Website scanning method and device, electronic equipment and medium

Abstract

The application relates to a website scanning method and device, electronic equipment and medium. The method comprises the following steps: obtaining scanning information for a target website; the scanning information comprises a scanning item; based on the scanning item, corresponding plug-in principle information is extracted, and the plug-in principle information and the scanning information are encapsulated into a task and put into a task pool, so that a task executor monitoring the task pool executes the task; a request packet is constructed according to the scanning information, and the request packet is sent to the target website, so that the target website generates a response packet corresponding to the request packet; based on the request packet and the response packet, content parameters are extracted, and the associated information of the task is saved according to the content parameters, so as to solve the problems of long scanning time and low rechecking efficiency in the multi-site scanning scene, and improve the efficiency and flexibility of vulnerability scanning.

Description

Technical Field

[0001] This disclosure relates to the field of computer technology, and in particular to a website scanning method, apparatus, electronic device, and medium. Background Technology

[0002] In the process of enterprise and organizational informatization, most application architectures are based on the Web platform. These applications are also subject to numerous Web threats, necessitating the use of vulnerability scanning tools to maintain the security of internal systems. However, the complex internal network environment requires a significant amount of time to investigate security issues. This forces site operations and maintenance personnel and site developers to spend even more time on site security maintenance. The slower the vulnerability is discovered, the greater the risk of loss. In more severe cases, when multiple sites need to be maintained, the required costs increase dramatically.

[0003] Conventional vulnerability scanning devices have significant shortcomings, such as: slow efficiency in reviewing single sites, inability to quickly identify vulnerabilities; lack of support for targeted scanning or scanning based on vulnerability type (e.g., scanning only for cross-site scripting vulnerabilities on a target site); and excessively long scanning times for multiple sites, resulting in slow vulnerability identification and inability to promptly disclose the security status of internal systems. To address these issues and highlight the advantages of this detection method, a fully automated, rapid scanning device for target sites is provided. This device improves the efficiency of multi-site scanning and review, enables timely disclosure of site vulnerabilities, and allows for timely remediation proposals to reduce security risks and prevent dangerous vulnerabilities from being exploited by hackers, thus avoiding significant financial losses.

[0004] The information disclosed in the background section is only intended to enhance the understanding of the background of this disclosure, and therefore may include information that does not constitute prior art known to those skilled in the art. Summary of the Invention

[0005] In view of this, the present invention provides a website scanning method, apparatus, electronic device and medium to solve the problems of long scanning time and low re-inspection efficiency in multi-site scanning scenarios.

[0006] Other features and advantages of the invention will become apparent from the following detailed description, or may be learned in part by practice of the invention.

[0007] According to one aspect of the present invention, a website scanning method is provided, wherein the method includes:

[0008] Obtain scanning information for the target website; the scanning information includes the scanning items;

[0009] Based on the scanned items, the corresponding plugin principle information is extracted, and the plugin principle information and the scanned information are encapsulated into a task and placed into a task pool so that the task executor listening to the task pool can execute the task.

[0010] A request packet is constructed based on the scan information, and the request packet is sent to the target website so that the target website generates a response packet corresponding to the request packet;

[0011] Content parameters are extracted based on the request packet and the response packet, and the associated information of the task is saved according to the content parameters.

[0012] In some embodiments of the present invention, based on the foregoing scheme, the scanning information further includes the link address of the target website and the scanning rate of the scanning item.

[0013] In some embodiments of the present invention, based on the foregoing scheme,

[0014] Based on the request packet and the response packet, content parameters are extracted, and the associated information of the task is saved according to the content parameters, including:

[0015] Content parameters are extracted from the request header and request body of the request packet and the response header and response body of the response packet, and the associated information of the task is saved based on the content parameters.

[0016] In some embodiments of the present invention, based on the foregoing scheme,

[0017] Based on the request packet and the response packet, content parameters are extracted, and the associated information of the task is saved according to the content parameters, including:

[0018] Extract content parameters based on the request packet and the response packet;

[0019] Obtain the fitting code corresponding to the content parameters;

[0020] The associated information of the task is saved based on the fitted code.

[0021] In some embodiments of the present invention, based on the foregoing scheme, the associated information of the task is saved based on the fitted code, including:

[0022] The database cache is queried to see if the feature value corresponding to the fitted code exists. If it exists, the vulnerability scan is marked as successful, and the task and vulnerability scan information are saved together.

