Vulnerability detection method and device in wireless communication mode, and electronic equipment

Abstract

The invention discloses a vulnerability detection method and device for a wireless communication mode and electronic equipment, and relates to the technical field of network communication or other related technical fields, and the method comprises the steps: obtaining a current protocol version and a security protocol authentication mode of a target wireless communication mode used by a current communication main body; acquiring a communication state of the current communication main body using the target wireless communication mode by adopting a plurality of state detection strategies; when the communication state is available, querying a vulnerability database according to the current protocol version, and obtaining vulnerability information existing in the current protocol version; and selecting and running a vulnerability detection program according to the vulnerability information, monitoring a vulnerability utilization effect in a process of running the vulnerability detection program, and outputting a vulnerability detection result. The technical problem that the vulnerability detection efficiency is low due to the fact that a vulnerability detection script aims at a single vulnerability or protocol in the prior art is solved.

Description

Technical Field

[0001] This invention relates to the field of network communication technology or other related fields. Specifically, it relates to a vulnerability detection method, apparatus, and electronic device for wireless communication modes. Background Technology

[0002] With the widespread adoption of smart devices and wireless communication technologies, especially the increasing application of unmanned autonomous systems such as drones in various fields, the security of wireless communication networks, as key links in data transmission and remote control within these systems, has become paramount. However, the openness and complexity of wireless communication networks also provide opportunities for external attackers. When performing missions, drones may face various threats based on wireless communication networks, such as man-in-the-middle attacks, denial-of-service attacks, wireless signal interference, and unauthorized access. These threats can not only affect the normal operation of drones but also lead to the leakage of sensitive data, and in severe cases, even cause drones to lose control.

[0003] In related technologies, the industry typically relies on various vulnerability scanning tools and protocol analysis software for the detection and assessment of wireless communication network security. These tools assess the security of wireless communication networks by simulating network attacks, detecting implementation deviations in network protocols, and identifying known security vulnerabilities. However, this detection method has the following drawbacks: existing vulnerability detection scripts and methods often target single vulnerabilities or protocols, lacking unified detection standards and processes, resulting in low vulnerability detection efficiency and the potential to miss certain types of security threats. Detection tools mainly focus on vulnerability discovery but lack the ability to verify network security after vulnerability remediation, meaning that even if vulnerabilities are discovered and patched, it cannot be guaranteed that the vulnerabilities have been completely eliminated or that new security problems have not been introduced.

[0004] There is currently no effective solution to the above problems. Summary of the Invention

[0005] This invention provides a vulnerability detection method, apparatus, and electronic device for wireless communication modes, to at least solve the technical problem in related technologies where vulnerability detection scripts target a single vulnerability or protocol, resulting in low vulnerability detection efficiency.

[0006] To achieve the above objectives, according to one aspect of this application, a vulnerability detection method for wireless communication modes is provided, comprising: obtaining the current protocol version and security protocol authentication method of the target wireless communication mode used by the current communication subject; employing multiple state detection strategies to obtain the communication state of the target wireless communication mode used by the current communication subject; if the communication state is available, querying a vulnerability database according to the current protocol version to obtain vulnerability information existing in the current protocol version; selecting and running a vulnerability detection program according to the vulnerability information, monitoring the vulnerability exploitation effect during the running of the vulnerability detection program, and outputting vulnerability detection results.

[0007] Optionally, the step of obtaining the current protocol version and security protocol authentication method of the target wireless communication mode used by the current communication subject includes: when the target wireless communication mode is WiFi mode, monitoring the wireless communication status of the current communication subject using the target wireless communication mode; during the monitoring of the wireless communication status, obtaining the physical layer information of the 802.11 protocol broadcast by the wireless access point in the target communication frame, wherein the target communication frame is a communication frame that periodically sends by the wireless access point in the wireless network to announce access point information and network configuration information, and the network configuration information includes at least one of the following: service set identifier, physical layer type, supported rate, and channel bandwidth; and identifying the current protocol version of the target wireless communication mode based on the physical layer information.

[0008] Optionally, the step of obtaining the current protocol version and security protocol authentication method of the target wireless communication mode used by the current communication subject includes: in the target terminal using the target wireless communication mode, starting the scanning function of the wireless network interface in the target terminal by executing a predetermined iw command, and outputting wireless network scanning information; extracting the security protocol authentication method from the wireless network scanning information.

[0009] Optionally, the steps of obtaining the current protocol version and security protocol authentication method of the target wireless communication mode used by the current communication subject include: when the target wireless communication mode is Bluetooth mode, using a preset Bluetooth command line tool to pair the current communication subject with the target communication device and complete the network connection; after completing the network connection, triggering the kernel Bluetooth stack of the current communication subject to automatically send control commands to the Bluetooth controller; listening to the control commands sent to the Bluetooth controller and recording the command event log, wherein the command event log includes: protocol version, manufacturer ID and revision number; reading the protocol version in the command event log to obtain the current protocol version of the target communication device.

[0010] Optionally, the step of using multiple state detection strategies to obtain the communication status of the current communication subject using the target wireless communication mode includes: when the target wireless communication mode is WiFi mode, using the iw command to perform signal detection, obtaining the wireless network interface information of the current communication subject using the target wireless communication mode, and determining the communication status based on the wireless network interface information, wherein the wireless network interface information includes at least one of the following: signal strength, channel status, and network configuration; or, using a preset network fault diagnosis tool to obtain the Internet Control Message Protocol request of the WiFi network, obtaining a network connectivity response message, and determining the communication status based on the network connectivity response message, wherein the preset network fault diagnosis tool includes at least the Ping command; or, using a network packet capture tool to capture the communication packets of the WiFi network at the data link layer, generating a network packet detection result, and determining the communication status based on the network packet detection result, wherein if the network packet detection result indicates no gateway return packet, it is determined that the communication status is disconnected.

[0011] Optionally, the step of using multiple state detection strategies to obtain the communication state of the current communication subject using the target wireless communication mode includes: when the target wireless communication mode is Bluetooth mode, using a Bluetooth network fault diagnosis tool to obtain the Bluetooth network connectivity between the current communication Bluetooth device and the target Bluetooth device, and obtaining the Bluetooth communication state; or, using a preset Bluetooth pairing interaction tool to list all paired devices of the current communication Bluetooth device, outputting paired device information, and determining the communication state between the current communication Bluetooth device and the target Bluetooth device based on the paired device information, wherein the paired device information includes at least one of the following: MAC address, name, and pairing status; using a preset Bluetooth protocol stack monitoring tool to monitor the events and commands of the current communication Bluetooth device using the Bluetooth protocol stack, obtaining Bluetooth communication monitoring data, and determining the communication state between the current communication Bluetooth device and the target Bluetooth device based on the Bluetooth communication monitoring data.

[0012] Optionally, the steps of selecting and running a vulnerability detection program based on the vulnerability information, monitoring the vulnerability exploitation effect during the operation of the vulnerability detection program, and outputting vulnerability detection results include: when the target wireless communication mode is Bluetooth mode, selecting a vulnerability detection program based on the vulnerability identifier in the vulnerability information; running a Bluetooth vulnerability detection module, running the vulnerability detection program through the Bluetooth vulnerability detection module, and again executing the step of obtaining the communication state of the current communication subject using the target wireless communication mode using multiple state detection strategies to obtain the network connectivity state of the current communication subject; and based on the network connectivity state of the current communication subject, monitoring the vulnerability exploitation effect during the operation of the vulnerability detection program and outputting vulnerability detection results.

[0013] According to another aspect of the present invention, a vulnerability detection device for a wireless communication mode is also provided, comprising: a protocol version acquisition unit, configured to acquire the current protocol version and security protocol authentication method of the target wireless communication mode used by the current communication subject; a communication status acquisition unit, configured to acquire the communication status of the target wireless communication mode used by the current communication subject using multiple status detection strategies; a vulnerability information acquisition unit, configured to query a vulnerability database according to the current protocol version and acquire vulnerability information existing in the current protocol version when the communication status is available; and a vulnerability detection unit, configured to select and run a vulnerability detection program according to the vulnerability information, monitor the vulnerability exploitation effect during the running of the vulnerability detection program, and output vulnerability detection results.

[0014] Optionally, the protocol version acquisition unit includes: a communication status monitoring module, used to monitor the wireless communication status of the current communication subject using the target wireless communication mode when the target wireless communication mode is WiFi mode; a physical layer information acquisition module, used to acquire the physical layer information of the 802.11 protocol broadcast by the wireless access point in the target communication frame during the monitoring of the wireless communication status, wherein the target communication frame is a communication frame that the wireless access point periodically sends in the wireless network to announce access point information and network configuration information, and the network configuration information includes at least one of the following: service set identifier, physical layer type, supported rate, and channel bandwidth; and a protocol version identification module, used to identify the current protocol version of the target wireless communication mode based on the physical layer information.

