Web

Size: px

Start display at page:

Download "Web"

溢卖何
5 years ago
Views:

2 Web

4 Internet Internet (Hacker) Internet web

5 IP

6 1 Internet

7 UNIX Windows

8 VLAN

11 Internet IP

13 2 Internet FTP TELNET PING IP

14 8 telnet FTP RLOGIN

16 3 Firewall Internet Internet

17 IP IP

18 TFTP NIS TELNET /

19 (1) IP TCP UDP ICMP ICMP

20 UDP RPC

21 (2)

22 WinGate Proxy Server

23 (3)

24 COPS Computer Oracle and Password System COPS UNIX COPS / etc/passwd /etc/group UNIX

25 4 IP

26 TELNET FTP

27 IP Internet

28 5 X Y X E Ke Y=Ke(X) X=Kd(Y)

29 Ke Kd

30 E D

31 DES RSA IDEA

32 6 Internet

33 Internet Comp.Security.announce., Comp.Security.Unix ftp://ftp.cert.org/pub/cert-advisories/ ftp://ciac.llnl.gov/pu/ciac/bulletin

34 Web

35 WEB 6. 7.

36 1

37 WEB

38 2

40 Internet

44 Internet DoS WEB

45 IP SYN SYN-ACK ACK IP IP

46 SYN SYN SYN-ACK

47 WEB WEB

48 IP IP IP IP

49 IP Solaris /etc/hosts IP

50 Solaris#vi /etc/hosts localhost mytesthost localhost mytesthost

51 Windows95/98 TCP/IP TCP/IP IP IP IP IP

53 3 CERT

54 Internet WEB SECURITY

55 WEB USENET

56 Internet

57 www-security WEB subscribe www-security

58 WEB hacker phreak

59 4 WEB WEB WEB

62 WEB WEB WEB CGI FTP FTP WEB

63 SVR4UNIX ps

64 #ps ef UID PID PPID C STIME TTY TIME CMD root May 12? 0:02 sched root May 12? 30:23 /etc/init root May 12? 0:03 pageout root :06:11 pts/0 0:00 ps ef root Jun 16 console 0:02 /usr/bin/login usera :06:06 pts/0 0:01 /bin/csh usera :05:11 console 0:01 -sh

65 WEB TCP 80 WEB

66 UNIX Windows 95/98 netstat

67 UNIX #netstat an TCP Local Address Remote Address Swind Send-Q Rewind Recv-Q State *.* *.* IDLE *.53 *.* LISTEN *.21 *.* LISTEN *.37 *.* LISTEN ESTABLISHED FIN_WAIT_ TIME_WAIT *.* *.* IDLE

68 LISTEN TCP UDP UNIT LISTEN TCP 37

69 *.37 *.* LISTEN TELNET TCP UDP

70 TELNET 3 TELNET netstat netstat ESTABLISHED

72 WEB CMOS/PROM

73 5 WEB ps UNIX Windows NT Windows 95/98 MacOS

75 UNIX Windows NT

77 root /etc/shadow wc -l -l /etc/shadow root wc

78 #id uid=0(root) gid=1(daemon) groups=1(daemon) #wc l /etc/shadow 18 /etc/shadow

79 usera /etc/shadow wc, /etc/shadow /etc/hosts /etc/hosts %id uid=1001(usera) gid=15(users) groups=15(users) %wc l /etc/shadow wc: /etc/shadow: Permission denied %wc l /etc/hosts 8 /etc/hosts

80 WEB WEB WEB WEB WEB WEB WEB

81 6

83 Windows NT NTS FAT12 FAT16 DOS Windows 95/98 Windows NT GUI

84 UNIX Windows NT %ls l testprogram -rwxr-xr 1 usera group May 21 22:57 testprogram

85 usera rwx ; group1 r- x ;, (r--),

86 usera rwx ; group1 r- x ;, (r--),

87 chmod %chmod o-r testprogram %ls al testprogram -rwxr-x--- l usera group May 21 22:57 testprogram %chmod g+w testprogram %ls al testprogram -rwxrwx--- 1 usera group May 21 22:57 testprogram

