香港VPS扫描网站漏洞的方法：



可以使用Nikto开源Web服务器扫描程序来扫描网站的漏洞，比如扫描使用SSL的网站以pbs.org为例：



使用命令：“nikto-hpbs.org-ssl”来扫描，得到结果如下：



-Niktov2.1.6



------------------------------------------------------------------------------



-STATUS:Startingup!



+TargetIP:54.225.198.196



+TargetHostname:pbs.org



+TragetPort:443



------------------------------------------------------------------------------



+SSlInfo:Subject:/CN=www.pbs.org



Altnames:account.pbs.org,admin.pgs.org,dipsy-tc.pbs.org,docs.pbs.org,ga.video.cdn.pbs.org,git.pbs.org,heart.ops.pbs.org,hub-dev.pbs.org,image.pbs.org,



jaws..pbs.org,kids.pbs.org,koth-qa.svp.pbs.org,login.pbs.org,ops.pbs.org,pbs.org,player.pbs.org,projects.pbs.org,sentry.pbs.org,teacherline.pbs.org,



urs.pbs.org,video.pbs.org,weta-qa.svp.pbs.org,whut-qa.svp.pbs.org,wnet.video-qa.pbs.org,wnet.video-staging.pbs.org,www-cache.pbs.org,www.pbs.org



Ciphers:ECDHE-RSA-AES128-GCM-SHA256



Issuer:/C-US/0=Let'sEncrypt/CN=Let'sEncryptAuthorityX3



+StartTime:2018-12-0523:34:06(GMT-8)



------------------------------------------------------------------------------



+Server:nginx



+Theanti-clickjackingX-Frame-Optionsheaderisnotpresent.



+TheX-XSS-Protectionheaderisnotdefined.ThisheadercanhinttotheuseragenttoprotectagainstsomeformsofXSS



+Uncommonheader'x-pbs-fwsrvname'found,withcontents:fwcacheproxy1



+ThesiteusesSSLandtheStrict-Transport-SecurityHTTPheaderisnotdefined.



+TheX-Content-Type-Optionsheaderisnotset.ThiscouldallowtheuseragenttorenderthecontentofthesiteinadifferentfashiontotheMIMEtype



+Rootpage/redirectsto:https://www.pbs.org/



+NoCGIDirectoriesfound(use'-Call'toforcecheckallpossibledirs)



+RC-1918IPaddressfoundinthe'x-pbs-appsvrip'header:TheIPis"10.137.181.52".



+Uncommonheader'x-cache-fs-status'found,withcontents:EXPIRED



+Uncommonheader'x-pbs-appsvrname'found,withcontents:fwcacheproxy1



+Uncommonheader'x-pbs-appsvrip'found,withcontents:10.137.181.52



+ServerleaksinodesviaETags,headerfoundwithfile/pbs.org.zip,fields:0x5b96537e0x1678



+7446requests:0error(s)and10item(s)reportedonremotehost



+EndTime:2018-12-0600:30:29(GMT-8)(3383seconds)



------------------------------------------------------------------------------



+1host(s)tested



一诺网络香港免备案专区，提供「香港增强VPS」和「香港特惠VPS」两种类型的高可用弹性计算服务，搭载新一代英特尔®至强®铂金处理器，接入CN2低延时高速回国带宽线路，网络访问顺滑、流畅。机房网络架构采用了BGP协议的解决方案可提供多线路互联融合网络，使得不同网络运营商线路的用户都能通过最佳路由实现快速访问。香港云VPS低至29元/月，购买链接：https://www.enuoidc.com/vps.html?typeid=2