[0023] In some embodiments of the present invention, based on the foregoing scheme, the associated information of the task is saved based on the fitted code, including:

[0024] The database cache is checked to see if the feature value corresponding to the fitted code exists. If it does not exist, the principle of the vulnerability is verified for the plugin principle information.

[0025] Once the verification is successful, the task and vulnerability scanning information are saved together.

[0026] In some embodiments of the present invention, based on the foregoing scheme, the method further includes:

[0027] Display the task information in the task pool.

[0028] According to one aspect of the present invention, a website scanning device is provided, wherein the device includes:

[0029] The acquisition module is configured to acquire scan information for a target website; the scan information includes scan items.

[0030] The encapsulation module is configured to extract the corresponding plugin principle information based on the scanned item, and encapsulate the plugin principle information and the scanned information into a task and put it into the task pool, so that the task executor listening to the task pool can execute the task.

[0031] The sending module is configured to construct a request packet based on the scan information and send the request packet to the target website, so that the target website generates a response packet corresponding to the request packet;

[0032] The saving module is configured to extract content parameters based on the request packet and the response packet, and save the associated information of the task according to the content parameters.

[0033] In some embodiments of the present invention, based on the foregoing scheme, the scanning information further includes the link address of the target website and the scanning rate of the scanning item.

[0034] In some embodiments of the present invention, based on the foregoing scheme, the storage module is configured to extract content parameters based on the request header and request body of the request packet and the response header and response body of the response packet, and to store the associated information of the task based on the content parameters.

[0035] In some embodiments of the present invention, based on the foregoing scheme, the saving module is configured to extract content parameters based on the request packet and the response packet; obtain the fitting code corresponding to the content parameters; and save the associated information of the task based on the fitting code.

[0036] In some embodiments of the present invention, based on the foregoing scheme, the storage module is configured to query the database cache to see if there is a feature value corresponding to the fitted code. If it exists, the vulnerability scan is marked as successful, and the task and vulnerability scan information are associated and stored.

[0037] In some embodiments of the present invention, based on the foregoing scheme, the storage module is configured to query the database cache to see if there is a feature value corresponding to the fitting code; if not, to perform a vulnerability principle verification on the plug-in principle information.

[0038] Once the verification is successful, the task and vulnerability scanning information are saved together.

[0039] In some embodiments of the present invention, based on the foregoing scheme, the device is further configured to display task information in the task pool.

[0040] According to one aspect of the present invention, an electronic device is provided, comprising: one or more processors; and a storage device for storing one or more programs, wherein when the one or more programs are executed by the one or more processors, the one or more processors perform the method steps as described above.

[0041] According to another aspect of the present invention, a computer-readable storage medium is provided having a computer program stored thereon, wherein the program, when executed by a processor, implements the method steps described above.

[0042] In this embodiment of the invention, scanning information for a target website is obtained; the scanning information includes scanning items; corresponding plugin principle information is extracted based on the scanning items, and the plugin principle information and the scanning information are encapsulated into a task and placed into a task pool, so that a task executor listening to the task pool executes the task; a request packet is constructed according to the scanning information, and the request packet is sent to the target website, so that the target website generates a response packet corresponding to the request packet; content parameters are extracted based on the request packet and the response packet, and the association information of the task is saved according to the content parameters, thereby solving the problems of long scanning time and low re-examination efficiency in multi-site scanning scenarios, and improving the efficiency and flexibility of vulnerability scanning.

[0043] It should be understood that the above general description and the following detailed description are exemplary and explanatory only, and are not intended to limit the invention. Attached Figure Description

[0044] The accompanying drawings, which are incorporated in and constitute a part of this specification, illustrate embodiments consistent with the invention and, together with the description, serve to explain the principles of the invention. It is obvious that the drawings described below are merely some embodiments of the invention, and those skilled in the art can obtain other drawings based on these drawings without any inventive effort. In the drawings:

[0045] Figure 1 This is a flowchart illustrating a website scanning method according to an exemplary embodiment;

[0046] Figure 2 This is a flowchart illustrating a website scanning method according to another exemplary embodiment;

[0047] Figure 3 This is a schematic diagram of the structure of a website scanning device according to an exemplary embodiment;

[0048] Figure 4 This is a schematic diagram of the structure of an electronic device according to an exemplary embodiment. Detailed Implementation

[0049] Exemplary embodiments will now be described more fully with reference to the accompanying drawings. However, these exemplary embodiments can be implemented in many forms and should not be construed as limited to the embodiments set forth herein; rather, they are provided so that the invention will be thorough and complete, and the concept of the exemplary embodiments will be fully conveyed to those skilled in the art. The same reference numerals in the drawings denote the same or similar parts, and therefore repeated descriptions of them will be omitted.