[0015] Optionally, the protocol version acquisition unit further includes: a scanning function activation module, used to activate the scanning function of the wireless network interface in the target terminal by executing a predetermined iw command in the target terminal using the target wireless communication mode, and output wireless network scanning information; and a security protocol authentication method extraction module, used to extract the security protocol authentication method from the wireless network scanning information.

[0016] Optionally, the protocol version acquisition unit includes: a pairing module, used to pair the current communication subject with the target communication device and complete the network connection using a preset Bluetooth command line tool when the target wireless communication mode is Bluetooth mode; a command triggering module, used to trigger the kernel Bluetooth stack of the current communication subject to automatically send control commands to the Bluetooth controller after the network connection is completed; a command listening module, used to listen to the control commands sent to the Bluetooth controller and record command event logs, wherein the command event logs include: protocol version, manufacturer ID and revision number; and a protocol version reading module, used to read the protocol version in the command event logs to obtain the current protocol version of the target communication device.

[0017] Optionally, the communication status acquisition unit includes: a network interface information acquisition module, used to perform signal detection using the iw command when the target wireless communication mode is WiFi mode, acquire the wireless network interface information of the current communication subject using the target wireless communication mode, and determine the communication status based on the wireless network interface information, wherein the wireless network interface information includes at least one of the following: signal strength, channel status, and network configuration; or, a connectivity response message acquisition module, used to acquire the Internet Control Message Protocol request of the WiFi network using a preset network fault diagnosis tool, obtain a network connectivity response message, and determine the communication status based on the network connectivity response message, wherein the preset network fault diagnosis tool includes at least the Ping command; or, a data packet detection module, used to capture communication data packets of the WiFi network at the data link layer using a network data packet capture tool, generate a network data packet detection result, and determine the communication status based on the network data packet detection result, wherein if the network data packet detection result indicates no gateway return packet, it is determined that the communication status is disconnected.

[0018] Optionally, the communication status acquisition unit includes: a Bluetooth network connectivity acquisition module, used to acquire the Bluetooth network connectivity between the current communication Bluetooth device and the target Bluetooth device using a Bluetooth network troubleshooting tool when the target wireless communication mode is Bluetooth mode, and obtain the Bluetooth communication status; or, a pairing device information output module, used to list all paired devices of the current communication Bluetooth device using a preset Bluetooth pairing interaction tool, output pairing device information, and determine the communication status between the current communication Bluetooth device and the target Bluetooth device based on the pairing device information, wherein the pairing device information includes at least one of the following: MAC address, name, and pairing status; and a Bluetooth protocol stack command monitoring module, used to monitor the events and commands of the current communication Bluetooth device using the Bluetooth protocol stack using a preset Bluetooth protocol stack monitoring tool, obtain Bluetooth communication monitoring data, and determine the communication status between the current communication Bluetooth device and the target Bluetooth device based on the Bluetooth communication monitoring data.

[0019] Optionally, the vulnerability detection unit includes: a vulnerability detection program selection module, used to select a vulnerability detection program based on the vulnerability identifier of the vulnerability information when the target wireless communication mode is Bluetooth mode; a detection program execution module, used to run the Bluetooth vulnerability detection module, run the vulnerability detection program through the Bluetooth vulnerability detection module, and execute the step of obtaining the communication status of the current communication subject using the target wireless communication mode using multiple state detection strategies again to obtain the network connectivity status of the current communication subject; and a vulnerability detection module, used to monitor the vulnerability exploitation effect during the execution of the vulnerability detection program based on the network connectivity status of the current communication subject, and output the vulnerability detection result.

[0020] According to another aspect of the present invention, a computer-readable storage medium is also provided, the computer-readable storage medium including a stored computer program, wherein, when the computer program is executed, it controls the device where the computer-readable storage medium is located to perform a vulnerability detection method of any of the above-mentioned wireless communication modes.

[0021] According to another aspect of the present invention, an electronic device is also provided, including one or more processors and a memory, the memory being used to store one or more programs, wherein when the one or more programs are executed by the one or more processors, the one or more processors cause the one or more processors to implement a vulnerability detection method for a wireless communication mode as described above.

[0022] According to another aspect of the present invention, a computer program product is also provided, including a computer program that, when executed by a processor, implements the steps of the vulnerability detection method for any of the above-described wireless communication modes.

[0023] In this disclosure, the current protocol version and security protocol authentication method of the target wireless communication mode used by the current communication subject are obtained; multiple state detection strategies are used to obtain the communication status of the target wireless communication mode used by the current communication subject; when the communication status is available, a vulnerability database is queried according to the current protocol version to obtain vulnerability information existing in the current protocol version; a vulnerability detection program is selected and run according to the vulnerability information, and the vulnerability exploitation effect is monitored during the operation of the vulnerability detection program, and the vulnerability detection results are output.

[0024] This disclosure allows for the acquisition of the current protocol version and security protocol authentication method of the target wireless communication mode used by the current communication subject. Given the diverse styles of protocol versions, vulnerability information is obtained by combining the communication status, ensuring a stable vulnerability detection environment. It also enables rapid matching and detection of known vulnerabilities in the target device, providing targeted detection solutions, outputting vulnerability detection results, and improving vulnerability detection efficiency. This addresses the technical problem in related technologies where vulnerability detection scripts target only a single vulnerability or protocol, resulting in low vulnerability detection efficiency. Attached Figure Description

[0025] The accompanying drawings, which are included to provide a further understanding of the invention and form part of this application, illustrate exemplary embodiments of the invention and, together with their description, serve to explain the invention and do not constitute an undue limitation thereof. In the drawings:

[0026] Figure 1 A hardware structure block diagram of a computer terminal (or mobile device) for implementing a vulnerability detection method in a wireless communication mode is shown.

[0027] Figure 2 This is a flowchart of a vulnerability detection method for an optional wireless communication mode according to an embodiment of the present invention;

[0028] Figure 3 This is a flowchart of a WiFi communication vulnerability scanning and detection method according to an embodiment of the present invention;

[0029] Figure 4 This is a flowchart of another Bluetooth communication threat vulnerability scanning and detection method according to an embodiment of the present invention;

[0030] Figure 5 This is a schematic diagram of a vulnerability detection device for an optional wireless communication mode according to an embodiment of the present invention;

[0031] Figure 6 This is a structural block diagram of an electronic device according to an embodiment of this application. Detailed Implementation

[0032] To enable those skilled in the art to better understand the present invention, the technical solutions of the present invention will be clearly and completely described below with reference to the accompanying drawings of the embodiments of the present invention. Obviously, the described embodiments are only some embodiments of the present invention, and not all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative effort should fall within the scope of protection of the present invention.

[0033] It should be noted that the terms "first," "second," etc., in the specification, claims, and accompanying drawings of this invention are used to distinguish similar objects and are not necessarily used to describe a specific order or sequence. It should be understood that such data can be interchanged where appropriate so that the embodiments of the invention described herein can be implemented in orders other than those illustrated or described herein. Furthermore, the terms "comprising" and "having," and any variations thereof, are intended to cover a non-exclusive inclusion; for example, a process, method, system, product, or apparatus that comprises a series of steps or units is not necessarily limited to those steps or units explicitly listed, but may include other steps or units not explicitly listed or inherent to such processes, methods, products, or apparatus.

[0034] To facilitate understanding of the present invention by those skilled in the art, some terms or nouns involved in the various embodiments of the present invention are explained below:

[0035] CVE, Common Vulnerabilities and Exposures, is an internationally recognized vulnerability database that includes a large number of known security vulnerabilities and their descriptions, used for standardized reporting and remediation of software security issues.

[0036] PHY type refers to the type of physical layer in a wireless network, which determines the wireless spectrum and modulation method of the wireless network, such as 802.11b / g / n / ac / ax, etc.

[0037] In a wireless network, a beacon is a management frame that an access point (AP) periodically broadcasts to inform clients of the presence of the AP, its BSSID (Basic Service Set Identifier), channel information, and more.

[0038] Tcpdump is an open-source packet capture tool used to monitor and record network traffic in real time on network interfaces. It can be used for network monitoring, troubleshooting, and security auditing.

[0039] Bluetooth is a wireless technology standard used for short-range wireless communication between mobile phones, computers and other portable devices, facilitating data exchange and device interconnection.