88 chmod o-r, usera group1 (o-r) o others, chmod group1 g+w, g+w g group u o g, u user

89 WEB WEB index.html default.htm WEB

90 WEB URL WEB URL URL WEB WEB WEB WEB WEB URL

91 7 WEB WEB

95 UNIX 5 link1 link2 /example2 dirlink

96 %ln s/example2/link1 link1 %ln s/example2/xfile link2 %ln s/somedir dirlink %ls al total 18 drwx root other 512 Jul 22 02:26. drwx root other 512 Jul 22 02:19.. -rw root other 9 Jul 22 02:27 afile -rw root other 314 Jul 22 02:27 bfile drwx root other 512 Jul 22 02:22 dir1 drwx root other 512 Jul 22 02:22 dir2 lrwxrwxrwx 1 root other 8 Jul 22 02:26 dirlink->/somedir lrwxrwxrwx 1 root other 26 Jul 22 02:24 link1->/example2/link1 lrwxrwxrwx 1 root other 29 Jul 22 02:24 link2->/example2/xfile

97 WEB WEB Apache httpd.conf, FollowSymLinks

98 WEB

99 WEB Server Side Includes, SSI, WEB

100 HTML WEB HTML HTML

101 HTML

102 <HTML> <HEAD> <TITLE> Web Security Inc. </TITLE> </HEAD> <BODY> <H1> Welcome to Web Security</H1> <UL> <LI>Introduction to Web Security <LI>Network Security <LI>Web Server Security <LI>CGI Security <LI>Web Client Security <LI>Secure Online Transactions <LI>Intrusion Detection and Recovery </UL> <! FOOTER <FONT SIZE=-3>File Last Modified:July 14,1999</FONT> </BODY> </HTML>

103 ,,, WEB, <HTML> <HEAD> <TITLE> Web Security Inc. </TITLE> </HEAD> <BODY> <H1> Welcome to Web Security</H1> <UL>

104 <LI>Introduction to Web Security <LI>Network Security <LI>Web Server Security <LI>CGI Security <LI>Web Client Security

105 <LI>Secure Online Transactions <LI>Intrusion Detection and Recovery </UL>  </BODY> </HTML>

106 WEB  WEB

107 HTML Sslexec WEB WEB

108

109

110 1

111

112 Meet me on the corner at midnight,

113

114 ABCDEFGHIJKLMNOPQRSTUVWXYZ Meet me on the corner at midnight C=P+K C P K 3

115 P C K X Y Z A B C

116 Phhw ph rq wkh fruqhu dw plgqljkw

117

118

119 Data Encyption Standard, DES 1977 DES

120

121

122

123 WEB

124

125

126

127

128 finger finger

129

130

131

132 Internet Internet

133

134

135

136

137 2 Netscape Secure Socket Layer SSL

138 SSL SSL TCP/IP SSL

139 SSL WEB SSL WEB Netscape Internet Explorer Netscape WEB

140 SSL SSL

141 SSL

142 SSL SSL

143

144

145 SSL [ HELLO ] [ HELLO + ] [ 1 ] [( ) ] [( 2 ) ]

146 HELLO 1

147 1 2 2

148 3

149

150

151

152

153

154

155

156

157

158 Certificate Authority CA

159

160 4 ACL WEB Access Control List, ACL

161 WEB WEB

162

163 ACL ACL ACL WEB WEB WEB

164 WEB WEB WEB

165 ACL ACL

166 Apache Web ACL ACL Secret, /etc/http/passwd Basic

167 Authname Secret AuthType Basic AuthUserFile /etc/http/passwd Require valid-user WEB.htaccess.acl ACL

SEC-220

SEC-220 Session CERT/CC 60000 50000 40000 52,658 30000 26,829 20000 10000 0 2,412 1995 1999 2000 2001 Q1, 2002 Source: http://www.cert.org/stats/ CERT/CC 3000 2500 2000 2,437 1500 1000 500 0 171 1,065 1995