Linux挖矿病毒的应急响应与溯源-目标 Linux 服务器遭遇恶意挖矿病毒入侵。核心表现为 CPU 占用率异常暴涨，且系统关键命令（如 stat、rm 等）遭到病毒感染与篡改，同时存在恶意的守护进程与定时任务进行权限维持。进行全面的应急响应的流程。
-
Updated
Jul 14, 2026
#
internal-penetration-testing
Here are 4 public repositories matching this topic...
Windows 应急响应溯源笔记：快速定位攻击者信息 1. P（Preparation，准备）：准备阶段，组建应急响应团队，准备工具和文档 2. D（Detection，检测）：检测阶段，确认安全事件是否发生，收集初步信息 3. C（Containment，抑制）：抑制阶段，限制事件影响范围，防止进一步扩散 4. E（Eradication，根除）：根除阶段，清除恶意代码、后门，修复漏洞 5. R（Recovery，恢复）：恢复阶段，恢复系统正常运行，验证业务完整性 6. F（Follow-up，跟踪）：跟踪阶段，总结复盘，输出报告，加固防御
-
Updated
Jul 13, 2026
🚨 真实应急响应实战靶场笔记：在极端不出网环境下，通过进程溯源、代码审计，彻底根除 Java 挖矿木马及 crontab/sh 隐藏持久化权限维持后门。
-
Updated
Jul 14, 2026
🔒 Internal Network Penetration Testing – A complete module covering methodologies, attack vectors, tools, and hands-on labs to assess and exploit security weaknesses within internal networks.
penetration-testing internal-network cyber-security privilege-escalation ethical-hacking network-security vulnerability-analysis exploit-development password-attack network-attacks smb-enumeration security-assessment network-enumeration vapt vulnerability-exploitation internal-penetration-testing exploit-tools
-
Updated
Oct 15, 2025
Improve this page
Add a description, image, and links to the internal-penetration-testing topic page so that developers can more easily learn about it.
Add this topic to your repo
To associate your repository with the internal-penetration-testing topic, visit your repo's landing page and select "manage topics."