[0040] It should be noted that the vulnerability detection method and apparatus for wireless communication modes in this disclosure can be used in the field of network communication technology to scan and detect threats and vulnerabilities in wireless communication networks based on network communication, and can also be used in any field other than the field of network communication technology to scan and detect threats and vulnerabilities in wireless communication networks based on network communication. This disclosure does not limit the application field of the vulnerability detection method and apparatus for wireless communication modes.

[0041] It should be noted that the information (including but not limited to user device information, user personal information, etc.) and data (including but not limited to data used for analysis, stored data, and displayed data) collected in this public disclosure are information and data authorized by the user or fully authorized by all parties. Furthermore, the collection, storage, use, processing, transmission, provision, disclosure, and application of related data all comply with the relevant laws, regulations, and standards of the relevant regions, necessary confidentiality measures have been taken, and they do not violate public order and good morals. Corresponding operation entry points are provided for users to choose to authorize or refuse. For example, this system has interfaces with relevant users or organizations. Before obtaining relevant information, a request to obtain the information needs to be sent to the aforementioned user or organization through the interface, and the relevant information is obtained only after receiving consent from the aforementioned user or organization.

[0042] It should be noted that in this disclosure, customer information is collected and analyzed, and users are provided with corresponding operation entry points to choose whether to agree to or reject the automated decision results; if the user chooses to reject, the process will proceed to the expert decision-making process.

[0043] The following embodiments of the present invention can be applied to systems / applications / devices for vulnerability detection in various wireless communication modes. The present invention is applicable to various wireless communication scenarios, such as secure communication for drones: in the remote control and data transmission of drones, the present invention can effectively detect potential vulnerabilities in wireless communication modules (such as WiFi or Bluetooth), improve the network security of drones, and prevent remote hacking or data leakage.

[0044] This invention can accurately identify the WiFi or Bluetooth protocol version of a target device and monitor network status in real time from multiple dimensions such as signal quality, connectivity, and packet exchange, ensuring a stable environment for vulnerability detection. Combined with a vulnerability database, this invention can quickly match and detect known vulnerabilities in target devices, providing targeted detection solutions.

[0045] Based on the acquired vulnerability information, this invention can automatically select and run corresponding vulnerability detection programs, monitor vulnerability exploitation effects in real time, and improve the efficiency and accuracy of vulnerability detection. By implementing this invention, security threats in wireless communication can be systematically identified and addressed, effectively improving the security of wireless communication in scenarios such as drones and IoT devices.

[0046] The present invention will now be described in detail with reference to various embodiments.

[0047] Example 1

[0048] According to an embodiment of the present invention, an embodiment of a vulnerability detection method for a wireless communication mode is provided. It should be noted that the steps shown in the flowchart in the accompanying drawings can be executed in a computer system such as a set of computer-executable instructions. Furthermore, although a logical order is shown in the flowchart, in some cases, the steps shown or described may be executed in a different order than that shown here.

[0049] The vulnerability detection method for wireless communication modes provided in Embodiment 1 of this application can be executed in a mobile terminal, computer terminal, or similar computing device. Figure 1 A hardware block diagram of a computer terminal (or mobile device) for implementing a vulnerability detection method in a wireless communication mode is shown. Figure 1 As shown, computer terminal 10 (or mobile device) may include one or more ( Figure 1 The processor 102 (illustrated as 102a, 102b, ..., 102n) may include, but is not limited to, a microprocessor MCU (Microcontroller Unit) or a programmable gate array (FPGA), a memory 104 for storing data, and a transmission device 106 for communication functions. In addition, it may include: a display, an input / output interface (I / O interface), a Universal Serial Bus (USB) port (which may be included as one of the ports of a BUS bus), a network interface, a power supply, and / or a camera. Those skilled in the art will understand that... Figure 1 The structure shown is for illustrative purposes only and does not limit the structure of the aforementioned electronic device. For example, computer terminal 10 may also include... Figure 1 The more or fewer components shown, or having the same Figure 1 The different configurations shown.

[0050] It should be noted that the aforementioned one or more processors 102 and / or other data processing circuits are generally referred to herein as "data processing circuits". These data processing circuits may be embodied, in whole or in part, in software, hardware, firmware, or any other combination thereof. Furthermore, the data processing circuits may be a single, independent processing module, or may be integrated, in whole or in part, into any other element within the computer terminal 10 (or mobile device). As involved in the embodiments of this application, the data processing circuits serve as a processor control mechanism (e.g., selection of a variable resistor termination path connected to an interface).

[0051] The memory 104 can be used to store software programs and modules of application software, such as the program instructions / data storage device corresponding to the vulnerability detection method of the wireless communication mode in this embodiment of the application. The processor 102 executes various functional applications and data processing by running the software programs and modules stored in the memory 104, thereby realizing the aforementioned vulnerability detection method of the wireless communication mode. The memory 104 may include high-speed random access memory, and may also include non-volatile memory, such as one or more magnetic storage devices, flash memory, or other non-volatile solid-state memory. In some instances, the memory 104 may further include memory remotely located relative to the processor 102, and these remote memories can be connected to the computer terminal 10 via a network. Examples of the aforementioned networks include, but are not limited to, the Internet, corporate intranets, local area networks, mobile communication networks, and combinations thereof.

[0052] The transmission device 106 is used to receive or send data via a network. Specific examples of the network described above may include a wireless network provided by the communication provider of the computer terminal 10. In one example, the transmission device 106 includes a Network Interface Controller (NIC), which can connect to other network devices via a base station to communicate with the Internet. In another example, the transmission device 106 may be a Radio Frequency (RF) module, used for wireless communication with the Internet.

[0053] The display can be, for example, a touchscreen liquid crystal display (LCD), which allows the user to interact with the user interface of the computer terminal 10 (or mobile device).

[0054] Under the aforementioned operating environment, this application provides the following: Figure 2 The method for detecting vulnerabilities in the wireless communication mode shown. Figure 2 This is a flowchart of a vulnerability detection method for an optional wireless communication mode according to an embodiment of the present invention, such as... Figure 2 As shown, the method includes the following steps:

[0055] Step S201: Obtain the current protocol version and security protocol authentication method of the target wireless communication mode used by the current communication subject.

[0056] Optionally, the steps of obtaining the current protocol version and security protocol authentication method of the target wireless communication mode used by the current communication subject include: when the target wireless communication mode is WiFi mode, monitoring the wireless communication status of the current communication subject using the target wireless communication mode; during the monitoring of the wireless communication status, obtaining the physical layer information of the 802.11 protocol broadcast by the wireless access point in the target communication frame, wherein the target communication frame is a communication frame that is periodically sent by the wireless access point in the wireless network to announce access point information and network configuration information, and the network configuration information includes at least one of the following: service set identifier, physical layer type, supported rate, and channel bandwidth; and identifying the current protocol version of the target wireless communication mode based on the physical layer information.

[0057] This embodiment employs a passive monitoring strategy to monitor the WiFi wireless communication status of the current communication entity in real time. During the monitoring process, this embodiment analyzes special communication frames periodically broadcast by the wireless access point (AP)—target communication frames (e.g., Beacon frames). These frames contain rich 802.11 protocol physical layer information and are a key source of WiFi network configuration and status. Specifically, the network configuration information contained in the target communication frame may include Service Set Identifier (SSID), physical layer type (e.g., 802.11b / g / n / ac / ax), supported transmission rates, and used channel bandwidth. Based on the physical layer information obtained from the target communication frame, this embodiment can intelligently identify the current protocol version of the target wireless communication mode. For example, when the target communication frame contains "HE caps," it can be identified as the Wi-Fi 6 protocol version, while "EHT caps" corresponds to Wi-Fi 7, "VHT caps" indicates Wi-Fi 5, and "HT caps" indicates Wi-Fi 4. This helps in accurately selecting appropriate vulnerability detection programs and databases subsequently.

[0058] For example, WiFi version detection passively "sniffs" the 802.11 physical layer information (PHY type, supported rates, channel bandwidth, etc.) broadcast by the access point in the Beacon frame, and then deduces the Wi-Fi protocol version. This embodiment can not only obtain the specific protocol version used by the wireless communication device, but also understand its supported security protocol authentication methods, providing accurate location and basic information for vulnerability detection.

[0059] Optionally, the steps of obtaining the current protocol version and security protocol authentication method of the target wireless communication mode used by the current communication subject include: in the target terminal using the target wireless communication mode, starting the scanning function of the wireless network interface in the target terminal by executing a predetermined iw command, and outputting wireless network scanning information; and extracting the security protocol authentication method from the wireless network scanning information.

