1 油管上最火的Web前端教程 图片3 油管上最火的Web前端教程 图片5 教程介绍 Web前端开发工程师，主要职责是利用HTML/CSS/JavaScript/Flash等各种Web技术进行客户端产品的开发。完成客户端程序(也就是浏览器端)的开发，开发JavaScript以及Flash模块，同时结合后台开发技术模拟整体效果，进行丰富互联网的Web开发，致力于通过技术改善用户体验。本教程由@鱼C字幕组提供技术支持和校对，欢迎检阅食用！ 学习地址 百度：https://pan.baidu.com/s/1OEO2jcUySdn-GvYA4NVrBg 天翼：https://cloud.189.cn/t/RfIfiqq2iiQv UC：https://www.yun.cn/s/f8d0411092be433187a9441926b009fd 下载后请先检查文件完整性，如有问题请在评论区反馈
-
Web全栈高级视频教程第十期 Web全栈高级视频教程第十期 图片2 课程介绍 最新Web全栈高级架构师学习路线全套完整版课程，Web全栈开发的框架及项目阶段，需要具备一定的前端H5/CSS3/jqueryUI核心语法编程，课程涵盖Web全栈开发的主流框架技术node.js/vue.js，从0到1学会开发微信小程序，并完成大型企业级的项目实战开发。 学习地址 百度：https://pan.baidu.com/s/1_LOrB0772PtARSNvNRHsoA 天翼：https://cloud.189.cn/web/share?code=rI7veyFFVJFr 阿里：https://www.aliyundrive.com/s/4ZsggKPPki4 下载后请先检查文件完整性，如有问题请在评论区反馈
-
安卓Web Video Caster v5.6.5专业版 软件介绍 Web Video Caster允许您观看喜爱网站上的，包括电影、电视节目、新闻直播、体育和 IPTV 。 它还允许您投射存储在手机上的本地还支持照片和音频文件。 在网页上检测到字幕，您也可以使用自己的字幕，或者您可以使用OpenSubtitles.org的集成搜索。 软件安卓Web Video Caster v5.6.5专业版 图片6 版本特点 解锁高级版本，需要Google服务 支持的媒体 支持流媒体设备的M3U8格式HLS直播流。 电影和电视节目。 MP4。 现场新闻和体育 任何HTML5* IPTV（M3U8，W3U，RSS）。 照片。 音频文件，包括音乐。 您的流媒体设备必须能够解码您正在播放的。 Web投放器?不执行任何/音频解码或转码。 食用方法 浏览网页或本地文件浏览器，查找要投放到电视的、音频或照片。 如果或音频在网站上，请尝试在网页内播放。 如果是一张照片，您可以通过长按照投放。 连接到您的流媒体设备以投放、音乐或图片。 ⬇️ 下载地址 下载后请先检查文件完整性，如有问题请在评论区反馈
-
Web全栈架构师第23期完整版本 Web全栈架构师第23期完整版本 图片2 课程介绍 最新Web全栈高级架构师学习路线全套完整版课程，互联网时代已进入后半场，行业环境发生了显著变化。互联网人，尤其是技术人员，如何在加速更迭的技术浪潮中持续充电，提升自身价值，是当下必须面对的挑战。课程涉及了现下前端实际开发时所需要的各块内容，奠定源码阅读基础和全栈开发能力。 学习地址 百度：https://pan.baidu.com/s/1Bzt6Lfysvcr6_8ooch9FWg 天翼：https://cloud.189.cn/t/EraQnyUrYvUn 阿里：https://www.aliyundrive.com/s/LFqiPJwQqJH 下载后请先检查文件完整性，如有问题请在评论区反馈
-
网易web安全工程师进阶版 网易web安全工程师进阶版 图片1 教程介绍 《Web安全工程师（进阶）》是由“ i春秋学院联合网易安全部”出品，资深讲师团队通过精炼的教学内容、丰富的实际场景及综合项目实战，帮助学员纵向提升技能，横向拓宽视野，牢靠掌握Web安全工程师核心知识，成为安全领域高精尖人才。 学习地址 百度：https://pan.baidu.com/s/1i0MzEqTwDRtcNdIIKNFfTw 天翼：https://cloud.189.cn/t/QbqIzm7ru22m 微云：https://share.weiyun.com/1HQ70746 UC：https://www.yun.cn/s/a9f3dbd399274eb3a3c71e46c836e150 文件信息 文件大小: 6778776992 字节 MD5: 30FFE983C2625BAD2C3CFC985C6ACFF4 SHA1: 962488BF0ECCBB9E010209B0A264578D5AF3362C CRC32: EAF00E06 下载后请先检查文件完整性，如有问题请在评论区反馈
-
