基于PHP CMS的Web安全仿真系统构建  

Establish A Web Security Simulation System Based on PHP CMS

作　　者：秦文生[1] QIN Wen-sheng(Chengdu Vocational and Technical College,Chengdu 610041,China)

机构地区：[1]成都职业技术学院,四川成都610041

出　　处：《电脑知识与技术》2020年第28期235-236,共2页Computer Knowledge and Technology

基　　金：成都职业技术学院院级科研项目(课题编号:19CZYG004)。

摘　　要：搭建一套基于PHP的Linux Web靶机系统,对互联网上的典型安全场景进行仿真,可以使原本在实验室难以开展的实验得以进行。该系统的构建包含了“SQL注入-进入后台-获取webshell-系统提权”四个典型的安全场景,涵盖了目前主机安全测试的四个过程。In order to simulate typical security scenarios on the Internet,we built a Linux Web target system based on PHP.In this way,experiments that were difficult to carry out in the laboratory can be carried out.The system includes four typical security sce⁃narios:"SQL injection-access to the web background-access to webshell-system to mention"four typical security scenarios,covering the current host security test of the four processes.

关 键 词：靶机 系统安全 SQL注入 安全测试 

分 类 号：TP3[自动化与计算机技术—计算机科学与技术]