基于XSS跨脚本攻击的渗透测试研究  

Penetration Testing Research Based on XSS Cross-Script Attacks

作　　者：魏葆雅 林剑伟 Wei Bao-ya;Lin Jian-wei(School of Computer Science,Minnan Normal University,Zhangzhou 363099,Fujian Province,China;Shenzhen Grandstream Networks,Inc.,Shenzhen 518057,Guangdong Province,China)

机构地区：[1]闽南师范大学计算机学院,福建漳州363099 [2]深圳市潮流网络技术有限公司,广东深圳518057

出　　处：《科学与信息化》2024年第23期19-21,共3页Technology and Information

摘　　要：随着网络技术的飞速发展,人们在享受便利的同时,也面临着日益严峻的网络安全挑战。本文基于XSS跨脚本攻击进行了深入的渗透测试研究,旨在分析和理解XSS攻击的原理、类型及其利用方式。文章首先详细阐述了XSS攻击的基本原理,即攻击者在目标网站上注入恶意脚本,以窃取敏感信息或进行其他恶意操作;然后阐述了XSS攻击的类型,并分别解释了它们的工作原理和实现方式。With the rapid development of network technology,people are facing increasingly serious network security challenges while enjoying the convenience.This paper conducts in-depth penetration testing research based on XSS crossscript attacks,aiming to analyze and understand the principles,types and utilization of XSS attacks.Firstly,the basic principle of XSS attack is elaborated in detail,that is,the attacker injects malicious scripts on the target website to steal sensitive information or perform other malicious operations.Then,the types of XSS attacks are elaborated,and their working principles and implementation methods are explained respectively.

关 键 词：渗透测试 XSS渗透攻击 防护手段 

分 类 号：TP3[自动化与计算机技术—计算机科学与技术]