Website directory blasting method based on website map

Abstract

The invention discloses a website directory blasting method based on a website map, which comprises the following steps of: firstly, obtaining the website map of a target website to obtain a tree structure of the website map; secondly, establishing a common path name set, and respectively establishing a verb set and a noun set for common verb path names and noun path names; analyzing each layer ofwebsite path names in the website map according to the path name set to obtain path features including part-of-speech component composition in the path names and different part-of-speech component combination modes; and finally, constructing a new path according to the obtained path features, and implementing directory blasting on the target website. Directory blasting is achieved by analyzing anexisting website map of a website, the directory blasting efficiency can be greatly improved, the time required for directory blasting is shortened, and the directory blasting speed is increased.

Description

technical field [0001] The invention relates to a website directory blasting method based on a website map, which improves the efficiency of website directory blasting by identifying and extracting features of the existing website map. Background technique [0002] Website directory blasting plays an important role in security testing and provides a basis for further security analysis. The implementation of existing website directory blasting tools is usually to set the common path dictionary first, and then traverse and arrange the paths in the path dictionary to find as many directories as possible in the target website. A significant shortcoming of this method The reason is that the workload is too large. When the paths in the path dictionary are randomly arranged and combined, the number of results generated is very large, which will cause the blasting process to take a lot of time, thus making the efficiency of directory blasting low. In the process of developing the s...

AI Technical Summary

Problems solved by technology

The implementation of existing website directory blasting tools is usually to set the common path dictionary first, and then traverse and arrange the paths in the path dictionary to find as many directories as possible in the target website. A significant disadvantage of this method The reason is that the workload is too large. When the paths in the path dictionary are randomly arranged and combined, the number of results generated is very large, which will cause the blasting process to take a lot of time, thus making the efficiency of directory blasting low.

Images