面向Web应用的漏洞扫描器的设计与实现  

DESIGN AND IMPLEMENTATION OF VULNERABILITY SCANNER FOR WEB APPLICATION

作　　者：牛咏梅[1] NIU Yong-mei(Nanyang Institute of Technology, Nanyang 473004, China)

机构地区：[1]南阳理工学院,河南南阳473004

出　　处：《南阳理工学院学报》2018年第6期66-69,共4页Journal of Nanyang Institute of Technology

摘　　要：本文采用渗透测试技术,设计并实现一个Web应用扫描器。扫描器通过爬虫获取结果,然后调用插件检测常见漏洞,能够进行目录文件爆破、CMS识别、端口扫描、爬虫、SQL注入检测、XSS漏洞检测等扫描,最终通过输出扫描报告达到一次完整的网站扫描。This article penetration testing technology,design and implement a Web application scanner.The scanner obtains the result through the crawler,and then calls the plug-in to detect common vulnerabilities.It can perform directory file blasting,CMS identification,port scanning,crawler,SQL injection detection,XSS vulnerability detection,etc,and finally achieves a complete website scan through the output scan report.

关 键 词：渗透测试 扫描器 爬虫 CMS识别 端口扫描 XSS漏洞检测 

分 类 号：TP311[自动化与计算机技术—计算机软件与理论]