【正文】 ? 宏安全，宏病毒 – Visual Basic for Applications – ? Office文檔的口令 – office password recovery Γ В 其他文件口令 ? zip/rar/pdf文件口令 – zip password recovery – rar password recovery – pdf password recovery ? 演示 – Advanced ZIP Password Recovery Γ В IPv6安全 Γ В 其他網(wǎng)絡(luò)安全相關(guān) ? BT –校園網(wǎng) – ISP寬帶 ? 交換機 /路由器 /NAT網(wǎng)關(guān) –違規(guī)、限速、封殺、 ? 無線安全 –信號輻射 –訪問控制 Γ В Apix: DDK/WDK ? Windows XP/2023/Vista ? Visual 2023/2023/2023 ? Windows DDK/WDK – ? C:\WinDDK\6000\src\* ? 一個例子 : google(” filedisk‖) Γ В Bookmark Γ В Q A ? Γ В ? 靜夜四無鄰，荒居舊業(yè)貧。s logged on locally and via resource sharing (full source is included) ? PsLogList dump event log records ? PsPasswd changes account passwords ? PsService view and control services ? PsShutdown shuts down and optionally reboots a puter ? PsSuspend suspends processes Γ В Desktops ? This new utility enables you to create up to four virtual desktops and to use a tray interface or hotkeys to preview what’s on each desktop and easily switch between them. Γ В 防火墻 ICF ? ICF － Inter Connection Firewall ? ICS － Inter Connection Sharing Γ В Γ В 其他防火墻 ? 個人防火墻 –金山網(wǎng)鏢 –天網(wǎng)個人防火墻 ? 商業(yè)產(chǎn)品 –硬件 vs. 軟件 ? Netfliter/Iptable in Linux Γ В NByte Γ В NDIS ? Network Driver Interface Specification – by MS and 3Com, in Windows and also in Linux and FreeBSD (NdisWrapper) – ―wrapper‖功能，即隱藏了 2層 LLC的差異，服務(wù)于 3層網(wǎng)絡(luò)層（另一個抽象 LLC是 ODI Open DataLink Interface） – hook ? Γ В IIS ? IIS , in Vista and Windows Server 2023 ? The servers currently include – FTP, – SMTP, – NNTP, and – HTTP/HTTPS. ? behind Apache HTTP Server ? the infamous Code Red worm Γ В IIS日志 ? Logs – in C:\WINDOWS\system32\Logfiles Γ В IIS支持的認證機制 ? IIS and higher support the following authentication mechanisms: – Basic access authentication: 明文口令 – Digest access authentication: 使用 HASH – Integrated Windows Authentication ? refers to the SPNEGO, Kerberos, and NTLMSSP authentication protocols with respect to SSPI functionality introduced with the Microsoft Windows 2023 operating system. – .NET Passport Authentication ? Windows Live ID Γ В IIS認證配置界面 ? Γ В HTTPS實驗演示 ? HTTPS – CA， Certificate， IE， SSL+HTTP –配置 CA –個人證書給 IE –服務(wù)器證書給 IIS ? 證書的其他應(yīng)用 Γ В 漏洞與補丁 ? update –功能性更新 vs. 安全性更新 – IE7 / WMPlayer 11 ? patches – hotfix ? service packs – ining xp sp3 / vista sp1 ? patches for Linux/Unix Γ В 這就是不裝補丁的后果 ? 發(fā)信人 : at2023518 (win7壞了，用回 xp，頓覺天地間豁然開朗 ), 信區(qū) : ITExpress ? 標 題 : 靠，昨晚 4點多有人黑了我的電腦 ? 發(fā)信站 : 水木社區(qū) (Fri May 4 11:02:51 2023), 站內(nèi) ? ? 這就是不裝補丁的后果啊 ………… ? ? 昨晚在下載東西，把我電腦的 ip映射到了公網(wǎng)，結(jié)果就中招了。例如，在啟動過程將加載的驅(qū)動程序或其他系統(tǒng)組件的失敗記錄在系統(tǒng)日志中。 Γ В Advanced features ? Realtime protection ? Inter Explorer integration ? Software Explorer ? Windows Vistaspecific functionality – blocks all startup items that require administrator privileges Γ В Windows Live OneCare ? Windows Live OneCare（或 onecare、 LIVE ONECARE。 ? 轉(zhuǎn)到包含 .msi 文件的目錄。 ? 事件查看器 –留意特殊的事件，如登錄、登錄失敗。 ? 成功審核 – 成功的審核安全訪問嘗試。”我聽完以后十分感慨，微軟的桌面系統(tǒng)進入中國市場這么久，竟然還有這么多人不知道Windows域服務(wù)才是管理桌面的利器。 , January 25, 2023 ? 很多事情努力了未必有結(jié)果，但是不努力卻什么改變也沒有。 2023年 1月 25日星期三 下午 9時 48分 25秒 21:48: ? 1最具挑戰(zhàn)性的挑戰(zhàn)莫過于提升自我。 2023年 1月 25日星期三 9時 48分 25秒 21:48:2525 January 2023 ? 1空山新雨后，天氣晚來秋。 :48:2521:48Jan2325Jan23 ? 1故人江海別，幾度隔山川。 Γ В WUS Γ В Γ В Win9x共享漏洞分析 ? Γ В Vista安全 ? UAC User Account Control – It aims to improve the security of the operating system by limiting applications to standard user privileges until an administrator authorizes an increase in privilege level. – In this way, only applications that the user trusts receive higher privileges, and malware is kept from receiving the privileges necessary to promise the operating system. Γ В UAC ? Γ В Tasks that will trigger a UAC prompt ? * Rightclicking and clicking Run as administrator ? * Changes to files in %SystemRoot% or %ProgramFiles% ? * Installing and uninstalling applications ? * Installing device drivers ? * Installing ActiveX controls ? * Changing settings for Windows Firewall ? * Changing UAC settings ? * Configuring Windows Update ? * Adding or removing user accounts ? * Changing a user’s account type ? * Configuring Parental Controls ? * Running Task Scheduler ? * Restoring backedup system files ? * Viewing or changing another