[0060] In this embodiment, by running a preset `iw` command on the target terminal, the scanning function of the wireless network interface is activated, which helps to collect detailed information about the surrounding WiFi networks, including but not limited to the network's SSID, channel, signal strength, and key security protocol authentication methods. The execution result of the `iw` command outputs wireless network scan information, which comprehensively describes the characteristics of all WiFi networks that the target terminal can detect. For example, when executing `sudoiw dev wlan0 scan | grep -E "SSID|primary channel|HE caps|EHT caps" | tee ap_list.txt` on the terminal, `iw` is the system command to invoke wireless access, `grep` filters the output of `iw` to find the required fields, and `tee` writes the results to `ap_list.txt`.

[0061] From the wireless network scanning information described above, this embodiment can extract the security protocol authentication method used by each WiFi network, such as WPA (Wi-Fi Protected Access), WPA2, or WPA3. This information is crucial for assessing the security of WiFi networks because different authentication methods differ in encryption strength and ability to resist attacks.

[0062] By using the iw command to scan wireless network interfaces, this embodiment can help the target terminal quickly obtain a list of surrounding WiFi networks and their respective security features. The output wireless network scan information not only includes basic network information, but also related fields such as security protocols. The security protocol authentication methods extracted from the wireless network scan information can guide the selection of subsequent vulnerability detection programs, ensuring that the detection tools used match the security configuration of the target network, thereby improving the effectiveness and accuracy of vulnerability detection.

[0063] Optionally, the steps of obtaining the current protocol version and security protocol authentication method of the target wireless communication mode used by the current communication subject include: when the target wireless communication mode is Bluetooth mode, using a preset Bluetooth command line tool to pair the current communication subject with the target communication device and complete the network connection; after the network connection is completed, triggering the kernel Bluetooth stack of the current communication subject to automatically send control commands to the Bluetooth controller; listening to the control commands sent to the Bluetooth controller and recording the command event log, wherein the command event log includes: protocol version, manufacturer ID and revision number; reading the protocol version in the command event log to obtain the current protocol version of the target communication device.

[0064] With the rapid development of intelligent technology, the application scenarios of drone technology are constantly expanding. Bluetooth plays a crucial role in short-range communication, including authentication, issuing mission commands, and collecting aircraft performance data. Vulnerability detection helps improve the overall security of drones. To automate Bluetooth vulnerability detection, this embodiment allows the current communication subject to pair with the target communication device and establish a stable Bluetooth network connection using a preset Bluetooth command-line tool (optional, such as bluetoothctl). After establishing the Bluetooth connection, this embodiment can trigger the kernel Bluetooth stack of the current communication subject to automatically send control commands to the Bluetooth controller. These commands obtain detailed configuration information of the Bluetooth device, including its protocol version, manufacturer ID, and revision number. In this way, the automation capabilities of the kernel Bluetooth stack are utilized to efficiently obtain the configuration details of the target device, reducing human interference, improving data accuracy and reliability, and obtaining the required information with minimal intervention, thus contributing to the stable operation of the system.

[0065] In this embodiment, once a control command is sent to the Bluetooth controller, a listening mechanism tracks the entire interaction process and records detailed command event logs. The command event logs include not only the sent control commands but also the controller's response data. Finally, this embodiment delves into the protocol version information within the command event logs. By parsing this information, it determines the Bluetooth protocol version currently used by the target communication device, which helps in understanding the device's communication capabilities and security features.

[0066] For example, using `bluetoothctl` to pair and connect the target device once triggers the kernel to automatically send the `ReadRemote Version Information` command. The HCI event is then exported in real time using `btmon` (built into BlueZ). The `Read Remote Version Information Complete` event is captured from the `btmon` log, and the LMP version field indicates the Bluetooth version of the other party. This embodiment enables real-time monitoring of Bluetooth device communication status, which helps to dynamically adjust vulnerability detection strategies.

[0067] Step S202: Use multiple state detection strategies to obtain the communication state of the current communication subject using the target wireless communication mode.

[0068] Optionally, the step of using multiple state detection strategies to obtain the communication status of the current communication subject using the target wireless communication mode includes: when the target wireless communication mode is WiFi mode, using the iw command to perform signal detection, obtaining the wireless network interface information of the current communication subject using the target wireless communication mode, and determining the communication status based on the wireless network interface information, wherein the wireless network interface information includes at least one of the following: signal strength, channel status, and network configuration; or, using a preset network fault diagnosis tool to obtain the Internet Control Message Protocol request of the WiFi network, obtaining the network connectivity response message, and determining the communication status based on the network connectivity response message, wherein the preset network fault diagnosis tool includes at least the Ping command; or, using a network packet capture tool to capture the communication packets of the WiFi network at the data link layer, generating network packet detection results, and determining the communication status based on the network packet detection results, wherein if the network packet detection results indicate that there is no gateway return packet, it is determined that the communication status is disconnected.

[0069] In this embodiment, by executing the `iw` command, the signal strength, channel status, and network configuration information of the current communication entity's wireless network interface are detected. This helps to quickly determine the health status and potential problems of the communication in WiFi mode, such as weak signal, channel congestion, or network configuration errors. Combining the detection results of the `iw` command, configuration errors or physical layer problems that may affect network performance can be identified, allowing for network configuration optimization and improved data transmission efficiency and security.

[0070] This embodiment also provides another strategy: using a pre-set network troubleshooting tool, such as the Ping command, to send an Internet Control Message Protocol (ICMP) request to the target device in the WiFi network. By analyzing the network connectivity response message returned by the target device, the connectivity of the communication status can be further confirmed. This ICMP request-response based method can effectively detect network layer connectivity problems, such as routing failures or no response from the target device, thereby providing a more comprehensive assessment of the communication status (the assessed communication status can be divided into normal status and disconnected status).

[0071] Furthermore, this embodiment employs a network packet capture tool (which can be selected based on different wireless network modes, such as tcpdump) to capture communication packets at the data link layer of the WiFi network in real time. The generated network packet detection results provide deeper details of network communication, including packet sending and receiving. If no gateway return packet is found in the detection results, it indicates that the current communication subject is disconnected from the WiFi network, thus confirming an abnormal communication status. This method is particularly suitable for detecting data link layer faults, such as frame loss or errors at the link layer. By capturing network packets and delving into the communication details of the data link layer, it helps identify link layer faults and is very helpful in troubleshooting network problems caused by the link layer. It also helps assess network security and prevent packet loss or unauthorized tampering.

[0072] The various state detection strategies in this embodiment can monitor the signal quality and connectivity of the WiFi network in real time, which helps to discover and resolve network problems in a timely manner and create a more stable testing environment for vulnerability detection.

[0073] Optionally, the step of using multiple state detection strategies to obtain the communication status of the current communication subject using the target wireless communication mode includes: when the target wireless communication mode is Bluetooth mode, using a Bluetooth network fault diagnosis tool to obtain the Bluetooth network connectivity between the current communication Bluetooth device and the target Bluetooth device, and obtaining the Bluetooth communication status; or, using a preset Bluetooth pairing interaction tool to list all paired devices of the current communication Bluetooth device, outputting paired device information, and determining the communication status between the current communication Bluetooth device and the target Bluetooth device based on the paired device information, wherein the paired device information includes at least one of the following: MAC address, name, and pairing status; using a preset Bluetooth protocol stack monitoring tool to monitor the events and commands of the current communication Bluetooth device using the Bluetooth protocol stack, obtaining Bluetooth communication monitoring data, and determining the communication status between the current communication Bluetooth device and the target Bluetooth device based on the Bluetooth communication monitoring data.

[0074] In this embodiment, when the target wireless communication mode is Bluetooth, a specialized Bluetooth network troubleshooting tool is used for connectivity testing. This aims to obtain the connectivity status between the current Bluetooth device and the target Bluetooth device, ultimately generating an evaluation report on the Bluetooth communication status. In this way, this embodiment ensures that the communication link between devices is in normal working order before subsequent Bluetooth security testing, facilitating in-depth testing on a stable foundation and avoiding testing errors caused by link problems. For example, the l2ping tool, similar to TCP ping, is used to test the connectivity between Bluetooth devices. For instance, the command `l2ping -i hci0 -c 4 A2:CF:49:FD:99:AF` can send four ping requests to a specified Bluetooth device.

