Web security vulnerability detection system and detection method based on information collection

Abstract

The invention provides a Web security vulnerability detection system and detection method based on information collection. The Web security vulnerability detection system based on information collection includes a project management module, an information collection module, a scanning detection module, a vulnerability utilization module, an auxiliary tool module, a Web integrated penetration module and a custom function module. The Web security vulnerability detection system and detection method based on information collection enable each scanning tool to form a complete penetration system, perform modular classification on the penetration test tools to enable the penetration test flow to be clear at a glance, so that each tool of the system can be switched freely and coordinated with each other, can accurately position and verify the vulnerability after the related information of the target network service is scanned and detected so as to avoid the situation that a large quantity of FUZZ tests are fuzzed during the scanning process of a traditional scanner, so that normal operation of the target service is influenced, and have the advantages of being wide in the aspect of the scanned and collected information and being relatively more thorough in scanning.

Description

technical field [0001] The invention relates to the field of network security, in particular to an information collection-based Web security loophole detection system and detection method. Background technique [0002] With the rapid development of the IT market and the network, the sharing of network resources has been further strengthened, and the ensuing information security issues have become increasingly prominent. The diversity and interconnectivity of network composition forms provide more convenience for intrusion. When using traditional scanners, many different tools are required. Each tool is in a fragmented state and does not form a complete penetration testing system. A large number of fuzzy tests are usually performed during scanning, which affects the normal operation of the target business. Moreover, traditional scanning There are few aspects of server information collection, and the collected information is not complete. Contents of the invention [0003]...

AI Technical Summary

Problems solved by technology

When using traditional scanners, many different tools are required. Each tool is in a fragmented state and does not form a complete penetration testing system. A large number of fuzzy tests are usually performed during scanning, which affects the normal operation of the target business. Moreover, traditional scanning There are few aspects of server information collection, and the collected information is not complete

Images