现在谈到安全性,web渗tou测试的角度与之前的静态web有很大的不同。 过去只针对web服务器,现在是针对发现应用程序本身代码中的一些漏洞。 当前的网络g击类型有数百种,本课程重点介绍典型的几种。 当前的 Web 极其复杂,而且其范围还在不断扩大。 它的难度和复杂度没有二进制和逆向那么复杂,但它包含了很多东西。 因此,想要非常全面、成熟地掌握Web,并不像学习二进制那么难。 .
(Now when it comes to security, the perspective of Web penetration tou testing is very different from the previous static web. In the past, it was only aimed at the web server, but now it is aimed at discovering some vulnerabilities in the code of the application itself. At present, there are hundreds of types of network G attacks. This course focuses on several typical ones. The current web is extremely complex and its scope is expanding. Its difficulty and complexity are not as complex as binary and reverse, but it contains a lot of things. Therefore, it is not as difficult as learning binary to master the web in a very comprehensive and mature way)