[0050] Furthermore, the described features, structures, or characteristics can be combined in any suitable manner in one or more embodiments. Numerous specific details are provided in the following description to give a full understanding of embodiments of the invention. However, those skilled in the art will recognize that the technical solutions of the invention can be practiced without one or more of the specific details, or other methods, components, apparatuses, steps, etc., can be employed. In other instances, well-known methods, apparatuses, implementations, or operations are not shown or described in detail to avoid obscuring various aspects of the invention.

[0051] The block diagrams shown in the accompanying drawings are merely functional entities and do not necessarily correspond to physically independent entities. That is, these functional entities can be implemented in software, in one or more hardware modules or integrated circuits, or in different network and / or processor devices and / or microcontroller devices.

[0052] The flowcharts shown in the accompanying drawings are merely illustrative and do not necessarily include all content and operations / steps, nor do they necessarily have to be performed in the described order. For example, some operations / steps can be broken down, while others can be combined or partially combined; therefore, the actual execution order may change depending on the specific circumstances.

[0053] It should be understood that while the terms first, second, third, etc., may be used herein to describe various components, these components should not be limited by these terms. These terms are used to distinguish one component from another. Therefore, the first component discussed below may be referred to as the second component without departing from the teachings of this disclosure. As used herein, the term "and / or" includes all combinations of any and more of the associated listed items.

[0054] Those skilled in the art will understand that the accompanying drawings are merely schematic diagrams of exemplary embodiments, and the modules or processes in the drawings are not necessarily necessary for implementing this disclosure, and therefore cannot be used to limit the scope of protection of this disclosure.

[0055] Figure 1 This is a flowchart illustrating a website scanning method according to an exemplary embodiment. The method can be executed by a scanning device with computing power, which can be a terminal or a server. Figure 1 As shown, this method may include, but is not limited to, the following processes:

[0056] In S110, scanning information for the target website is obtained; the scanning information includes scanning items.

[0057] In this embodiment of the invention, the target website can be a web browser. In addition to the scanned items, the scan information may also include the link address of the target website and the scan rate of the scanned items.

[0058] In this embodiment of the invention, a new detection task can be created in the scanning device, the link address of the target website can be filled in, the scanning item can be selected, and the scanning rate can be filled in, thereby obtaining the scanning information for the target website.

[0059] In S120, the corresponding plugin principle information is extracted based on the scanned item, and the plugin principle information and the scanned information are encapsulated into a task and placed into a task pool so that the task executor listening to the task pool can execute the task.

[0060] In this embodiment of the invention, the scanning device extracts the plugin principle information corresponding to the scanned items from the target website, encapsulates the scanning information and the plugin principle information into a newly created meta-task, and puts the meta-task into the task pool.

[0061] In this embodiment of the invention, the scanning device includes a task executor that monitors tasks in a task pool. When there are tasks to be executed in the task pool, execution begins.

[0062] In S130, a request packet is constructed based on the scan information and sent to the target website so that the target website generates a response packet corresponding to the request packet.

[0063] In this embodiment of the invention, a request packet can be constructed based on the above scanning information. The request packet can be a request packet of protocols such as HTTP, HTTPS, TCP, and UDP. After receiving the request packet, the target website generates a response packet corresponding to the request packet. The response packet corresponding to the request packet can be a response packet of protocols such as HTTP, HTTPS, TCP, and UDP.

[0064] In S140, content parameters are extracted based on the request packet and the response packet, and the associated information of the task is saved according to the content parameters.

[0065] In this embodiment of the invention, the content parameters may refer to keywords extracted from the request packet and the response packet, and there may be multiple content parameters extracted from the request packet and the response packet. For example, the request packet may be a request to find flowers, and the response packet may be the returned specific flower information.

[0066] In this embodiment of the invention, content parameters are extracted based on the request header and request body of the request packet and the response header and response body of the response packet, and the associated information of the task is saved based on the content parameters.