[0075] This embodiment further proposes using a pre-defined Bluetooth pairing interaction tool to list information on all paired Bluetooth devices of the currently communicating Bluetooth device. This information includes, but is not limited to, key attributes such as MAC address, device name, and pairing status. By comparing the relevant data of the target Bluetooth device, the communication status between the current Bluetooth device and the target device can be accurately determined. For example, if the target device is not in the pairing list, or the pairing status shows as unpaired, the communication status may be marked as abnormal, prompting an additional pairing or connection attempt. For example, using the `bluetoothctl` tool to list paired devices: In the `bluetoothctl` interactive interface, the `paired-devices` command can list all paired Bluetooth devices to determine the target Bluetooth status.

[0076] Furthermore, this embodiment involves using a pre-defined Bluetooth protocol stack monitoring tool to monitor events and commands of the current Bluetooth communication device in real time when using the Bluetooth protocol stack. By collecting Bluetooth communication monitoring data, including various Bluetooth protocol stack events, commands, and responses, a deep understanding of the real-time status of Bluetooth communication between devices can be achieved. Based on the analysis of this monitoring data, this embodiment can determine whether the communication status between the current Bluetooth device and the target Bluetooth device is stable and whether there are any abnormal phenomena, such as packet loss, delays, or erroneous commands. Through continuous monitoring, this embodiment ensures that any dynamic changes that may affect the security of Bluetooth communication can be captured in a timely manner, providing a clear communication background view for vulnerability detection. For example, the btmon tool, which is used to monitor Bluetooth data, can be used to view the communication data between Bluetooth devices, thereby indirectly understanding the status of the devices.

[0077] The various state detection strategies employed in this embodiment ensure the stability of the Bluetooth communication link before performing Bluetooth vulnerability detection, helping to avoid misjudgments caused by network fluctuations. By analyzing information on paired devices, the state of the target Bluetooth device can be quickly located, aiding in the identification of potential pairing or connection problems.

[0078] Step S203: If the communication status is available, query the vulnerability database according to the current protocol version to obtain vulnerability information existing in the current protocol version.

[0079] In this embodiment, once the communication status of the current communication subject in the target wireless communication mode is confirmed to be available through multiple state detection strategies, the subsequent operations focus on querying the vulnerability database based on the current protocol version to obtain vulnerability information related to that protocol version. Using the protocol version information obtained from the target device as a query parameter, known security vulnerabilities under specific versions are filtered from the vulnerability database. This helps to focus on a set of vulnerabilities with practical significance, avoids ineffective detection of vulnerabilities in irrelevant versions, and improves the efficiency and accuracy of vulnerability detection. The obtained vulnerability information includes the nature of the vulnerability, its scope of impact, known exploitation methods, and remediation suggestions.

[0080] Step S204: Select and run a vulnerability detection program based on the vulnerability information, monitor the vulnerability exploitation effect during the operation of the vulnerability detection program, and output the vulnerability detection results.

[0081] After confirming the availability of communication and obtaining vulnerability information for the current protocol version, this embodiment selects the most suitable program from a pre-set vulnerability detection program library to detect vulnerabilities in the target device, based on the previously collected vulnerability information. The selected vulnerability detection program will specifically test each known vulnerability to verify whether the target device is affected by these security vulnerabilities. During the execution of the vulnerability detection program, this embodiment monitors the vulnerability exploitation effect in real time, including monitoring changes in network traffic, system response time, and potential security alerts. Through such monitoring, not only can the actual impact of the vulnerability be assessed, but any abnormal activity can also be detected immediately, providing real-time data support for outputting vulnerability detection results. Finally, based on the execution results of the vulnerability detection program and the monitoring situation, specific vulnerability detection results for the target device are output, including the existence and severity of the vulnerability and recommended countermeasures.

[0082] Optionally, the steps of selecting and running a vulnerability detection program based on the vulnerability information, monitoring the vulnerability exploitation effect during the operation of the vulnerability detection program, and outputting the vulnerability detection results include: when the target wireless communication mode is Bluetooth mode, selecting a vulnerability detection program based on the vulnerability identifier in the vulnerability information; running the Bluetooth vulnerability detection module, running the vulnerability detection program through the Bluetooth vulnerability detection module, and again executing the steps of obtaining the communication status of the current communication subject using the target wireless communication mode using multiple state detection strategies to obtain the network connectivity status of the current communication subject; and based on the network connectivity status of the current communication subject, monitoring the vulnerability exploitation effect during the operation of the vulnerability detection program and outputting the vulnerability detection results.

[0083] In this embodiment, for the case where the target wireless communication mode is Bluetooth, a matching vulnerability detection program is selected based on the vulnerability identifier in the pre-acquired vulnerability information. After selection, the Bluetooth vulnerability detection module is activated, and the selected vulnerability detection program is executed through this module. At the same time, the previously described state detection strategy is reactivated to continuously acquire the communication state of the current communication subject using Bluetooth mode, including the real-time status of network connectivity. This not only verifies the effectiveness of the Bluetooth vulnerability detection program but also reflects the impact of vulnerability detection on network connectivity in real time.

[0084] During the operation of the Bluetooth vulnerability detection program, this embodiment can achieve real-time monitoring of the vulnerability exploitation effect. Monitoring is not limited to the execution status of the detection program itself, but also includes continuous observation of the network connectivity status of the current communication entity. It can capture any network performance changes caused by vulnerability detection, such as increased network latency, increased packet loss rate, or complete disconnection, which helps to assess the actual severity of the vulnerability. Based on the current network connectivity status of the communication entity and the vulnerability exploitation effect data collected during the operation of the vulnerability detection program, this embodiment outputs the final vulnerability detection results, including a clear conclusion for each tested vulnerability, i.e., whether it exists, the severity of the vulnerability, and how it affects the network connectivity status. In addition, the output detection results may also include specific remediation suggestions or mitigation measures.

[0085] Through the above steps, the current protocol version and security protocol authentication method of the target wireless communication mode used by the current communication subject can be obtained; multiple state detection strategies are used to obtain the communication status of the target wireless communication mode used by the current communication subject; when the communication status is available, the vulnerability database is queried according to the current protocol version to obtain vulnerability information existing in the current protocol version; a vulnerability detection program is selected and run according to the vulnerability information, and the vulnerability exploitation effect is monitored during the execution of the vulnerability detection program, and the vulnerability detection results are output. In this embodiment, the current protocol version and security protocol authentication method of the target wireless communication mode used by the current communication subject can be obtained. Given the diverse styles of protocol versions, and by combining the vulnerability information with the communication status, the stability of the vulnerability detection environment is ensured, and known vulnerabilities existing in the target device are quickly matched and detected, providing a targeted detection solution, outputting vulnerability detection results, and improving vulnerability detection efficiency. This solves the technical problem in related technologies where vulnerability detection scripts target a single vulnerability or protocol, resulting in low vulnerability detection efficiency.

[0086] The following describes in detail another optional implementation method.

[0087] Figure 3 This is a flowchart of a WiFi communication vulnerability scanning and detection method according to an embodiment of the present invention, such as... Figure 3 As shown, it includes:

[0088] 1. Run the target WiFi protocol version detection module to obtain the target WiFi version and security protocol authentication method.

[0089] 2. Run the target WiFi availability detection module to obtain target status information.

[0090] 3. Run the target WiFi version vulnerability query module, and use the target WiFi version obtained in step 1 to query the vulnerability database to obtain vulnerability information of the target version.

[0091] 4. Run the WiFi vulnerability exploitation detection module, use the vulnerability information obtained by the target WiFi version vulnerability query module to find vulnerability detection programs in the vulnerability exploitation library, select the vulnerability detection program, and work with the target WiFi availability status detection module to monitor the vulnerability exploitation effect and output the underlying vulnerability results.

[0092] In this embodiment of the invention, WiFi vulnerability detection is performed in two steps. The first step is to identify the WiFi version and the WiFi security protocol authentication method, and then match it with data from the CVE vulnerability database to detect vulnerabilities in the target version. The second step is to perform vulnerability detection using an existing vulnerability detection script. This detection, based on the results after version identification, can quickly detect the target vulnerability.

[0093] Specifically, the following key modules are involved in the implementation process.

[0094] The first module, the target WiFi protocol version detection module, obtains the version information of the test target by connecting to it.

[0095] Step 1: WiFi version detection. By passively "sniffing" the 802.11 physical layer information (PHY type, supported rate, channel bandwidth, etc.) broadcast by the AP in the Beacon, the WiFi version can be deduced.

[0096] Step 2: Probe the security protocol authentication method using the iw command.

[0097] Practical operation:

[0098] In the terminal, execute: `sudo iw dev wlan0 scan | grep -E "SSID|primary channel|HEcaps|EHT caps"|tee ap_list.txt`.

