面向Web应用的漏洞扫描器的设计与实现

DESIGN AND IMPLEMENTATION OF VULNERABILITY SCANNER FOR WEB APPLICATION

本文采用渗透测试技术,设计并实现一个Web应用扫描器。扫描器通过爬虫获取结果,然后调用插件检测常见漏洞,能够进行目录文件爆破、CMS识别、端口扫描、爬虫、SQL注入检测、XSS漏洞检测等扫描,最终通过输出扫描报告达到一次完整的网站扫描。

This article penetration testing technology,design and implement a Web application scanner.The scanner obtains the result through the crawler,and then calls the plug-in to detect common vulnerabilities.It can perform directory file blasting,CMS identification,port scanning,crawler,SQL injection detection,XSS vulnerability detection,etc,and finally achieves a complete website scan through the output scan report.