Website weak password detecting method

Abstract

The invention discloses a website weak password detecting method which comprises the steps of conducting automatic scanning on a website based on a dispatching task to acquire user information of the website, wherein the user information comprises the user name, the code and the encryption method of the code; encrypting a weak password in a weak password dictionary based on the encryption method to acquire an encrypted weak password; matching the encrypted weak password with the code to acquire a weak password code and a normal code; conducting simulated login verification based on the weak password code and the user name corresponding to the weak password code. According to the method, weak password detection is efficiently and accurately conducted on the website, the omission ratio is low, and pressure on the website to be monitored is low.

Description

technical field [0001] The invention relates to the technical field of electronic information security, in particular to a method for detecting weak website passwords. Background technique [0002] Today, with the gradual acceleration of enterprise informationization, the importance of information system passwords can be imagined. The password is equivalent to the key to enter the house. When others have a key to enter your home, think about your safety, your property, and your privacy. Because weak passwords can be easily guessed or cracked by others, it is very dangerous if you use weak passwords, like leaving your house keys under the mat at the door of your house. [0003] Traditional weak password scanning tools generally use exhaustive simulated logins to crack, and traditional weak password scanning uses weak password dictionary tables to detect through exhaustive methods. The specific process is as follows: [0004] First, generate the user-password according to t...

AI Technical Summary

Problems solved by technology

[0015] The invention provides a method for detecting website weak passwords, which solves the technical problems of low scanning efficiency and accuracy, high missed detection rate, and high pressure on scanned websites in the existing weak password scanning methods. It realizes the efficient and accurate detection of weak passwords on the website, and has a low rate of missed detection, and produces less pressure on the monitored website.

Images