I spring and autumn web Penetration Test Engineer (elementary) learning notes (Chapter 2)

If you don't understand these research objects, it's impossible to do a good job in safety research . —— cosine

Past the post ：
i spring and autumn Web Penetration test engineer （ primary ） Learning notes （ Chapter one ）
Next blog post ：
i spring and autumn Web Penetration test engineer （ primary ） Learning notes （ The third chapter ）

2.1 Component layering

From the outside to the inside , common 9 layer

web Components	give an example
Third party content	Advertising Statistics 、mockup
web The front frame	jQuery/Bootstrap/HTML5 frame
Web application	BBS/CMS/BLOG
Web Development framework	Django/Rails/ThinkPHP
Web Server language	PHP/JSP/.NET
Web Containers	Apache/IIS/Nginx
Storage	Database storage / Memory storage / File store
operating system	Linux/Windows
browser	Firefox/Safair/IE

2.1.1 Third party content

Advertising Statistics 、UI etc. , Generally speaking, it is intuitively seen

2.1.2 Web The front frame

The picture above shows 2005 year Web Front end frame heat ranking table

（1）Bootstrap

Bootstrap come from Twitter, Is the most popular front-end framework .Bootstrap Is based on HTML、CSS、JavaScript Of , It's in jQuery On the basis of a more personalized and humanized improvement , Form a unique website style , And compatible with most jQuery plug-in unit .Bootstrap Simple and flexible , bring Web Faster development . Its biggest advantage is the responsive layout , It makes it easy for developers to make web pages on desktop computers 、 Flat panel equipment 、 Get the best experience on your mobile phone .

（2）Vue

Vue.js Is a progressive framework for building user interfaces . Unlike other heavyweight frameworks ,Vue Adopt the design of bottom-up incremental development .Vue The core library focuses only on the view layer , And it's very easy to learn , Very easy to integrate with other libraries or existing projects . On the other hand ,Vue Fully capable of driving the adoption of single file components and Vue Complex single page application of library development supported by ecosystem .

（3）Element

Element The framework is developed by the company , The framework provides a series of elegant components , very Suitable for developing background products , And it has good compatibility .

（4）Layui

layui It is a front-end that uses its own module specification UI frame , Follow the original HTML/CSS/JS Writing and organization form of , Very low threshold , Use immediately , It is very suitable for the rapid development of interface .

（5）Taro UI

Taro UI It's a set of bases Taro Multi end of framework development UI Component library , Provide rich basic components , Covering most usage scenarios , Meet various functional requirements .

2.1.3 Web application

（1）CMS

Content management system （content management system,CMS） It's a kind of being in WEB front end （Web The server ） And back office systems or processes （ Content creation 、 edit ） Between the software systems . The creator of the content 、 Editors 、 Publishers use the content management system to submit 、 modify 、 The examination and approval 、 Publish content .

（2）BBS

Network Forum It is commonly BBS,BBS Our English full name is Bulletin Board System, Translated into Chinese is “ Bulletin boards ”.BBS It was first used to publish information such as stock market prices . In the early BBS It is the same as the bulletin board in the street and campus , It's just spreading or getting information through computers .

（3）BLOG

Blog , The English name is Blogger. Its official name is network diary ; It is also transliterated as blog or tribal Pavilion , It's using specific software , Published on the Internet 、 People who publish and post personal articles , Or one that is usually managed by individuals 、 Websites that post new articles from time to time . Blog posts usually appear as web pages , Usually has RSS Subscribe to the function . Blogging is the next step MSN、BBS、ICQ And then the second one 4 It's a way of network communication .

2.1.4 Web Development framework

Definition ： A framework is a technology that provides a reusable common structure , It provides great convenience for building new applications .
give an example ： In the field of desktop application development , Microsoft's Visual Studio C++ Generate a framework for your application , be based on VC++ Application framework can greatly improve the efficiency of desktop application development .
Development ： And with the Web The increasing complexity of development projects , The framework technology in software development is introduced into Web Development field .Web The development framework is used for Web A set of software architecture developed ,Web The framework is Web Applications provide basic functionality . Developers in Web Framework based on the implementation of their own business logic , be based on Web Framework development and Application , Developers just need to focus on the business logic of the application , The basic functions of non business logic are provided by the framework , So as to improve the development efficiency .

2.1.5 Server language

Server side code can be written in any programming language , Popular server-side programming languages include PHP、Python、ASP.NET、Java and C#. The server-side code has sufficient access to the server's operating system , And developers can choose the programming language they want to use （ And a specific version of the language ）.

The figure above shows the proportion of server languages in previous years

2.1.6 Web Containers

Web A container is a service program , There is a program providing corresponding services on one port of the server , And this program is dealing with requests from clients , Such as JAVA Medium Tomcat Containers ,ASP Of IIS or PWS They're all containers like this . A server can have multiple containers .

2.1.7 Storage

2.1.8 operating system

operating system （operating system, abbreviation OS） It is a computer program that manages computer hardware and software resources . The operating system needs to deal with memory management and configuration 、 Determine the priority of supply and demand of system resources 、 Control input device and output device 、 Basic affairs such as operation network and management file system . The operating system also provides an interface for users to interact with the system . Common operating systems are Windows、Linux、MacOS wait

2.1.9 browser

Browsers are used to retrieve 、 Show and deliver Web Information resource applications . Web Information resources are identified by uniform resource identifiers ( Uniform Resource Identifier,URI) Marked , It is a web page 、 A picture 、 A video or anything in Web The content presented on . Users can use hyperlinks ( Hyperlinks), Browse the interrelated information through the browser .