基于LAMP的网络渗透测试系统设计与实现  

Design and Implementation of Network Penetration Testing System Based on LAMP

作　　者：廖先琴[1] 

机构地区：[1]重庆电子工程职业学院,重庆401331

出　　处：《电子器件》2014年第3期482-486,共5页Chinese Journal of Electron Devices

摘　　要：为了更好的完成对目标系统的远程安全评估,设计实现了一种基于LAMP架构的网络渗透测试系统。该系统实现功能包括:基于B/S模式的系统Web框架,运用NASL攻击脚本插件实现的漏洞扫描模块,基于攻击图的渗透方案自动生成模块,统一调用的多数据库通用引擎。测试结果表明,系统能够有效针对目标主机完成信息探测、漏洞扫描、渗透攻击、测试评估等功能,系统性能稳定,操作简单,可扩展性强。In order to better complete the remote security assessment of the target host, the network penetration testing system based on LAMP is designed and implemented. The advantages of the system lie in web system archi- tecture：based on B/S,implementation of vulnerability scanning module based on Nessus attack scripting language, attack scheme of auto-generation, general database engine for unity call. The results show that the system can achieve information detection, vulnerability scanning, infiltration attack and test assessment and so on. The system represents the advantage of stable performance and simple operation and easy extensibility.

关 键 词：渗透测试 LAMP NASL攻击脚本语言 数据库技术 

分 类 号：TP391.09[自动化与计算机技术—计算机应用技术]