手把手教你构建Web应用程序 手把手教你构建Web应用程序 图片1 课程介绍 pring Boot 在传统 Spring 框架的基础上做了创新和优化，具有快速开发、快速部署、方便配置等特性，提高了开发效率，降低了维护成本。越来越多的企业将其作为系统开发的首选框架，Spring Boot 已经成为 Java 工程师必须熟练掌握的基本技能之一。本课程共 8 个模块，介绍 Spring Boot 框架所提供的系统开发解决方案以及对应的工程实践。 学习地址 百度：https://pan.baidu.com/s/187KXlfsnMuM5YdiTAXN4cw 天翼：https://cloud.189.cn/t/iei6Jf2AFVr2 阿里：https://www.aliyundrive.com/s/KExVXp3hVH1 下载后请先检查文件完整性，如有问题请在评论区反馈
-
Web渗透测试工程师：入门知识 Web渗透测试工程师：入门知识 图片1 教程介绍 通过对本课程的学习，学者可以胜任各大公司安全渗透测试工程师的位置；开发一些实用的安全小工具并开源，体现个人实力；建立自己的安全体系，对公司安全有自己的一些认识和见解。 学习地址 百度：https://pan.baidu.com/s/12VGv2yWsY_OO2tYAd7uy2w 天翼：https://cloud.189.cn/t/n2y6ZjrAR3M3 微云：https://share.weiyun.com/hjWGiI0o UC：https://www.yun.cn/s/60e2a203f55b4ea1b7121ba8529377e6 文件信息 文件大小: 860091997 字节 MD5: F9A719A8B636DFD96DB1DB8DD3B4A05D SHA1: 04C73F418BA98E3F5056E1D3DDB8295D274383BD CRC32: 00D28650 下载后请先检查文件完整性，如有问题请在评论区反馈
-
2020全新Web服务器由浅入深 2020全新Web服务器由浅入深 图片1 教程介绍 学完掌握知识点：掌握Http协议原理；Nginx虚拟主机的配置以及应用；Nginx地址重定向、负载均衡、反向代理的配置应用；运用Nginx进行流量限制和访问控制；掌握Jvm虚拟机原理知识和相关调优方法；掌握Tomcat中间件的高级部署应用。 学习地址 百度：https://pan.baidu.com/s/1YMSv1pI1CFyk4gykHxyclA 天翼：https://cloud.189.cn/t/fMveaiBbUZF3 微云：https://share.weiyun.com/B1ujKdeD UC：https://www.yun.cn/s/27895fd5fb92491cb723ed79f2f4f06a 文件信息 文件大小: 1183879162 字节 MD5: B1F67204183AA4EB00266694C856EFA9 SHA1: 8F42066B6F0D062C9760177BA0A0D816FDECE29F CRC32: 839B7ED5 下载后请先检查文件完整性，如有问题请在评论区反馈
-
Web服务器三剑客运维配置实战 Web服务器三剑客运维配置实战 图片1 课程介绍 虽然在课程中还讲解了部分HTTP协议的技术，但是课程的重点还是NGINX、JVM、Tomcat三相运维与配置技术。课程内容包括了Nginx进阶基础，Nginx配置提升，JVM虚拟机尝试，JVM运维实用排障工具，JVM监控工具，Tomcat配置，Tomcat运维与部署等Web服务器的必备运维部署技术。 学习地址 百度：https://pan.baidu.com/s/1-YySDlGtaOLD55-j5lXPzQ 天翼：https://cloud.189.cn/t/jaAR3yFz6vYf 阿里：https://www.aliyundrive.com/s/8fJwjsNSx7L 下载后请先检查文件完整性，如有问题请在评论区反馈
-
Web安全微专业 Kali正式篇 Web安全微专业 Kali正式篇 图片1 教程介绍 Web安全微专业工具正式篇，课程内容包括Kali为主的各种渗透工具，带同学从熟练掌握kali，入门安全，玩转各类渗透工具。Kali Linux预装了许多渗透测试软件，包括nmap 、Wireshark 、John the Ripper，以及Aircrack-ng.用户可通过硬盘、live CD或live USB运行Kali Linux。Kali Linux既有32位和64位的镜像。可用于x86 指令集。同时还有基于ARM架构的镜像，可用于树莓派和三星的ARM Chromebook。 学习地址 百度：https://pan.baidu.com/s/1YbX8BgVRSm_jOPFKO4zlrw 天翼：https://cloud.189.cn/t/FNVFBvRRfmqa UC：https://www.yun.cn/s/d567fa48454d46eaac3c2d0201adcac1 下载后请先检查文件完整性，如有问题请在评论区反馈