[0067] It should be noted that the request header and body of the request packet, as well as the response header and body of the response packet, all include content parameters. Therefore, it is necessary to extract the content parameters from the request header and body of the request packet and the response header and body of the response packet.

[0068] According to an embodiment of the present invention, saving the association information of a task based on content parameters may include obtaining the fitting code corresponding to the content parameters; and saving the association information of the task based on the fitting code.

[0069] It should be noted that in the embodiments of the present invention, a correspondence between content parameters and fitting codes can be preset, so that after obtaining the content parameters, the corresponding fitting code can be found from the correspondence. However, the present invention is not limited to this, and any method that can obtain the fitting code based on the content parameters should be within the protection scope of this application.

[0070] In this embodiment of the invention, saving the associated information of the task based on the fitted code may include querying the database cache to see if there is a feature value corresponding to the fitted code. If it exists, the vulnerability scan is marked as successful, and the task and vulnerability scan information are saved together.

[0071] It should be noted that, in this embodiment of the invention, the fitted code and feature value are stored in the database cache in a key-value pair manner to facilitate saving and subsequent retrieval of task records and vulnerability scanning information.

[0072] In this embodiment of the invention, the fitted code is used as the key. The database cache is searched for the feature value corresponding to the fitted code key. If it exists, the vulnerability scan is marked as successful, and the task and vulnerability scan information are associated and saved. If it does not exist, the vulnerability principle verification of the plugin principle information is performed. After successful verification, the task and vulnerability scan information are associated and saved. It should be noted that if it does not exist, the fitted code is used as the key, and the feature value is used as the value, and stored in the buffer pool.

[0073] In this embodiment of the invention, during task scanning, the user can view the progress in real time, pause the scan, terminate the scan, and query the scan results for the target website after the scan is completed. Viewing the progress, pausing the scan, and terminating the scan can be achieved by displaying task information in the task pool, while querying the scan results for the target website can be achieved by querying the database.

[0074] In this embodiment of the invention, scanning information for a target website is obtained; the scanning information includes scanning items; corresponding plugin principle information is extracted based on the scanning items, and the plugin principle information and the scanning information are encapsulated into a task and placed into a task pool, so that a task executor listening to the task pool executes the task; a request packet is constructed according to the scanning information, and the request packet is sent to the target website, so that the target website generates a response packet corresponding to the request packet; content parameters are extracted based on the request packet and the response packet, and the association information of the task is saved according to the content parameters, thereby solving the problems of long scanning time and low re-examination efficiency in multi-site scanning scenarios, and improving the efficiency and flexibility of vulnerability scanning.

[0075] This invention provides another method for obtaining a fitting code based on content parameters. Specifically, the coordinates corresponding to the content parameters can be preset, thereby mapping each extracted content parameter to coordinates in a coordinate system, resulting in multiple coordinate points. Each coordinate point is then used as a sample, substituted into the fitting function, and the coefficients of the fitting function are calculated to obtain the fitting function. The fitting function is then converted into a fitting code. It should be noted that the conversion of the fitting function into a fitting code can be achieved through hash encoding.

[0076] The website scanning method proposed in this invention will be described in detail below for specific application scenarios.

[0077] Figure 2 This is a flowchart illustrating a website scanning method according to another exemplary embodiment, such as... Figure 2 As shown, this method may include, but is not limited to, the following processes:

[0078] In S201, scan information is obtained. A new detection task can be created within the scanning device, the link address of the target website can be entered, the scan items can be selected, and the scan rate can be entered to obtain scan information for the target website.

[0079] In S202, based on the scanned items, the plugin principle information is extracted, packaged into a meta-task, and then placed into the task pool.

[0080] In S203, the executor retrieves tasks from the task pool and begins execution.

[0081] In S204, the fitted value is calculated based on the request packet and the response packet.

[0082] In S205, it is determined whether the feature value corresponding to the fitted value is found in the buffer pool.

[0083] If the judgment result is negative, execute S206; if the judgment result is positive, execute S207.

[0084] In S206, vulnerability principle verification is performed on the plugin principle information.

[0085] In S207, the task and vulnerability scanning information are associated and stored in a buffer.

[0086] During the scanning process, the scanning device can also obtain the results of the website scanning task, obtain the progress of the website scanning task, terminate the website scanning task, and pause the website scanning task.

