White hat teaches you how to better attack web security

Understand computer common sense

If you are a student with no foundation, the most important prerequisite is to have the following basic computer knowledge before entering the study of web security.

1. Understand the operating system:

  • What operating systems and versions are currently available;
  • The advantages and disadvantages of these operating systems;
  • Which operating systems have you used now?

2. Understand the environment variables of the computer system:

  • What are environment variables;
  • What is the effect of setting environment variables;
  • How to view and set environment variables on Windows machines;

Familiar with common tools and software

1. Understand some commonly used software (If you don’t know, remember to search online)

  • What are some easy-to-use text editors? (The notebook that comes with it is so difficult to use, are you used to it?);
  • What are the more commonly used browsers? (The IE that comes with windows is so difficult to use, are you used to it?);

2. Installation and configuration of common tool software

  • Download and install the following software, after the installation is complete, simple use
  • Download and install the following software, after the installation is complete, simple use

Note: Please download from the official website; paid software can be skipped

Browser: IE, Firefox, Chrome;

Text editor: Notepad++, Editplus, Sublime;

Master the text editor and learn to use search engines

1. Proficiency in text editing tools

  • Familiar with a commonly used text editor (notepad++ is recommended):
  • Select programming language/set font, etc.;
  • Understand encoding settings;
  • skills;

2. Learn how to make good use of search engines (practice to get real knowledge)

https://www.zhihu.com/question/20161362

Focus on knowledge and cultivate feelings

1. Knowledge sharing website forum

  • v2ex
  • Know almost

2. Security industry related

  • http://www.freebuf.com/
  • https://sec-wiki.com
  • http://www.anquanquan.info/

3. Web development site

  • http://www.w3school.com.cn/web/index.asp

4. Try: find the target

  • Find well-known safe public accounts;

  • Find well-known safe websites and forums;

  • Try to read the information and website content pushed by the official account

Understand the web and web security

1. Understand the Web (do not know how to search online)

  • What are the commonly used web development languages?
  • What are the common web server software?
  • What are the commonly used plug-ins for Firefox?

2. Familiar with the browser

  • Proficiency in using these browsers for Internet operations:
  • IE
  • Firefox
  • Chrome

3. Understand information security (with the help of search engines, materials and friends for help)

  • Information Security, Web Security Concept
  • What is a hacker
  • Watch some hacker-related movies, episodes and novels

4. Understand the job introduction of web security

  • Job search website search
  • Company recruitment website search
  • Sort out more general job requirements

5. Try: familiar with the use of Firefox plug-ins

  • Learn how to install the plugin
  • Understand the use of 1-3 common plug-ins

Open HTML entry

  • Understand HTML
  • What is HTML? http://www.w3school.com.cn/html/
  • What HTML tags does a basic HTML page contain?
  • Understand common HTML tags and learn how to use them
  • Use the browser to view source code function to view the HTML source code of a frequently visited page
  • Write an HTML page that contains all the html tags mentioned above

2. Start playing HTML games (learn a few every day, just like playing games through levels)

  • Follow the example to learn: http://www.w3school.com.cn/html/index.asp

3. Understand web page coding

  • Follow the example to learn: http://www.w3school.com.cn/html/index.asp

4. Try: understand web security issues

  • Collect some common web security issues and some security incidents (you can pay attention to the web security services provided by security companies/cloud computing companies)

Enable JavaScript to break through

1. Know JavaScript

  • What is JavaScript http://www.w3school.com.cn/js/js_intro.asp
  • Where can I run JavaScript in the browser and HTML pages?
  • Insert JavaScript code in HTML and execute the alert method
  • Learn to obtain browser information from the browser console and use the alert pop-up window to display: browser window size, current URL;

2. Start playing JavaScript games (learn a few every day, just like playing games)

  • Follow the example to learn: http://www.w3school.com.cn/js/index.asp

3. The privacy explosion-you have to learn a few tricks to protect yourself

  • http://evilcos.me/yinsi.html

try

  1. Software installation and configuration

    Try to download and install the following software, after the installation is complete, simply use

    Note: Please download from the official website; paid software can be skipped

    Web integrated environment: phpstudy

    Virtual machine software: VMware, VirtualBox;

    Programming language environment: python https://www.python.org/downloads/

  2. Installation and use of common software

    Disguised an html page in the phpstudy environment and access it

    Learn to install and use virtual machines (VMware, VirtualBox);

    Learn to install the operating system (windows, Kali)

  3. Learn SQL language (you can use the phpstudy environment)

    http://www.w3school.com.cn/sql/index.asp

  4. Learn PHP language (you can use the phpstudy environment)

    http://www.w3school.com.cn/php/index.asp

  5. Understand Python, try to install and deploy the python environment, come to a python version of hello world

Guess you like

Origin blog.csdn.net/weixin_42403632/article/details/104194061