北京省办—高级渗透工程师

Tasks

• Assess web security
• Conduct penetration testing
• Develop attack tools
• Execute attack and defense drills
• Exploit CSRF
• Exploit SQL injection
• Exploit XSS
• Exploit command execution vulnerabilities
• Exploit file inclusion vulnerabilities
• Exploit file upload vulnerabilities
• Handle incident response
• Map and analyze network assets
• Perform intranet penetration testing
• Perform vulnerability scanning
• Research penetration testing techniques
• Review intranet security hardening
• Use penetration testing tools

Perks/Benefits

• N/A

Skills/Tech-stack

Attack and Defense Exercises | Attack and defense | Command execution | Cross-Site Request Forgery | Cross-Site Scripting | File Inclusion | File Upload Vulnerability | File upload | Incident Response | Network Mapping | Network Security | Network security standards | OWASP Top | OWASP Top 10 | PHP | Penetration Testing | Risk Assessment | SQL | SQL Injection | Security standards | Top 10 | Vulnerability scanning