# 11-20课

## [第十一课：工具介绍Veil-Evasion](/micro8/contents-1/11-20/11-gong-ju-jie-shao-veilevasion.md)

## [第十二课：基于UDP发现内网存活主机](/micro8/contents-1/11-20/12-ji-yu-udp-fa-xian-nei-wang-cun-huo-zhu-ji.md)

## [第十三课：基于ARP发现内网存活主机](/micro8/contents-1/11-20/13-ji-yu-arp-fa-xian-nei-wang-cun-huo-zhu-ji.md)

## [第十四课：基于第十课补充payload1](/micro8/contents-1/11-20/14-ji-yu-di-shi-ke-bu-chong-payload1.md)

## [第十五课：基于第十课补充payload2](/micro8/contents-1/11-20/15-ji-yu-di-shi-ke-bu-chong-payload2.md)

## [第十六课：红蓝对抗渗透测试1](/micro8/contents-1/11-20/16-hong-lan-dui-kang-shen-tou-ce-shi-1.md)

## [第十七课：红蓝对抗渗透测试2](/micro8/contents-1/11-20/17-hong-lan-dui-kang-shen-tou-ce-shi-2.md)

## [第十八课：红蓝对抗渗透测试3](/micro8/contents-1/11-20/18-hong-lan-dui-kang-shen-tou-ce-shi-3.md)

## [第十九课：基于netbios发现内网存活主机](/micro8/contents-1/11-20/19-ji-yu-netbios-fa-xian-nei-wang-cun-huo-zhu-ji.md)

## [第二十课：基于snmp发现内网存活主机](/micro8/contents-1/11-20/20-ji-yu-snmp-fa-xian-nei-wang-cun-huo-zhu-ji.md)


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://micro8.gitbook.io/micro8/contents-1/11-20.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
