kde se oskenovat? · zap scanning report summary of alerts risk level high medium low informational...
TRANSCRIPT
![Page 2: Kde se oskenovat? · ZAP Scanning Report Summary of Alerts Risk Level High Medium Low Informational Alert Detail High (Medium) Description Number ot Alerts Path Traversal The Path](https://reader033.vdocuments.net/reader033/viewer/2022050304/5f6ce780a2f6921d1a79bf08/html5/thumbnails/2.jpg)
Skener Webu
● pro držitele domén
● metodika OWASP
● zdarma
![Page 3: Kde se oskenovat? · ZAP Scanning Report Summary of Alerts Risk Level High Medium Low Informational Alert Detail High (Medium) Description Number ot Alerts Path Traversal The Path](https://reader033.vdocuments.net/reader033/viewer/2022050304/5f6ce780a2f6921d1a79bf08/html5/thumbnails/3.jpg)
Skener Webu – motivace
"Varujete před návštěvou nebezpečných web stránek; co se mi
může stát, vždyť prohlížeč na disk nic neuloží, a tudíž se mi počítač nemůže virem nakazit. Nebo ne???"
![Page 4: Kde se oskenovat? · ZAP Scanning Report Summary of Alerts Risk Level High Medium Low Informational Alert Detail High (Medium) Description Number ot Alerts Path Traversal The Path](https://reader033.vdocuments.net/reader033/viewer/2022050304/5f6ce780a2f6921d1a79bf08/html5/thumbnails/4.jpg)
Skener Webu – závěrečná zpráva
●
●
![Page 5: Kde se oskenovat? · ZAP Scanning Report Summary of Alerts Risk Level High Medium Low Informational Alert Detail High (Medium) Description Number ot Alerts Path Traversal The Path](https://reader033.vdocuments.net/reader033/viewer/2022050304/5f6ce780a2f6921d1a79bf08/html5/thumbnails/5.jpg)
Možnosti penetračního testování
● Arachni, Nikto, OpenVAS, Owasp ZAP, Skipfish, Uniscan, Wapiti
● Acunetix, Appscan, Burp Pro, Nessus, Webinspect
![Page 6: Kde se oskenovat? · ZAP Scanning Report Summary of Alerts Risk Level High Medium Low Informational Alert Detail High (Medium) Description Number ot Alerts Path Traversal The Path](https://reader033.vdocuments.net/reader033/viewer/2022050304/5f6ce780a2f6921d1a79bf08/html5/thumbnails/6.jpg)
Arachni
![Page 7: Kde se oskenovat? · ZAP Scanning Report Summary of Alerts Risk Level High Medium Low Informational Alert Detail High (Medium) Description Number ot Alerts Path Traversal The Path](https://reader033.vdocuments.net/reader033/viewer/2022050304/5f6ce780a2f6921d1a79bf08/html5/thumbnails/7.jpg)
Arachni
![Page 8: Kde se oskenovat? · ZAP Scanning Report Summary of Alerts Risk Level High Medium Low Informational Alert Detail High (Medium) Description Number ot Alerts Path Traversal The Path](https://reader033.vdocuments.net/reader033/viewer/2022050304/5f6ce780a2f6921d1a79bf08/html5/thumbnails/8.jpg)
Arachni – reporty
![Page 9: Kde se oskenovat? · ZAP Scanning Report Summary of Alerts Risk Level High Medium Low Informational Alert Detail High (Medium) Description Number ot Alerts Path Traversal The Path](https://reader033.vdocuments.net/reader033/viewer/2022050304/5f6ce780a2f6921d1a79bf08/html5/thumbnails/9.jpg)
Arachni – reporty
![Page 10: Kde se oskenovat? · ZAP Scanning Report Summary of Alerts Risk Level High Medium Low Informational Alert Detail High (Medium) Description Number ot Alerts Path Traversal The Path](https://reader033.vdocuments.net/reader033/viewer/2022050304/5f6ce780a2f6921d1a79bf08/html5/thumbnails/10.jpg)
Arachni – reporty
![Page 11: Kde se oskenovat? · ZAP Scanning Report Summary of Alerts Risk Level High Medium Low Informational Alert Detail High (Medium) Description Number ot Alerts Path Traversal The Path](https://reader033.vdocuments.net/reader033/viewer/2022050304/5f6ce780a2f6921d1a79bf08/html5/thumbnails/11.jpg)
Arachni – reporty
![Page 12: Kde se oskenovat? · ZAP Scanning Report Summary of Alerts Risk Level High Medium Low Informational Alert Detail High (Medium) Description Number ot Alerts Path Traversal The Path](https://reader033.vdocuments.net/reader033/viewer/2022050304/5f6ce780a2f6921d1a79bf08/html5/thumbnails/12.jpg)
Arachni – reporty
![Page 13: Kde se oskenovat? · ZAP Scanning Report Summary of Alerts Risk Level High Medium Low Informational Alert Detail High (Medium) Description Number ot Alerts Path Traversal The Path](https://reader033.vdocuments.net/reader033/viewer/2022050304/5f6ce780a2f6921d1a79bf08/html5/thumbnails/13.jpg)
Arachni autologin
arachni http://example.cz
--plugin=autologin: url=http://example.cz/login.php, parameters="uid=test&passw=mojeheslo", check="Sign Off|MY ACCOUNT"
--scope-exclude-pattern=logout
