blocks|key|3691610|text|您不能合法地分发windows。但是windows+XP+SP1机器或windows+NT4机器将是理想的。微软不再支持NT4，因为它包含了许多未修补的漏洞。即使是没有补丁的windows+7机器也可以通过IE漏洞进行攻击。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|entityMap^0^^$0|@$1|2|3|4|5|6|7|C|8|@]|9|@]|A|$]]]|B|$]]

You can't distribute a windows VM legally. But a windows XP SP1 machine or a windows NT4 machine would be ideal. NT4 is no longer supported by Microsoft and there for contains numerous unpatched vulnerabilities. Even a windows 7 machine without patches could be exploited though an IE exploit.

blocks|key|4829631|text|如果你想进入笔试，我建议阅读这篇文章+by+罗宾伍德，其中他讨论了6,400万美元的问题“如何进入安全行业？”他提供了很多的链接，信息和指导。|type|unstyled|depth|inlineStyleRanges|entityRanges|offset|length|data|4829632|除了提供的答案之外，您还可以查看[医]多叶或武士WTF+linux发行版+(它在实际的vm中具有本地目标)。|4829633|在侵入测试框时，在目标上运行tcpdump/wireshark/tshark，并开始检查数据包捕获，以真正了解您正在做什么。此外，在可能的情况下，使用命令行:)我刚刚发布了一些来自HackEire+2011年的pcaps，显示了一些真实的攻击，我建议您看看它们。|entityMap|0|LINK|mutability|MUTABLE|url|http://www.digininja.org/projects/breaking_in_part_1.php|1|https://twitter.com/#!/digininja|2|http://www.irongeek.com/i.php?page=mutillidae/mutillidae-deliberately-vulnerable-php-owasp-top-10|3|http://sourceforge.net/projects/samurai|4|https://www.dropbox.com/sh/l48wjkuaqnu5yt1/V_YEiLD6tS^0|E|4|0|M|4|1|0|G|5|2|M|E|3|0|2G|M|4^^$0|@$1|2|3|4|5|6|7|W|8|@]|9|@$A|X|B|Y|1|Z]|$A|10|B|11|1|12]]|C|$]]|$1|D|3|E|5|6|7|13|8|@]|9|@$A|14|B|15|1|16]|$A|17|B|18|1|19]]|C|$]]|$1|F|3|G|5|6|7|1A|8|@]|9|@$A|1B|B|1C|1|1D]]|C|$]]]|H|$I|$5|J|K|L|C|$M|N]]|O|$5|J|K|L|C|$M|P]]|Q|$5|J|K|L|C|$M|R]]|S|$5|J|K|L|C|$M|T]]|U|$5|J|K|L|C|$M|V]]]]

If you want to get into pen-testing, I suggest reading <a href="http://www.digininja.org/projects/breaking_in_part_1.php">this article</a> by <a href="https://twitter.com/#!/digininja">Robin Wood</a>, where he discusses the $64 million dollar question "How to break into the security industry?". He provides lots of links, information and guidance.

As well as the answers provided, you could check out <a href="http://www.irongeek.com/i.php?page=mutillidae/mutillidae-deliberately-vulnerable-php-owasp-top-10">Multilladae</a> or the <a href="http://sourceforge.net/projects/samurai">Samurai WTF linux distro</a> (which has the targets locally on the actual vm).

When hacking test boxes, run tcpdump/wireshark/tshark on the target and start examining the packet captures to truly understand what you're doing. Additionally, where possible, use the command-line :) I just released some <a href="https://www.dropbox.com/sh/l48wjkuaqnu5yt1/V_YEiLD6tS">pcaps from HackEire 2011</a> that show some real-world attacks and I'd recommend having a look at them.

blocks|key|4829467|text|正如鲁克所说，这将违反许多文案法。您可能感兴趣的另一个发行版是该死的脆弱Linux。|type|unstyled|depth|inlineStyleRanges|entityRanges|offset|length|data|entityMap|0|LINK|mutability|MUTABLE|url|http://distrowatch.com/table.php?distribution=dvl^0|V|A|0^^$0|@$1|2|3|4|5|6|7|K|8|@]|9|@$A|L|B|M|1|N]]|C|$]]]|D|$E|$5|F|G|H|C|$I|J]]]]