[0099] Here, iw is the system command to invoke wireless, grep filters the output of iw to find the required fields, and tee writes the results to ap_list.txt.

[0100] The iw output can be used to determine the version if it contains the following: "HE caps" → Wi-Fi 6; "EHT caps" → Wi-Fi 7; "VHT caps" only → Wi-Fi 5; "HT caps" only → Wi-Fi 4.

[0101] The second module, the Target WiFi Availability Detection Module, acquires the status of the target WiFi network. Knowing the target's status is crucial for effectively assessing the vulnerability's execution. Therefore, this module employs multiple methods to obtain the target's status. The target status results are categorized as either normal or disconnected.

[0102] This module combines several methods, namely:

[0103] 1. Use the iw command to detect signals and obtain broadcast status.

[0104] 2. Use ping to obtain the ICMP status of the WiFi network. If there is a problem with the WiFi network, the connection will be interrupted.

[0105] 3. Use tcpdump to capture communication data packets with the WiFi gateway. If no gateway return packet is found, it means that there is a network disconnection problem.

[0106] By utilizing technologies such as the `iw` command, the `ping` tool, and `tcpdump`, this invention achieves comprehensive detection of the communication status of WiFi devices, including monitoring signal strength, network connectivity, and data flow. Through these strategies, the system can instantly determine network status, ensuring vulnerability detection is performed under stable conditions and improving detection reliability.

[0107] The third module, the target WiFi version vulnerability query module, obtains the target WiFi version using the target WiFi protocol version detection module, queries the WiFi version vulnerability database to find the vulnerability information of the target version, and outputs the WiFi vulnerabilities of the version.

[0108] The fourth module, the WiFi vulnerability exploitation detection module, obtains the target WiFi version through the target WiFi protocol version detection module, searches for vulnerability detection programs for the target version, and, in conjunction with the target WiFi availability status detection module, uses the WiFi vulnerability detection program to perform vulnerability detection on the target and outputs the vulnerability detection results.

[0109] Through the coordinated work of the four modules, vulnerabilities in WiFi communication can be accurately identified, thereby enabling WiFi communication threat vulnerability scanning and detection.

[0110] This embodiment can accurately identify the protocol version and security authentication method of the target WiFi device through passive sniffing and the use of system command-line tools, providing a precise information foundation for subsequent vulnerability queries, helping to avoid invalid detection and improve efficiency. Simultaneously, this invention utilizes vulnerability databases (such as CVEs) for vulnerability information matching and querying, enabling rapid location of potential security vulnerabilities in the target device.

[0111] This invention selects a suitable program for vulnerability detection on the target device and continuously monitors the exploitation effect of the vulnerability during execution, enabling timely and accurate output of vulnerability detection results. This makes the detection process both systematic and dynamic, which helps to quickly identify and respond to security threats.

[0112] Figure 4 This is a flowchart of another Bluetooth communication threat vulnerability scanning and detection method according to an embodiment of the present invention, such as... Figure 4 As shown, it includes:

[0113] 1. Run the target Bluetooth version detection module to obtain the target Bluetooth version.

[0114] 2. Run the target Bluetooth availability detection module to monitor and test the target Bluetooth communication status and obtain the real-time status of the target Bluetooth communication.

[0115] 3. Run the Bluetooth version vulnerability query module to query the target Bluetooth version obtained by the target Bluetooth version detection module through the version vulnerability database, and obtain the vulnerabilities existing in the target version and their detailed descriptions.

[0116] 4. Run the Bluetooth vulnerability exploitation detection module. Using the vulnerability number given by the Bluetooth version vulnerability query module as an index, search the vulnerability exploitation database and start the corresponding detection program. At the same time, use the target Bluetooth availability status detection module to monitor the target's connectivity status in real time, record the vulnerability triggering effect, and finally summarize and output the vulnerability detection results and the vulnerability formation principle.

[0117] This implementation method performs Bluetooth vulnerability detection in two steps. The first step is to identify the Bluetooth version and then match it with data from the CVE vulnerability database to detect problems in the target version. The second step is to perform vulnerability detection using a collection of vulnerability detection scripts. Based on the results after version identification, this detection can quickly detect the target vulnerability.

[0118] This implementation method involves the following key modules in the vulnerability detection process.

[0119] The first module, the target Bluetooth version detection module, obtains the version information of the test target through connection.

[0120] step:

[0121] 1. Scan and connect to the target device.

[0122] 2. Read the device's Device Information Service (0x180A) via the GATT protocol.

[0123] 3. Read characteristic values ​​such as Manufacturer Name, Model Number, Firmware Version, etc. Some devices may also include Bluetooth version information.

[0124] 4. Obtain the LMP Version, such as 5.3 (0x0c), which corresponds to Bluetooth 5.3.

[0125] Practical operation:

[0126] 1. Use bluetoothctl to pair and connect the target device once, triggering the kernel to automatically send the Read RemoteVersion Information command.

[0127] 2. Use btmon (built into BlueZ) to export HCI events in real time.

[0128] 3. Capture the "Read Remote Version Information Complete" event in the btmon logs → the LMPversion field indicates the Bluetooth version of the other party.

[0129] The second module is the target Bluetooth availability detection module: it detects the status of the target Bluetooth device through various methods, and the status is divided into two types: normal and disconnected.

[0130] This module combines the following methods to achieve availability status detection:

[0131] The first method uses the l2ping tool. Similar to TCP's ping, l2ping is used to test connectivity between Bluetooth devices. For example, the command `l2ping -i hci0 -c 4 A2:CF:49:FD:99:AF` can send four ping requests to a specified Bluetooth device.

[0132] The second method uses the BluetoothCTL tool. Listing paired devices: In the BluetoothCTL interface, the `paired-devices` command lists all paired Bluetooth devices. This helps determine the target Bluetooth status.

[0133] The third method uses the btmon tool. The btmon tool is used to monitor Bluetooth data. You can use it to view the communication data between Bluetooth devices, thereby indirectly understanding the status of the devices.

[0134] The third module, the Bluetooth version vulnerability query module, uses a version vulnerability database to query the target Bluetooth version after obtaining it, and outputs the Bluetooth vulnerabilities that exist in the target version.

[0135] The fourth module, the Bluetooth vulnerability exploitation detection module, is responsible for finding existing vulnerability detection programs based on the obtained Bluetooth version, cooperating with the target Bluetooth status detection module to perform Bluetooth vulnerability detection, and outputting vulnerability detection results.

[0136] Through the coordinated operation of the above four modules, vulnerabilities in the Bluetooth communication of target devices can be accurately identified, thereby realizing a Bluetooth communication threat vulnerability scanning and detection system.

[0137] The following is a detailed description with reference to another embodiment.

[0138] Example 2

[0139] The vulnerability detection device for wireless communication mode provided in this embodiment includes multiple implementation units, each of which corresponds to the implementation steps in the above embodiment one. The specific implementation method and beneficial effects can be referred to the foregoing method embodiment, and will not be repeated here.

[0140] Figure 5 This is a schematic diagram of a vulnerability detection device in an optional wireless communication mode according to an embodiment of the present invention, such as... Figure 5 As shown, the vulnerability detection device for this wireless communication mode may include: a protocol version acquisition unit 51, a communication status acquisition unit 52, a vulnerability information acquisition unit 53, and a vulnerability detection unit 54.

[0141] The protocol version acquisition unit 51 is used to acquire the current protocol version and security protocol authentication method of the target wireless communication mode used by the current communication subject.

[0142] The communication status acquisition unit 52 is used to acquire the communication status of the current communication subject using the target wireless communication mode by employing multiple status detection strategies;

[0143] The vulnerability information acquisition unit 53 is used to query the vulnerability database according to the current protocol version and obtain vulnerability information existing in the current protocol version when the communication status is available.

[0144] The vulnerability detection unit 54 is used to select and run vulnerability detection programs based on vulnerability information, monitor the vulnerability exploitation effect during the operation of the vulnerability detection programs, and output vulnerability detection results.