[0087] In this embodiment of the invention, scanning information for a target website is obtained; the scanning information includes scanning items; corresponding plugin principle information is extracted based on the scanning items, and the plugin principle information and the scanning information are encapsulated into a task and placed into a task pool, so that a task executor listening to the task pool executes the task; a request packet is constructed according to the scanning information, and the request packet is sent to the target website, so that the target website generates a response packet corresponding to the request packet; content parameters are extracted based on the request packet and the response packet, and the association information of the task is saved according to the content parameters, thereby solving the problems of long scanning time and low re-examination efficiency in multi-site scanning scenarios, and improving the efficiency and flexibility of vulnerability scanning.

[0088] It should be clearly understood that this invention describes how specific examples are formed and used, but the principles of the invention are not limited to any details of these examples. Rather, based on the teachings of this disclosure, these principles can be applied to many other embodiments.

[0089] The following are embodiments of the apparatus of the present invention, which can be used to execute embodiments of the method of the present invention. In the following description of the system, parts that are the same as those described in the foregoing method will not be repeated.

[0090] Figure 3 This is a schematic diagram illustrating the structure of a scanning device 300 according to an exemplary embodiment, wherein the device 300 includes:

[0091] The acquisition module 310 is configured to acquire scanning information for a target website; the scanning information includes scanning items.

[0092] The encapsulation module 320 is configured to extract the corresponding plugin principle information based on the scanned item, and encapsulate the plugin principle information and the scanned information into a task and put it into a task pool so that the task executor listening to the task pool can execute the task.

[0093] The sending module 330 is configured to construct a request packet based on the scanning information and send the request packet to the target website, so that the target website generates a response packet corresponding to the request packet;

[0094] The storage module 340 is configured to extract content parameters based on the request packet and the response packet, and save the associated information of the task according to the content parameters.

[0095] In this embodiment of the invention, the scanning information also includes the link address of the target website and the scanning rate of the scanning item.

[0096] In this embodiment of the invention, the storage module 340 is configured to extract content parameters based on the request header and request body of the request packet and the response header and response body of the response packet, and to store the associated information of the task based on the content parameters.

[0097] In this embodiment of the invention, the storage module 340 is configured to extract content parameters based on the request packet and the response packet; obtain the fitting code corresponding to the content parameters; and save the associated information of the task based on the fitting code.

[0098] In this embodiment of the invention, the storage module 340 is configured to query the database cache to see if there is a feature value corresponding to the fitted code. If it exists, the vulnerability scan is marked as successful, and the task and vulnerability scan information are saved together.

[0099] In this embodiment of the invention, the storage module 340 is configured to query the database cache to see if there is a feature value corresponding to the fitting code. If it does not exist, the module performs a vulnerability principle verification on the plugin principle information.

[0100] Once the verification is successful, the task and vulnerability scanning information are saved together.

[0101] In this embodiment of the invention, the device is further configured to display task information in the task pool.

[0102] In this embodiment of the invention, scanning information for a target website is obtained; the scanning information includes scanning items; corresponding plugin principle information is extracted based on the scanning items, and the plugin principle information and the scanning information are encapsulated into a task and placed into a task pool, so that a task executor listening to the task pool executes the task; a request packet is constructed according to the scanning information, and the request packet is sent to the target website, so that the target website generates a response packet corresponding to the request packet; content parameters are extracted based on the request packet and the response packet, and the association information of the task is saved according to the content parameters, thereby solving the problems of long scanning time and low re-examination efficiency in multi-site scanning scenarios, and improving the efficiency and flexibility of vulnerability scanning.

[0103] Figure 4 This is a schematic diagram illustrating the structure of an electronic device according to an exemplary embodiment. It should be noted that... Figure 4 The electronic device shown is merely an example and should not impose any limitation on the functionality and scope of use of the embodiments of this application.

[0104] like Figure 4 As shown, the computer system 400 includes a central processing unit (CPU) 401, which can perform various appropriate actions and processes based on programs stored in read-only memory (ROM) 402 or programs loaded from storage section 408 into random access memory (RAM) 403. The RAM 403 also stores various programs and data required for the operation of the system 400. The CPU 401, ROM 402, and RAM 403 are interconnected via a bus 404. An input / output (I / O) interface 405 is also connected to the bus 404.