As Rook said, this would violate a lot of copywrite laws. Another distribution you may be interested in is <a href="http://distrowatch.com/table.php?distribution=dvl">Damn Vulnerable Linux</a>.

blocks|key|4829663|text|您可以使用网络安全Dojo。它基于ubuntu10.04，包括实现web应用程序安全笔试的工具和目标。它很容易在VM上使用。|type|unstyled|depth|inlineStyleRanges|entityRanges|offset|length|data|entityMap|0|LINK|mutability|MUTABLE|url|http://www.mavensecurity.com/web_security_dojo/^0|5|8|0^^$0|@$1|2|3|4|5|6|7|K|8|@]|9|@$A|L|B|M|1|N]]|C|$]]]|D|$E|$5|F|G|H|C|$I|J]]]]

You can use <a href="http://www.mavensecurity.com/web_security_dojo/" rel="nofollow">Web Security Dojo</a>. It is based on ubuntu 10.04, includes tools and targets to practice web application security pen testing. It is easy to use on VM.

blocks|key|4829564|text|您可能会尝试过于脆弱的web应用程序DVWA，或者作为替代，您可以加入黑客实验室。|type|unstyled|depth|inlineStyleRanges|entityRanges|offset|length|data|entityMap|0|LINK|mutability|MUTABLE|url|http://dvwa.co.uk/|1|http://hacking-lab.com/^0|I|4|0|Z|5|1^^$0|@$1|2|3|4|5|6|7|M|8|@]|9|@$A|N|B|O|1|P]|$A|Q|B|R|1|S]]|C|$]]]|D|$E|$5|F|G|H|C|$I|J]]|K|$5|F|G|H|C|$I|L]]]]

You may try too damnvulnerable web application <a href="http://dvwa.co.uk" rel="nofollow" title="DVWA">DVWA</a>, or as alternative you may join <a href="http://hacking-lab.com" rel="nofollow">hacking-lab</a>.

blocks|key|4829796|text|也许您可以尝试使用Windows，将其设置为未安装补丁，并且在大多数安全控制关闭后易受攻击，并尝试对其进行测试。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|4829797|你可以在这里找到它：|4829798|http://www.microsoft.com/windows/virtual-pc/|offset|length|entityMap|0|LINK|mutability|MUTABLE|url^0|0|0|0|18|0^^$0|@$1|2|3|4|5|6|7|N|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|O|8|@]|9|@]|A|$]]|$1|D|3|E|5|6|7|P|8|@]|9|@$F|Q|G|R|1|S]]|A|$]]]|H|$I|$5|J|K|L|A|$M|E]]]]

Maybe you can try with the Windows Virtual PC, set it up unpatched and vulnerable with most security controls turned off and try testing against it.

You can find it here:

<a href="http://www.microsoft.com/windows/virtual-pc/" rel="nofollow">http://www.microsoft.com/windows/virtual-pc/</a>

blocks|key|3692099|text|还有LAMPsecurity作为一个VM，它是真正的good.Also，我真的很喜欢在网上练习，比如CrackMe银行，这是合法的，在这里，http://crackme.cenzic.com/Kelev/view/home.php|type|unstyled|depth|inlineStyleRanges|entityRanges|offset|length|data|entityMap|0|LINK|mutability|MUTABLE|url|http://crackme.cenzic.com/Kelev/view/home.php^0|1Y|19|0^^$0|@$1|2|3|4|5|6|7|K|8|@]|9|@$A|L|B|M|1|N]]|C|$]]]|D|$E|$5|F|G|H|C|$I|J]]]]

there's also LAMPsecurity as a VM that's really good.Also, I really like practicing online with something like CrackMe bank which is legal,here <a href="http://crackme.cenzic.com/Kelev/view/home.php" rel="nofollow">http://crackme.cenzic.com/Kelev/view/home.php</a>

blocks|key|4829814|text|您也可以查看pwnOs。我和一位同事开发了几个可攻击的Linux，第三个正在进行中。VM中存在现实世界的漏洞。玩得开心!|type|unstyled|depth|inlineStyleRanges|entityRanges|data|4829815|链接|offset|length|entityMap|0|LINK|mutability|MUTABLE|url|http://www.pwnos.com/^0|0|0|2|0^^$0|@$1|2|3|4|5|6|7|M|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|N|8|@]|9|@$D|O|E|P|1|Q]]|A|$]]]|F|$G|$5|H|I|J|A|$K|L]]]]

You can also check out pwnOs. A colleague and I have developed a couple hackable Linux VMs, with the third underway. The VM has real world vulnerabilities in it. Have fun!

