ARP欺骗，漏洞溢出，WEB安全实验.pdfVIP

ARP欺骗，漏洞溢出，WEB安全的实验研究 摘要 本次实验主要是网络安全小组进行钓鱼WiFi、dns欺骗、远程溢出、本地 溢出、浏览器溢出、sql注入、撞库等实验。互联网与生俱有的开放性、交互 和分散性特征使人类所憧憬的共享、开放、灵活和快速等需求得到满足。网络 环境为共享、交流、服务创造了理想空间。然而，正是由于互联网的上述特征 ，产生了许多安全问题，在网络环境中，一些组织或个人出于某种目的，进行 泄密、破坏、侵权和意识形态的渗透。所以对网络安全的防范是非常总要的。 次实验我们用到的工具有wireshark、MD5、burpsuite等软件来进行实验， 当然我们也查找了MS15-100、2015- 5119等漏洞来进行实验，同过 次实验大家可以了解许多常见网络攻击和防 范，这对我们pc机上的资料，个人密码信息的保护是很有帮助的。 关键词：钓鱼WiFi，DNS欺骗，sql注入，MS15-100，015-5119 - 1 - ARP欺骗，漏洞溢出，WEB安全实验 ARP DECEPTION, VULNERABILITY OVERFLOW, WEB SECURITY EXPERIMENTAL STUDY Abstract This experiment is mainly the network security team fishing DNS, WiFi fraud, remote overflow, local overflow, browser overflow, SQL injection, hit the library, etc.. Internet innate openness, interaction and dispersion characteristics of the human vision of sharing, openness, flexibility and rapid needs are met. Network environment for the sharing, exchange, service to create an ideal space. However, it is precisely because of the above characteristics of the Internet, resulting in a lot of security issues, in the network environment, some organizations or individuals for some purpose, to leak, damage, infringement and ideological penetration. So the prevention of network security is very general. The experiment we used the tools have Wireshark, MD5, burpsuite software to carry on the experiment, of course, we also find the MS15-100, 2015-5119 vulnerability experiment with this experiment we can know many common network attacks and prevention. This information on our PC, the protection of personal password information is very helpful. Key words: phishing DNS, WiFi deception, SQL injection, MS15-100015- 5119 第2页共42页