> For the complete documentation index, see [llms.txt](https://hacking-notes.jord4n.pro/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://hacking-notes.jord4n.pro/zh/hacking-tools/exploitation.md).

# 利用与研究工具

当某个漏洞已具有较高可信度，而你需要利用参考资料、框架模块、公开的概念验证研究或漏洞赏金方法示例时，请使用此分类。

## 工具与资源

<table data-view="cards" data-full-width="false" data-search="false"><thead><tr><th></th><th></th><th></th><th data-hidden data-card-target data-type="content-ref"></th></tr></thead><tbody><tr><td><h3><i class="fa-rocket" style="color:$primary;">:rocket:</i></h3></td><td><h4>Metasploit</h4></td><td>涵盖 msfconsole、模块搜索、辅助模块、利用模块、载荷、编码器、msfvenom、Meterpreter、数据库工作区、会话、服务枚举、SMB 利用、后渗透以及以报告为重点的验证的 Metasploit Framework 方法说明。</td><td><a href="/pages/12ab2330f60271a04b8aae7ad4eec8b8ac1cd1ae">/pages/12ab2330f60271a04b8aae7ad4eec8b8ac1cd1ae</a></td></tr><tr><td><h3><i class="fa-magnifying-glass" style="color:$primary;">:magnifying-glass:</i></h3></td><td><h4>Searchsploit</h4></td><td>用于本地查询 Exploit-DB、查找公开利用代码以及审阅概念验证代码的 Searchsploit 使用说明。</td><td><a href="/pages/1c378a4284a3def37a7e574701c291a83ff13fa7">/pages/1c378a4284a3def37a7e574701c291a83ff13fa7</a></td></tr><tr><td><h3><i class="fa-bug" style="color:$primary;">:bug:</i></h3></td><td><h4>漏洞赏金与研究资源</h4></td><td>用于公开文章、漏洞数据库、利用参考、方法说明和载荷研究的漏洞赏金与安全研究资源。</td><td><a href="/pages/df418a67a6528d9459f0a682c43669752c65d0dc">/pages/df418a67a6528d9459f0a682c43669752c65d0dc</a></td></tr></tbody></table>

### 工作流程

1. 在选择利用路径之前，先确认漏洞条件。
2. 查找公开参考资料、受影响版本、前提条件和预期影响。
3. 优先选择最小、可控且能够展示风险的概念验证。
4. 仅在理解模块行为和载荷影响的情况下使用 Metasploit 模块。
5. 记录利用来源、版本、命令行、载荷、会话输出以及清理步骤。


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://hacking-notes.jord4n.pro/zh/hacking-tools/exploitation.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.