發表文章

Metasploit

筆者先前介紹弱點掃描時,一直苦於無法從網路上搜尋到開採漏洞的程式 前二天複習去受訓的教材時,接觸到kali的metasploit,這個軟體只要做些簡單的參數設定 並且選擇要用的payload,就可以輕鬆的開採漏洞。 很值得推薦給企業紅隊。 我會繼續研究,有成果時再跟大家報告

How to use pipal analysis the password txt file?

圖片
How to use pipal analysis the password txt file? pipal is a password statistical analysis tool provided by Kali Linux. This tool can perform statistical analysis on all passwords of a password dictionary. It will count the most commonly used passwords, the most commonly used basic words, the proportion of password length, the proportion of composed characters, the proportion of single-type character passwords, the proportion of ending characters, and so on. Based on this information, security personnel can analyze the characteristics of passwords and write corresponding cryptanalysis report files. Step1.prepare a txt file of password "Password.txt" you can take it in  https://en.wikipedia.org/wiki/Wikipedia:10,000_most_common_passwords Step2.Pipa password.txt > result_papal.txt the result will save to result_papal.txt file Step3. vim result_pipal.txt  use vim editor to edit result_papal.txt Step4 . it will shows  Last digits , character sets and so on. Step5.use this t...