![Page 14: Kde se oskenovat? · ZAP Scanning Report Summary of Alerts Risk Level High Medium Low Informational Alert Detail High (Medium) Description Number ot Alerts Path Traversal The Path](https://reader033.vdocuments.net/reader033/viewer/2022050304/5f6ce780a2f6921d1a79bf08/html5/thumbnails/14.jpg)
Owasp ZAP
![Page 15: Kde se oskenovat? · ZAP Scanning Report Summary of Alerts Risk Level High Medium Low Informational Alert Detail High (Medium) Description Number ot Alerts Path Traversal The Path](https://reader033.vdocuments.net/reader033/viewer/2022050304/5f6ce780a2f6921d1a79bf08/html5/thumbnails/15.jpg)
Owasp ZAP
![Page 16: Kde se oskenovat? · ZAP Scanning Report Summary of Alerts Risk Level High Medium Low Informational Alert Detail High (Medium) Description Number ot Alerts Path Traversal The Path](https://reader033.vdocuments.net/reader033/viewer/2022050304/5f6ce780a2f6921d1a79bf08/html5/thumbnails/16.jpg)
Owasp ZAP
![Page 17: Kde se oskenovat? · ZAP Scanning Report Summary of Alerts Risk Level High Medium Low Informational Alert Detail High (Medium) Description Number ot Alerts Path Traversal The Path](https://reader033.vdocuments.net/reader033/viewer/2022050304/5f6ce780a2f6921d1a79bf08/html5/thumbnails/17.jpg)
Owasp ZAP – pohodlná proxy
![Page 18: Kde se oskenovat? · ZAP Scanning Report Summary of Alerts Risk Level High Medium Low Informational Alert Detail High (Medium) Description Number ot Alerts Path Traversal The Path](https://reader033.vdocuments.net/reader033/viewer/2022050304/5f6ce780a2f6921d1a79bf08/html5/thumbnails/18.jpg)
Owasp ZAP – průběžné výsledky
![Page 19: Kde se oskenovat? · ZAP Scanning Report Summary of Alerts Risk Level High Medium Low Informational Alert Detail High (Medium) Description Number ot Alerts Path Traversal The Path](https://reader033.vdocuments.net/reader033/viewer/2022050304/5f6ce780a2f6921d1a79bf08/html5/thumbnails/19.jpg)
Owasp ZAP
![Page 20: Kde se oskenovat? · ZAP Scanning Report Summary of Alerts Risk Level High Medium Low Informational Alert Detail High (Medium) Description Number ot Alerts Path Traversal The Path](https://reader033.vdocuments.net/reader033/viewer/2022050304/5f6ce780a2f6921d1a79bf08/html5/thumbnails/20.jpg)
Owasp ZAP
![Page 21: Kde se oskenovat? · ZAP Scanning Report Summary of Alerts Risk Level High Medium Low Informational Alert Detail High (Medium) Description Number ot Alerts Path Traversal The Path](https://reader033.vdocuments.net/reader033/viewer/2022050304/5f6ce780a2f6921d1a79bf08/html5/thumbnails/21.jpg)
Nessus
![Page 22: Kde se oskenovat? · ZAP Scanning Report Summary of Alerts Risk Level High Medium Low Informational Alert Detail High (Medium) Description Number ot Alerts Path Traversal The Path](https://reader033.vdocuments.net/reader033/viewer/2022050304/5f6ce780a2f6921d1a79bf08/html5/thumbnails/22.jpg)
Nessus
![Page 23: Kde se oskenovat? · ZAP Scanning Report Summary of Alerts Risk Level High Medium Low Informational Alert Detail High (Medium) Description Number ot Alerts Path Traversal The Path](https://reader033.vdocuments.net/reader033/viewer/2022050304/5f6ce780a2f6921d1a79bf08/html5/thumbnails/23.jpg)
Nessus
![Page 24: Kde se oskenovat? · ZAP Scanning Report Summary of Alerts Risk Level High Medium Low Informational Alert Detail High (Medium) Description Number ot Alerts Path Traversal The Path](https://reader033.vdocuments.net/reader033/viewer/2022050304/5f6ce780a2f6921d1a79bf08/html5/thumbnails/24.jpg)
Wapiti
![Page 25: Kde se oskenovat? · ZAP Scanning Report Summary of Alerts Risk Level High Medium Low Informational Alert Detail High (Medium) Description Number ot Alerts Path Traversal The Path](https://reader033.vdocuments.net/reader033/viewer/2022050304/5f6ce780a2f6921d1a79bf08/html5/thumbnails/25.jpg)
Nikto
![Page 26: Kde se oskenovat? · ZAP Scanning Report Summary of Alerts Risk Level High Medium Low Informational Alert Detail High (Medium) Description Number ot Alerts Path Traversal The Path](https://reader033.vdocuments.net/reader033/viewer/2022050304/5f6ce780a2f6921d1a79bf08/html5/thumbnails/26.jpg)
WhatWeb
![Page 27: Kde se oskenovat? · ZAP Scanning Report Summary of Alerts Risk Level High Medium Low Informational Alert Detail High (Medium) Description Number ot Alerts Path Traversal The Path](https://reader033.vdocuments.net/reader033/viewer/2022050304/5f6ce780a2f6921d1a79bf08/html5/thumbnails/27.jpg)
Uniscan
![Page 29: Kde se oskenovat? · ZAP Scanning Report Summary of Alerts Risk Level High Medium Low Informational Alert Detail High (Medium) Description Number ot Alerts Path Traversal The Path](https://reader033.vdocuments.net/reader033/viewer/2022050304/5f6ce780a2f6921d1a79bf08/html5/thumbnails/29.jpg)
Vzor
●
●
●