[0105] The following components are connected to I / O interface 405: an input section 406 including a keyboard, mouse, etc.; an output section 407 including a cathode ray tube (CRT), liquid crystal display (LCD), etc., and speakers, etc.; a storage section 408 including a hard disk, etc.; and a communication section 409 including a network interface card such as a LAN card, modem, etc. The communication section 409 performs communication processing via a network such as the Internet. A drive 410 is also connected to I / O interface 405 as needed. A removable medium 411, such as a disk, optical disk, magneto-optical disk, semiconductor memory, etc., is installed on drive 410 as needed so that computer programs read from it can be installed into storage section 408 as needed.

[0106] In particular, according to embodiments of this disclosure, the processes described above with reference to the flowcharts can be implemented as computer software programs. For example, embodiments of this disclosure include a computer program product comprising a computer program carried on a computer-readable medium, the computer program containing program code for performing the methods shown in the flowcharts. In such embodiments, the computer program can be downloaded and installed from a network via communication section 409, and / or installed from removable medium 411. When the computer program is executed by central processing unit (CPU) 401, it performs the functions defined in the terminal of this application.

[0107] In general, this disclosure primarily aims to provide an efficient, flexible, and comprehensive vulnerability scanning method, addressing the issues of long scanning times and low re-examination efficiency in multi-site scanning scenarios. Besides the inherent advantages of the scanning device technology, multi-site scanning and site re-examination additionally support vulnerability re-examination targeting only specified scan items, ignoring irrelevant or non-critical vulnerability types, and focusing only on vulnerability types that site administrators need to prioritize, thus improving scanning efficiency and making the display of scan results more targeted. Specifically, this disclosure utilizes asynchronous execution of scanning tasks, allows for customizable scan items and scan rates, and leverages the "scan memory" function for rapid site re-examination in single-site scanning, improving re-examination efficiency. Furthermore, the "scan memory" function significantly reduces scanning time in multi-site scanning mode, enhancing scanning efficiency. First, a new detection task is created, the target scanning site link address is entered, scan items are selected, the scan rate is entered, and scanning begins. The scanning device extracts the corresponding plugins based on the scan items, encapsulates the scanning information and plugin principles into a meta-task, places it in the task pool, and awaits execution by the task executor. The task executor listens to tasks in the task pool, retrieves tasks to be executed, and begins execution. It constructs a request packet based on the parameters of the meta-task, sends the request, and receives the response. Parameters are extracted from the request header, response header, request body, and response body and mapped to a coordinate system. Coefficients are calculated using the coordinate markers and the function to derive the fitting function, which is then converted into a fitting code. The fitting code is first used to query the "scan memory" for feature values. If found, the vulnerability scan is marked as successful, the meta-task record is saved, and the vulnerability information is associated. If no feature value is found in the "scan memory" using the fitting code, a fundamental vulnerability verification is performed according to the verification rules. If the verification passes, the meta-task record is saved, the vulnerability information is associated, and the fitting code is used as the key, and the feature value as the value is stored in the buffer pool. During task scanning, the progress can be viewed in real time, and the scan can be paused or terminated. After scanning is complete, the site scan results can be queried. The scan results display the scanned site, scan duration, site vulnerability details (vulnerability information, feature values, etc.), and request packet details. This disclosure can significantly improve scanning efficiency and reduce vulnerability investigation time in scenarios such as site re-inspection and multi-site vulnerability scanning. The scan results are displayed intuitively and vulnerability remediation solutions are provided, which facilitates site maintenance personnel to fix site vulnerabilities, eliminates site security risks very quickly, and reduces site maintenance costs.

[0108] It should be noted that the computer-readable medium shown in this application can be a computer-readable signal medium or a computer-readable storage medium, or any combination thereof. A computer-readable storage medium can be, for example,—but not limited to—an electrical, magnetic, optical, electromagnetic, infrared, or semiconductor system, apparatus, or device, or any combination thereof. More specific examples of a computer-readable storage medium may include, but are not limited to: an electrical connection having one or more wires, a portable computer disk, a hard disk, random access memory (RAM), read-only memory (ROM), erasable programmable read-only memory (EPROM or flash memory), optical fiber, portable compact disk read-only memory (CD-ROM), optical storage device, magnetic storage device, or any suitable combination thereof. In this application, a computer-readable storage medium can be any tangible medium containing or storing a program that can be used by or in conjunction with an instruction execution system, apparatus, or device. In this application, a computer-readable signal medium can include a data signal propagated in baseband or as part of a carrier wave, carrying computer-readable program code. Such propagated data signals can take various forms, including but not limited to electromagnetic signals, optical signals, or any suitable combination thereof. Computer-readable signal media can also be any computer-readable medium other than computer-readable storage media, which can send, propagate, or transmit a program for use by or in connection with an instruction execution system, apparatus, or device. The program code contained on the computer-readable medium can be transmitted using any suitable medium, including but not limited to: wireless, wire, optical fiber, RF, etc., or any suitable combination thereof.