[0145] The aforementioned vulnerability detection device for wireless communication modes can obtain the current protocol version and security protocol authentication method of the target wireless communication mode used by the current communication subject through the protocol version acquisition unit 51; obtain the communication status of the target wireless communication mode used by the current communication subject through the communication status acquisition unit 52 using multiple status detection strategies; obtain vulnerability information by the vulnerability information acquisition unit 53 querying the vulnerability database according to the current protocol version when the communication status is available; and select and run a vulnerability detection program according to the vulnerability information by the vulnerability detection unit 54, monitor the vulnerability exploitation effect during the execution of the vulnerability detection program, and output the vulnerability detection result. In this embodiment, the current protocol version and security protocol authentication method of the target wireless communication mode used by the current communication subject can be obtained. Given the diverse styles of protocol versions, and by combining the vulnerability information with the communication status, the vulnerability detection environment is ensured to be stable. This allows for rapid matching and detection of known vulnerabilities in the target device, providing targeted detection solutions, outputting vulnerability detection results, and improving vulnerability detection efficiency. This solves the technical problem in related technologies where vulnerability detection scripts target a single vulnerability or protocol, resulting in low vulnerability detection efficiency.

[0146] Optionally, the protocol version acquisition unit includes: a communication status monitoring module, used to monitor the wireless communication status of the current communication subject using the target wireless communication mode when the target wireless communication mode is WiFi mode; a physical layer information acquisition module, used to acquire the physical layer information of the 802.11 protocol broadcast by the wireless access point in the target communication frame during the monitoring of the wireless communication status, wherein the target communication frame is a communication frame that is periodically sent by the wireless access point in the wireless network to announce access point information and network configuration information, and the network configuration information includes at least one of the following: service set identifier, physical layer type, supported rate, and channel bandwidth; and a protocol version identification module, used to identify the current protocol version of the target wireless communication mode based on the physical layer information.

[0147] Optionally, the protocol version acquisition unit further includes: a scanning function activation module, used to activate the scanning function of the wireless network interface in the target terminal by executing a predetermined iw command in the target terminal using the target wireless communication mode, and output wireless network scanning information; and a security protocol authentication method extraction module, used to extract the security protocol authentication method from the wireless network scanning information.

[0148] Optionally, the protocol version acquisition unit includes: a pairing module, used to pair the current communication subject with the target communication device and complete the network connection using a preset Bluetooth command-line tool when the target wireless communication mode is Bluetooth mode; a command triggering module, used to trigger the kernel Bluetooth stack of the current communication subject to automatically send control commands to the Bluetooth controller after the network connection is completed; a command listening module, used to listen for control commands sent to the Bluetooth controller and record command event logs, wherein the command event logs include: protocol version, manufacturer ID and revision number; and a protocol version reading module, used to read the protocol version in the command event logs to obtain the current protocol version of the target communication device.

[0149] Optionally, the communication status acquisition unit includes: a network interface information acquisition module, used to use the iw command to perform signal detection when the target wireless communication mode is WiFi mode, to acquire the wireless network interface information of the current communication subject using the target wireless communication mode, and to determine the communication status based on the wireless network interface information, wherein the wireless network interface information includes at least one of the following: signal strength, channel status, and network configuration; or, a connectivity response message acquisition module, used to use a preset network fault diagnosis tool to acquire the Internet Control Message Protocol request of the WiFi network, to obtain the network connectivity response message, and to determine the communication status based on the network connectivity response message, wherein the preset network fault diagnosis tool includes at least the Ping command; or, a data packet detection module, used to use a network data packet capture tool to capture the communication data packets of the WiFi network at the data link layer, to generate a network data packet detection result, and to determine the communication status based on the network data packet detection result, wherein if the network data packet detection result indicates that there is no gateway return packet, it is determined that the communication status is disconnected.

[0150] Optionally, the communication status acquisition unit includes: a Bluetooth network connectivity acquisition module, used to acquire the Bluetooth network connectivity between the current communication Bluetooth device and the target Bluetooth device using a Bluetooth network troubleshooting tool when the target wireless communication mode is Bluetooth mode, and obtain the Bluetooth communication status; or, a pairing device information output module, used to list all paired devices of the current communication Bluetooth device using a preset Bluetooth pairing interaction tool, output pairing device information, and determine the communication status between the current communication Bluetooth device and the target Bluetooth device based on the pairing device information, wherein the pairing device information includes at least one of the following: MAC address, name, and pairing status; and a Bluetooth protocol stack command monitoring module, used to monitor the events and commands of the current communication Bluetooth device using the Bluetooth protocol stack using a preset Bluetooth protocol stack monitoring tool, obtain Bluetooth communication monitoring data, and determine the communication status between the current communication Bluetooth device and the target Bluetooth device based on the Bluetooth communication monitoring data.

[0151] Optionally, the vulnerability detection unit includes: a vulnerability detection program selection module, used to select a vulnerability detection program based on the vulnerability identifier of the vulnerability information when the target wireless communication mode is Bluetooth mode; a detection program execution module, used to run the Bluetooth vulnerability detection module, run the vulnerability detection program through the Bluetooth vulnerability detection module, and execute the step of obtaining the communication status of the current communication subject using the target wireless communication mode by adopting multiple state detection strategies to obtain the network connectivity status of the current communication subject; and a vulnerability detection module, used to monitor the vulnerability exploitation effect during the execution of the vulnerability detection program based on the network connectivity status of the current communication subject, and output the vulnerability detection result.

[0152] The vulnerability detection device for the above-mentioned wireless communication mode may also include a processor and a memory. The protocol version acquisition unit 51, communication status acquisition unit 52, vulnerability information acquisition unit 53, vulnerability detection unit 54, etc. are all stored in the memory as program units, and the processor executes the above-mentioned program units stored in the memory to realize the corresponding functions.

[0153] The aforementioned processor contains a kernel, which retrieves the corresponding program units from memory. One or more kernels can be configured, and by adjusting kernel parameters, scanning and detecting threats and vulnerabilities in wireless communication networks can be performed based on network communication.

[0154] The aforementioned memory may include non-permanent memory in computer-readable media, such as random access memory (RAM) and / or non-volatile memory, such as read-only memory (ROM) or flash RAM, and the memory includes at least one memory chip.

[0155] Example 3

[0156] Embodiments of this application may provide an electronic device. Figure 6 This is a structural block diagram of an electronic device according to an embodiment of this application. Figure 6 As shown, the electronic device may include: one or more ( Figure 6 (Only one is shown) Processor 602, memory 604, memory controller, and peripheral interface, wherein the peripheral interface is connected to the radio frequency module, audio module and display.

[0157] The memory can be used to store software programs and modules, such as the program instructions / modules corresponding to the vulnerability detection method and apparatus for wireless communication modes in this application embodiment. The processor executes various functional applications and data processing by running the software programs and modules stored in the memory, thereby realizing the aforementioned vulnerability detection method for wireless communication modes. The memory may include high-speed random access memory, and may also include non-volatile memory, such as one or more magnetic storage devices, flash memory, or other non-volatile solid-state memory. In some instances, the memory may further include memory remotely located relative to the processor, and these remote memories can be connected to the terminal via a network. Examples of such networks include, but are not limited to, the Internet, corporate intranets, local area networks, mobile communication networks, and combinations thereof.

[0158] The processor can access information and applications stored in memory via the transmission device to perform the following steps: obtain the current protocol version and security protocol authentication method of the target wireless communication mode used by the current communication subject; use multiple state detection strategies to obtain the communication status of the target wireless communication mode used by the current communication subject; if the communication status is available, query the vulnerability database according to the current protocol version to obtain vulnerability information existing in the current protocol version; select and run a vulnerability detection program according to the vulnerability information, monitor the vulnerability exploitation effect during the operation of the vulnerability detection program, and output the vulnerability detection results.

[0159] Those skilled in the art will understand that Figure 6 The structure shown is for illustrative purposes only. Electronic devices can also be smartphones, tablets, handheld computers, mobile internet devices (MIDs), PADs, and other terminal devices. Figure 6 This does not limit the structure of the aforementioned electronic device. For example, electronic devices may also include components that are more... Figure 6 The more or fewer components shown (such as network interfaces, display devices, etc.), or having the same Figure 6 The different configurations shown.

[0160] Those skilled in the art will understand that all or part of the steps in the vulnerability detection methods for various wireless communication modes in the above embodiments can be implemented by a program instructing the hardware related to the terminal device. The program can be stored in a computer-readable storage medium, which may include: flash drive, read-only memory (ROM), random access memory (RAM), disk or optical disk, etc.

[0161] Example 4

[0162] Embodiments of this application also provide a storage medium. Optionally, in this embodiment, the storage medium can be used to store the program code executed by the vulnerability detection method for the wireless communication mode provided in Embodiment 1.

[0163] According to another aspect of the present invention, a computer-readable storage medium is also provided, the computer-readable storage medium including a stored computer program, wherein, when the computer program is running, it controls the device where the computer-readable storage medium is located to execute the wireless communication mode of any one of the above embodiments.

