摘 要
互联网是大数据时代下人们传递信息的主要工具。互联网在当下有着非常丰富的信息资源,能够为广大的用户提供丰富的信息内容。人们在网络上可以进行社交、购物、游戏等多种多样的活动开展。然而,在网络如此发达的当下,也出现了一些不和谐的声音,有一些不法分子会利用网络的漏洞来进行对网站的攻击,最初有些是处于好奇的心理,但是随着信息的商业价值凸显,现在很多的攻击都是带有目的性的,希望能够通过木马、漏洞侵入等方式来实现更多的商业价值信息的盗取,从而获得非法的商业利益。在这种情况下,各大网站也纷纷的进行改进升级,不断的进行漏洞的修复。但是在网络环境下,技术是不断的发展的,漏洞也只不断的出现的,如果网民在不安全的信道中进行信息的浏览,有可能计算机被植入病毒,丢失个人隐私信息、造成经济损失等都是极有可能发生的。
所以本次通过以B/S结构搭建一款能够渗透检测工具,通过该工具的开发来进行web网页漏洞、web端口扫描的技术实现,通过在线的网站检测来查找网页是否存在漏洞的情况,对于网站达的后期升级、保护有着非常好的帮助作用,可以有效的检测出可能存在的漏洞,可以实现自动化的检测,能够更好地发现安全问题,实现漏洞的及时弥补。
关键词:web端口测试;渗透测试;python
Abstract
The Internet is the main tool for people to transmit information in the data age. At present, the Internet has a very rich information resources, which can provide rich information content for a wide range of users. People can carry out a variety of activities on the network, such as social networking, shopping, games and so on. However, at the present time when the network is so developed, there are also some discordant voices, some illegal elements will use the network vulnerability to attack the website, initially some are curious, but with the commercial value of information highlighted, now many attacks are purposeful, in the hope that more commercial value information can be stolen by Trojan horse, vulnerability intrusion, etc. In order to obtain illegal commercial benefits. In this case, major websites are also improving and upgrading, and continue to repair the vulnerability. However, in the network environment, technology continues to develop, and loopholes only continue to appear. If netizens browse information in an unsafe channel, it is possible that computers will be implanted with viruses, loss of personal privacy information, causing economic losses, and so on, are very likely to occur.
So this time, through the B/S structure to build a tool that can penetrate the detection, through the development of the tool to carry out web page vulnerabilities, web port scanning technology implementation, through online website detection to find out if there are any vulnerabilities in the web page, which has a very good help for the late upgrade and protection of the website, can effectively detect possible vulnerabilities, and can achieve automated detection. Can better discover security issues, and achieve timely remediation of vulnerabilities.
Keywords: web port test; Penetration test; Python