> For the complete documentation index, see [llms.txt](https://hacking-notes.jord4n.pro/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://hacking-notes.jord4n.pro/zh/hacking-tools/exploitation.md). # 利用与研究工具用于 Metasploit、Searchsploit、利用参考、漏洞数据库、漏洞赏金文章和模块驱动验证工作流的利用与研究工具。当漏洞已经具备合理可能性，并且你需要利用参考、框架模块、公开的概念验证研究或漏洞赏金方法示例时，请使用此类别。 ## 工具与资源


Metasploit	涵盖 msfconsole、模块搜索、辅助模块、利用模块、载荷、编码器、msfvenom、Meterpreter、数据库工作区、会话、服务枚举、SMB 利用、后渗透以及面向报告验证的 Metasploit Framework 方法说明。	Metasploit
Searchsploit	用于在本地查询 Exploit-DB、查找公开利用代码以及查看概念验证代码的 Searchsploit 使用说明。	Searchsploit
漏洞赏金与研究资源	用于公开技术文章、漏洞数据库、利用参考、方法说明和载荷研究的漏洞赏金与安全研究资源。	漏洞赏金与研究资源
CSP 绕过	用于在授权测试期间审查内容安全策略漏洞、风险允许列表以及特定浏览器行为的 CSP 绕过研究说明。	CSP 绕过

### 工作流 1. 在选择利用路径之前，先确认漏洞条件。 2. 搜索公开参考、受影响版本、前置条件和预期影响。 3. 优先选择能展示风险的最小化受控概念验证。 4. 仅在理解模块行为和载荷影响后再使用 Metasploit 模块。 5. 记录利用来源、版本、命令行、载荷、会话输出以及清理步骤。 --- # Agent Instructions This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com. ## Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation by asking a question. Perform an HTTP GET request on the following URL with the `ask` and `goal` query parameters: ``` GET https://hacking-notes.jord4n.pro/zh/hacking-tools/exploitation.md?ask=&goal= ``` `ask` is the immediate question: it should be specific, self-contained, and written in natural language. `goal` is what the user is ultimately trying to achieve, the reason they need the answer. Sharing it helps GitBook give you a better, more relevant answer. A goal is most helpful when it describes the outcome the user wants rather than restating the question. For example, with `ask=how do I create an API token`, a goal like `automate deployments from our CI pipeline` lets GitBook tailor the answer to that use case. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.

:rocket:

Metasploit

:magnifying-glass:

Searchsploit

:bug:

漏洞赏金与研究资源

:shield-halved:

CSP 绕过