[0164] Optionally, in this embodiment, the storage medium may be located in any computer terminal in a group of computer terminals in a computer network, or in any mobile terminal in a group of mobile terminals.

[0165] This application also provides a computer program product, including a computer program that, when executed by a processor, implements the steps of the vulnerability detection method for the wireless communication mode described in various embodiments of this application.

[0166] This application also provides a computer program product, including a non-volatile computer-readable storage medium storing a computer program, which, when executed by a processor, implements the steps of the vulnerability detection method for the wireless communication mode described in various embodiments of this application.

[0167] The sequence numbers of the above embodiments of the present invention are for descriptive purposes only and do not represent the superiority or inferiority of the embodiments.

[0168] In the above embodiments of the present invention, the descriptions of each embodiment have different focuses. For parts not described in detail in a certain embodiment, please refer to the relevant descriptions of other embodiments.

[0169] In the several embodiments provided in this application, it should be understood that the disclosed technical content can be implemented in other ways. The device embodiments described above are merely illustrative; for example, the division of units can be a logical functional division, and in actual implementation, there may be other division methods. For instance, multiple units or components may be combined or integrated into another system, or some features may be ignored or not executed. Furthermore, the displayed or discussed mutual coupling, direct coupling, or communication connection may be through some interfaces; the indirect coupling or communication connection between units or modules may be electrical or other forms.

[0170] The units described as separate components may or may not be physically separate. The components shown as units may or may not be physical units; that is, they may be located in one place or distributed across multiple units. Some or all of the units can be selected to achieve the purpose of this embodiment according to actual needs.

[0171] Furthermore, the functional units in the various embodiments of the present invention can be integrated into one processing unit, or each unit can exist physically separately, or two or more units can be integrated into one unit. The integrated unit can be implemented in hardware or as a software functional unit.

[0172] If the integrated unit is implemented as a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present invention, in essence, or the part that contributes to the prior art, or all or part of the technical solution, can be embodied in the form of a software product. This computer software product is stored in a storage medium and includes several instructions to cause a computer device (which may be a personal computer, server, or network device, etc.) to execute all or part of the steps of the methods described in the various embodiments of the present invention. The aforementioned storage medium includes various media capable of storing program code, such as USB flash drives, read-only memory (ROM), random access memory (RAM), portable hard drives, magnetic disks, or optical disks.

[0173] The above description is only a preferred embodiment of the present invention. It should be noted that for those skilled in the art, several improvements and modifications can be made without departing from the principle of the present invention, and these improvements and modifications should also be considered within the scope of protection of the present invention.

Claims

1. A vulnerability detection method for a wireless communication mode, characterized in that, include: Obtain the current protocol version and security protocol authentication method used by the current communication subject in the target wireless communication mode; Multiple state detection strategies are employed to obtain the communication state of the current communication subject using the target wireless communication mode; If the communication status is available, query the vulnerability database according to the current protocol version to obtain vulnerability information existing in the current protocol version; Select and run a vulnerability detection program based on the vulnerability information, monitor the vulnerability exploitation effect during the operation of the vulnerability detection program, and output the vulnerability detection results.

2. The vulnerability detection method according to claim 1, characterized in that, The steps to obtain the current protocol version and security protocol authentication method of the target wireless communication mode used by the current communication subject include: When the target wireless communication mode is WiFi mode, monitor the wireless communication status of the current communication subject using the target wireless communication mode; During the monitoring of wireless communication status, the physical layer information of the 802.11 protocol broadcast by the wireless access point in the target communication frame is obtained. The target communication frame is a communication frame that the wireless access point periodically sends in the wireless network to announce access point information and network configuration information. The network configuration information includes at least one of the following: service set identifier, physical layer type, supported rate, and channel bandwidth. Based on the physical layer information, identify the current protocol version of the target wireless communication mode.

3. The vulnerability detection method according to claim 2, characterized in that, The steps to obtain the current protocol version and security protocol authentication method of the target wireless communication mode used by the current communication subject include: In the target terminal using the target wireless communication mode, the scanning function of the wireless network interface in the target terminal is started by executing a predetermined iw command, and wireless network scanning information is output. The security protocol authentication method is extracted from the wireless network scanning information.

4. The vulnerability detection method according to claim 1, characterized in that, The steps to obtain the current protocol version and security protocol authentication method of the target wireless communication mode used by the current communication subject include: When the target wireless communication mode is Bluetooth mode, a preset Bluetooth command line tool is used to pair the current communication subject with the target communication device and complete the network connection. After the network connection is established, the kernel Bluetooth stack of the current communication subject is triggered to automatically send control commands to the Bluetooth controller; Listen for the control commands sent to the Bluetooth controller and record the command event log, wherein the command event log includes: protocol version, manufacturer ID and revision number; The protocol version of the target communication device is obtained by reading the protocol version in the command event log.

5. The vulnerability detection method according to claim 1, characterized in that, The steps for obtaining the communication state of the current communication subject using the target wireless communication mode by employing multiple state detection strategies include: When the target wireless communication mode is WiFi mode, the iw command is used to detect the signal and obtain the wireless network interface information of the current communication subject using the target wireless communication mode. The communication state is determined based on the wireless network interface information, wherein the wireless network interface information includes at least one of the following: signal strength, channel state, and network configuration; or... A preset network troubleshooting tool is used to obtain the Internet Control Message Protocol (ICP) request of the WiFi network, and a network connectivity response message is obtained. The communication status is determined based on the network connectivity response message. The preset network troubleshooting tool includes at least: the Ping command; or, A network packet capture tool is used to capture communication packets of the WiFi network at the data link layer, generate network packet detection results, and determine the communication status based on the network packet detection results. In the case where the network packet detection results indicate that there is no gateway return packet, it is determined that the communication status is disconnected.

6. The vulnerability detection method according to claim 1, characterized in that, The steps for obtaining the communication state of the current communication subject using the target wireless communication mode by employing multiple state detection strategies include: If the target wireless communication mode is Bluetooth, a Bluetooth network troubleshooting tool is used to obtain the Bluetooth network connectivity between the current Bluetooth device and the target Bluetooth device to determine the Bluetooth communication status; or... A preset Bluetooth pairing interaction tool is used to list all paired devices of the current communication Bluetooth device, output pairing device information, and determine the communication status between the current communication Bluetooth device and the target Bluetooth device based on the pairing device information. The pairing device information includes at least one of the following: MAC address, name, and pairing status. A preset Bluetooth protocol stack monitoring tool is used to monitor the events and commands of the current Bluetooth device using the Bluetooth protocol stack, and Bluetooth communication monitoring data is obtained. Based on the Bluetooth communication monitoring data, the communication status between the current Bluetooth device and the target Bluetooth device is determined.

7. The vulnerability detection method according to claim 1, characterized in that, The steps of selecting and running a vulnerability detection program based on the vulnerability information, monitoring the vulnerability exploitation effect during the operation of the vulnerability detection program, and outputting the vulnerability detection results include: When the target wireless communication mode is Bluetooth mode, a vulnerability detection program is selected based on the vulnerability identifier in the vulnerability information; Run the Bluetooth vulnerability detection module, run the vulnerability detection program through the Bluetooth vulnerability detection module, and execute the step of obtaining the communication status of the current communication subject using the target wireless communication mode by adopting multiple state detection strategies again, so as to obtain the network connectivity status of the current communication subject; Based on the network connectivity status of the current communication entity, the vulnerability exploitation effect is monitored during the execution of the vulnerability detection program, and the vulnerability detection results are output.

8. A vulnerability detection device for a wireless communication mode, characterized in that, include: The protocol version acquisition unit is used to acquire the current protocol version and security protocol authentication method of the target wireless communication mode used by the current communication subject; A communication status acquisition unit is used to acquire the communication status of the current communication subject using the target wireless communication mode by employing multiple status detection strategies. The vulnerability information acquisition unit is used to query the vulnerability database according to the current protocol version and obtain vulnerability information existing in the current protocol version when the communication status is available; The vulnerability detection unit is used to select and run a vulnerability detection program based on the vulnerability information, monitor the vulnerability exploitation effect during the operation of the vulnerability detection program, and output the vulnerability detection results.

9. An electronic device, characterized in that, The device includes one or more processors and a memory, the memory being used to store one or more programs, wherein when the one or more programs are executed by the one or more processors, the one or more processors cause the one or more processors to implement the vulnerability detection method of the wireless communication mode according to any one of claims 1 to 7.

10. A computer program product, comprising a computer program, characterized in that, When the computer program is executed by the processor, it implements the steps of the vulnerability detection method for the wireless communication mode according to any one of claims 1 to 7.

Images