轻量级网页漏洞扫描工具的设计与实现  

Design and implementation of a lightweight Web vulnerability scanning tool

作　　者：吴婷[1] WU Ting(Shaanxi Industrial Vocational College,Xianyang 712000,China)

机构地区：[1]陕西工业职业技术学院

出　　处：《电子设计工程》2019年第12期99-102,107,共5页Electronic Design Engineering

摘　　要：针对传统漏洞扫描与匹配分类需要深厚专业的计算机知识,且需要深入了解计算机底层协议极其相关内容这一问题,文中结合计算机自动化测试与前端网页技术,实现轻量级网页漏洞扫描工具。该系统在Python的编程语言的基础上,结合Django实现可视化窗口,实现自动化对漏洞的检测、高效化管理。系统具有综合扫描、端口扫描、Sql注入扫描、网络目录扫描、C段扫描、Xss跨站扫描等功能模块。经测试运行,系统功能模块划分合理,且基本满足常用的漏洞扫描场景。另外,系统具有运行稳定、网络延时小和对软硬件环境依赖较低等特点。For the traditional vulnerability scanning and matching classification,it requires deep professional computer knowledge and deep understanding of the extremely relevant content of the underlying computer protocol.This paper combines computer automated testing and front-end webpage technology to realize a lightweight webpage vulnerability scanning tool.Based on the programming language of Python,this system combines django to realize the visualization window,realizes the automatic detection of loopholes and efficient management.Specifically,the system has functional modules such as integrated scanning,port scanning,sql injection scanning,network directory scanning,C-segment scanning,and xss cross-station scanning.After testing and running,the functional modules of the system are well-defined and basically meet the commonly used vulnerability scanning scenarios.In addition,the system has the characteristics of stable operation,small network delay and low dependence on hardware and software environment.

关 键 词：漏洞扫描 模糊测试 MYSQL Djang 

分 类 号：TP311[自动化与计算机技术—计算机软件与理论]