[0109] The flowcharts and block diagrams in the accompanying drawings illustrate the architecture, functionality, and operation of possible implementations of systems, methods, and computer program products according to various embodiments of this application. In this regard, each block in a flowchart or block diagram may represent a module, segment, or portion of code containing one or more executable instructions for implementing a specified logical function. It should also be noted that in some alternative implementations, the functions indicated in the blocks may occur in a different order than those indicated in the drawings. For example, two consecutively indicated blocks may actually be executed substantially in parallel, and they may sometimes be executed in reverse order, depending on the functions involved. It should also be noted that each block in a block diagram or flowchart, and combinations of blocks in a block diagram or flowchart, may be implemented using a dedicated hardware-based system that performs the specified function or operation, or using a combination of dedicated hardware and computer instructions.

[0110] The modules described in the embodiments of this application can be implemented in software or hardware. The described modules can also be located in a processor, and the name of the module does not necessarily limit the module itself.

[0111] Exemplary embodiments of the present invention have been specifically shown and described above. It should be understood that the present invention is not limited to the detailed structures, arrangements, or implementations described herein; rather, the present invention is intended to cover various modifications and equivalent arrangements contained within the spirit and scope of the appended claims.

Claims

1. A website scanning method, characterized by, The method includes: Obtain scanning information for the target website; the scanning information includes the scanning items; Based on the scanned items, the corresponding plugin principle information is extracted, and the plugin principle information and the scanned information are encapsulated into a task and placed into a task pool so that the task executor listening to the task pool can execute the task. A request packet is constructed based on the scan information, and the request packet is sent to the target website so that the target website generates a response packet corresponding to the request packet; Extract content parameters based on the request packet and the response packet; Obtain the fitting code corresponding to the content parameters; The system queries the database cache to see if the feature value corresponding to the fitted code exists. If it exists, the vulnerability scan is marked as successful, and the task and vulnerability scan information are saved together. If it does not exist, the system performs a vulnerability principle verification on the plugin principle information. If the verification is successful, the task and vulnerability scan information are saved together.

2. The website scanning method as described in claim 1, characterized in that, The scanning information also includes the link address of the target website and the scanning rate of the scanned item.

3. The website scanning method as described in claim 1, characterized in that, Based on the request packet and the response packet, content parameters are extracted, and the associated information of the task is saved according to the content parameters, including: Content parameters are extracted from the request header and request body of the request packet and the response header and response body of the response packet, and the associated information of the task is saved based on the content parameters.

4. The website scanning method as described in claim 1, characterized in that, The method further includes: Display the task information in the task pool.

5. A website scanning device, characterized in that, The device includes: The acquisition module is configured to acquire scan information for a target website; the scan information includes scan items. The encapsulation module is configured to extract the corresponding plugin principle information based on the scanned item, and encapsulate the plugin principle information and the scanned information into a task and put it into the task pool, so that the task executor listening to the task pool can execute the task. The sending module is configured to construct a request packet based on the scan information and send the request packet to the target website, so that the target website generates a response packet corresponding to the request packet; The storage module is configured to extract content parameters based on the request packet and the response packet, obtain the fitting code corresponding to the content parameters, query the database cache to see if the feature value corresponding to the fitting code exists, and if it exists, mark the vulnerability scan as successful and save the task and vulnerability scan information together; if it does not exist, perform vulnerability principle verification on the plugin principle information, and if the verification is successful, save the task and vulnerability scan information together.

6. An electronic device, characterized in that, include: One or more processors; Storage device for storing one or more programs; When the one or more programs are executed by the one or more processors, the one or more processors implement the method as described in any one of claims 1-4.

7. A computer-readable medium having a computer program stored thereon, characterized in that, When the program is executed by the processor, it implements the method as described in any one of claims 1-4.

Images