Metasploit渗透攻击平台的设计与实现  

The Design and Realization of Penetrating and Attacking Platform with Metasploit

作　　者：王学庆 罗尚平[2] WANG Xueqing;LUO Shangping(Retirement Office of Leshan Normal University,Leshan Normal University,Leshan Sichuan 614000,China;School of Computer Science,Leshan Normal University,Leshan Sichuan 614000,China)

机构地区：[1]乐山师范学院离退休工作处,四川乐山614000 [2]乐山师范学院计算机科学学院,四川乐山614000

出　　处：《乐山师范学院学报》2020年第4期45-48,共4页Journal of Leshan Normal University

基　　金：互联网自然语言智能处理四川省高等学校重点实验室课题“智能运维中异常检测关键技术研究”(INLP201909)。

摘　　要：利用虚拟机软件部署多台虚拟机,为其安装特定操作系统软件并设定网络环境,设计一个基于Metasploit框架的渗透攻击测试平台。通过使用Metasploit框架对平台中的靶机进行漏洞探测,并利用靶机存在的漏洞发起渗透攻击,分析渗透攻击过程中可以应用的手段,再针对部分攻击手段制定防御对策,以达到验证攻防技术,提升网络安全性的目的。This paper studies the design and implementation of penetration testing platform based on Metasploit framework. It mainly introduces how to deploy multiple virtual machines by using virtual machine software,how to install specific operating system software and set up network environment for them,and how to design a penetration testing platform based on Metasploit framework. Through the use of Metasploit framework to detect the vulnerability of the target in the platform,the vulnerability of the target is used to launch penetration attack,and to analyze the means that can be applied in the process of penetration attack,and then Defense Countermeasures are formulated against some of the means to achieve the purpose of verifying the attack and Defense Technology and improving the network security.

关 键 词：Metasploit渗透 攻击 漏洞利用 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]