Research On Discovery And Verification Technology Of Large-scale Web Server Vulnerabilities

In recent years,with the development of the Internet,more and more websites were created.However,some safety issues are due to the declining quality of website administrators.Also,the recent research on Web server vulnerability discovery and verification pays more attention to the protection of the web server from uncertainty attack instead of finding vulnerabilities from websites.Meanwhile,there is few engineering model for research.This paper proposed and achieved a system that can discover and verify large-scale web server's vulnerabilities which are based on web applications.The system can discover vulnerabilities of the web server through three steps:port scan,fingerprint scan and fingerprint match.Once vulnerabilities were discovered,the system will send the payload to finish the verifying process immediately.Additionally,the system can meet the requirements of large-scale scanning by using lightweight distributed framework and reducing the process steps.Finally,the system accomplishes the discovery of hundred thousand Web servers vulnerability and the validation test in a relatively short period of time in the actual experiment.It further proves the value and correctness of the study.