好一場墨子與公輸盤的『帶城牒械』的『紙上談兵』，輸贏自能互見省卻多少生靈塗炭，此不可謂之『智』乎？？

─── 《Λ 運算︰概念導引之《補充》※有名的組合子！！》

 

『善守』者，能不知『攻城』之術乎？

故說此『滲透測試』︰

Penetration test

A penetration test, colloquially known as a pen test, is an authorized simulated attack on a computer system, performed to evaluate the security of the system. The test is performed to identify both weaknesses (also referred to as vulnerabilities), including the potential for unauthorized parties to gain access to the system’s features and data,^[1][2] as well as strengths,^[3] enabling a full risk assessment to be completed.

The process typically identifies the target systems and a particular goal—then reviews available information and undertakes various means to attain the goal. A penetration test target may be a white box (which provides background and system information) or black box (which provides only basic or no information except the company name). A penetration test can help determine whether a system is vulnerable to attack if the defenses were sufficient, and which defenses (if any) the test defeated.^[4][3]

Security issues that the penetration test uncovers should be reported to the system owner.^[5] Penetration test reports may also assess potential impacts to the organization and suggest countermeasures to reduce risk.^[5]

The goals of a penetration test vary depending on the type of approved activity for any given engagement with the primary goal focused on finding vulnerabilities that could be exploited by a nefarious actor and informing the client of those vulnerabilities along with recommended mitigation strategies.^[6]

Penetration tests are a component of a full security audit. For example, the Payment Card Industry Data Security Standard requires penetration testing on a regular schedule, and after system changes.^[7]

Flaw hypothesis methodology is a systems analysis and penetration prediction technique where a list of hypothesized flaws in a software system are compiled through analysis of the specifications and documentation for the system. The list of hypothesized flaws is then prioritized on the basis of the estimated probability that a flaw actually exists, and on the ease of exploiting it to the extent of control or compromise. The prioritized list is used to direct the actual testing of the system.

……

 

特介紹『咖哩這味』也！

Kali Linux

Kali Linux 是基於Debian的Linux發行版，設計用於數位鑑識和滲透測試。由 Offensive Security Ltd 維護和資助。

Kali Linux既有32位元又有64位元的映像。可用於x86指令集的中央處理器。同時還有基於ARM架構的映像，可用於樹莓派和三星的ARM Chromebook.^[3]

開發

Kali Linux 擁有超過600個預裝的滲透測試程式，包括 Armitage(一個圖形化網路攻擊管理工具， Nmap(一個埠和服務掃描工具), Wireshark, John the Ripper password cracker, Aircrack-ng, Burp Suite 和 OWASP ZAP 網路應用程式安全掃描器。

最先由 Offensive Security 的 Mati Aharoni 和 Devon Kearns 通過重寫 BackTrack 來完成，BackTrack 是他們之前寫的用於取證的 Linux 發行版 ^[4]。

Kali Linux 是建立在安全的環境中，只有可信的人才可以提交安裝套件，並且每一個包都含有開發者的數位簽章。kali還有一個為802.11無線注入打修補程式的客製化內核。這主要是因為開發團隊發現他們需要進行大量的無線評估。

………

 

About Kali Linux

 

雖然目前並沒有樹莓派 3B+ 之正式『映像』檔

RPi 3 model B+ — any success booting kali linux?

• squid attack

Mon Mar 26, 2018 10:54 pm

 

有興趣的人或可嘗試哩★

Kali Linux image for Raspberry Pi 3 B+

 

只有 3B+ 可用者，那就嚐鮮吧☆

STICKY FINGER’S KALI-PI – Pre-installed

 

且讓我們從 3B 開始呦☺

root@LEDE:~# ssh -l root 5.168.128.250

Host '5.168.128.250' is not in the trusted hosts file.
(ssh-rsa fingerprint md5 7f:94:b3:44:c2:39:dc:98:e4:4e:f4:57:90:18:d9:0a)
Do you want to continue connecting? (y/n) yes
root@5.168.128.250's password: 

The programs included with the Kali GNU/Linux system are free software;
the exact distribution terms for each program are described in the
individual files in /usr/share/doc/*/copyright.

Kali GNU/Linux comes with ABSOLUTELY NO WARRANTY, to the extent
permitted by applicable law.
root@kali:~#