<a href="http://www.pwnos.com" rel="nofollow">Link</a>

blocks|key|4829861|text|也可能想要查看一个全面的列表或黑客操作系统提供渗透测试，安全研究人员全面收集与安全相关的工具，包括许多著名的安全工具。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|4829862|您可以在这里查看可供选择的详细列表：-|4829863|http://securityurls.com/resources/hackers-os/|offset|length|entityMap|0|LINK|mutability|MUTABLE|url^0|0|0|0|19|0^^$0|@$1|2|3|4|5|6|7|N|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|O|8|@]|9|@]|A|$]]|$1|D|3|E|5|6|7|P|8|@]|9|@$F|Q|G|R|1|S]]|A|$]]]|H|$I|$5|J|K|L|A|$M|E]]]]

May also want to have a look on comprehensive list of Pentesting or Hackers OS provides penetration testers, Security researchers a comprehensive collection of security related tools includes many well known security tools.

You can check a detail list here to choose from:-

<a href="http://securityurls.com/resources/hackers-os/" rel="nofollow">http://securityurls.com/resources/hackers-os/</a>

blocks|key|3692330|text|由于这个问题由来已久，而且安全领域每天都在发展，因此需要注意的是，目前有一个专门针对Pen测试的Linux发行版。这个发行版已经提供了许多可供使用的安装工具。此外，还为Android设备的兼容性和可移植性进行了专门设计。|type|unstyled|depth|inlineStyleRanges|entityRanges|offset|length|data|entityMap|0|LINK|mutability|MUTABLE|url|https://www.kali.org/^0|1L|5|0^^$0|@$1|2|3|4|5|6|7|K|8|@]|9|@$A|L|B|M|1|N]]|C|$]]]|D|$E|$5|F|G|H|C|$I|J]]]]

As this question is old and the security area evolves daily, it should be noted that there is currently a Linux distro specific to Pen Testing. <a href="Https://www.kali.org/" rel="nofollow noreferrer">This distro</a> already comes with numerous tools installed ready to use. In addition to a dedicated design for compatibility and portability for Android devices.

Are there any windows based pen testing vms out there similar to Metasploitable based on ubuntu?

Just starting to learn hacking and such a box would be very helpful.

Pen Testing Practice Box?

翻译质量差，导致语言生硬或混乱。

没有提供实际的解决方法或示例。

解答不清晰，无法理解或解决问题。

页面排版不美观，阅读体验差。

文章

问答

视频

学习中心

腾讯云实验室

直播

竞赛

腾讯云代码分析专区

腾讯iOA零信任安全管理系统专区

腾讯云架构师技术同盟交流圈

腾讯云数据库专区

腾讯云顾问专区

腾讯云原生专区

腾讯混元专区

腾讯云TCE专区

腾讯云Lighthouse专区

腾讯云HAI专区

腾讯云Edgeone专区

腾讯云存储专区

腾讯云智能专区

腾讯轻联专区 

腾讯云开发专区

TAPD专区

腾讯轻量云游戏服专区

腾讯云最具价值专家

腾讯云架构师技术同盟

腾讯云创作之星

腾讯云开发者先锋

腾讯云代码助手

云原生构建

TAPD 敏捷项目管理

Cloud Studio

SDK中心

API中心

命令行工具

涵盖代码开发、场景应用、自动测试全流程，助你从零构建专属AI助手

一站式MCP教程库，解锁AI应用新玩法

有没有任何基于窗口的笔测试vms类似于基于ubuntu的Metasploitable？刚刚开始学习黑客和这样一个盒子将是非常有帮助的。

问笔试练习盒？
EN

回答 10

Security用户

Security用户

Security用户

社区

活动

圈层

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问笔试练习盒？EN

回答 10

Security用户

Security用户

Security用户

社区

活动

圈层

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问笔试练习盒？
EN