Content management system identification method and device, and storage medium

Abstract

The invention provides a content management system recognition method and a device, and a storage medium, and aims to improve the effectiveness of a content management system recognition result. The content management system identification method comprises the steps of acquiring webpage feature information from a predicted webpage, and the webpage feature information comprises at least one of webpage response header and response body information, static resource information, webpage directory structure information, webpage association information, webpage error page information, webpage footertechnical support information and a reading guide file; extracting a preset keyword from the webpage feature information corresponding to the predicted webpage and converting the preset keyword intoa corresponding feature vector; and based on the feature vector, determining a webpage type corresponding to the predicted webpage by using a CMS clustering model, the CMS clustering model being obtained by performing clustering iteration by using webpage feature information extracted from a webpage sample.

Description

technical field [0001] The invention relates to the technical field of network security, in particular to a content management system identification method, device and storage medium. Background technique [0002] The content management system (Content Management System, CMS) is based on the modular design concept, which can produce comprehensive or professional websites such as news websites, social blogs, animation games, video movies, etc. in a short period of time. Due to the frequent changes of CMS system versions and the rapid rise of emerging systems, there are more and more types of CMS used for enterprises, institutions or individuals to build websites. CMS system identification is a very important stage in the penetration testing process and a key link in information collection. Identifying a website's CMS system plays a vital role in ensuring website security. [0003] In the prior art, a commonly used CMS identification method is fingerprint identification tech...

AI Technical Summary

Problems solved by technology

[0004] However, since most fingerprints are based on file MD5 or file paths and specific regular expressions, for CMS applications that are frequently updated, the possibility of fingerprint invalidation is high, thereby reducing the effectiveness of CMS identification results; in addition, large Some secondary developers will delete or block some unique fingerprint features of CMS, such as changing the directory structure of the original static files, deleting the original CMS name characters, removing robots.txt, etc. Another situation is after the CMS version is upgraded Many fingerprint features will be invalid, such as MD5 / directory structure / file where keywords are located, etc., which will also affect the validity of CMS identification results

Images