Brief introduction to the core functions of automatic penetration testing tool

Automated penetration testing tools can provide professional technical support for the whole process of penetration testing , In the early stage of infiltration 、 Mid - 、 Improve the effect of penetration test in the later stage , Empower penetration testers . The following core functions are required ：

One 、 Vulnerability detection function

Automated vulnerability detection of penetration targets , There are two ways to detect vulnerabilities ： Website URL Detection mode and IP Address detection method .

Website URL The detection method is through fingerprint identification of the target , Collect middleware 、 General website framework 、 development language 、 Operating system and other fingerprint information , Find the related vulnerability plug-ins from the plug-in library , Find the existing loopholes .

IP The address detection method is to scan the port of the target , Discover open services , Identify the corresponding service type , Look for related vulnerability plug-ins , So as to determine whether the vulnerability exists . The vulnerability plug-in library contains more than 7000 individual , Vulnerability coverage Web、 middleware 、 database 、 Network devices 、 operating system 、 Smart devices 、 Mobile terminals 、 Industrial control equipment, etc .

Provide one click vulnerability exploitation function , Able to execute commands 、 perform SQL、 Upload files 、 rebound Shell、 Upload Webshell、 Download files, etc . System service fingerprint can meet the type and version identification of conventional system services . Support scenario detection , It can be quickly customized according to requirements, including at least routine tests 、 Attack and defense drill 、 Range drill 、 Scenarios including security capability assessment , So as to meet the needs of customized scenario vulnerability discovery .

Two 、 Exploit function

The vulnerability exploitation function can solve two problems ： First, it can directly detect whether the specified vulnerability exists , If it exists , Then further automatically exploit this vulnerability ; The second is to provide a separate vulnerability exploitation function for some vulnerabilities that cannot be fully discovered automatically , for example , When the target address cannot be automatically obtained by crawler or other means , The Infiltrator only needs to fill in the corresponding parameters manually to exploit the vulnerability with one click .

The vulnerability exploitation function can simplify the complex vulnerability exploitation process , Greatly improve the efficiency of penetration testing , If input Oracle Account and password , Realize one key lifting 、 Execute system commands and other effects . Automated penetration testing systems also provide advanced functionality for vulnerability exploitation , Including executing commands 、 perform SQL、 Upload files 、 rebound Shell、 Upload Webshell、 Download files, etc .

3、 ... and 、 Bounce interactive Shell function

Infiltrators can bounce interactively through built-in methods Shell, The Shell And normal Shell Exactly the same , It can be executed vim、 Perform operations interactively . The automated penetration test system supports all Unix Operating system for remote control , May adopt Python、Java、Bash rebound Shell, And provide sample code to facilitate infiltration personnel to quickly use this function . This function adopts port multiplexing technology , So that all users of this function can bounce through the same port Shell, And it can bypass the restrictive measures of firewall devices on data connection ports . This function adopts encryption technology , Ensure that the transmitted data is transmitted in ciphertext , So as to ensure that the remote control has no characteristics .

Four 、Webshell Remote management function

This function of the automated penetration test system encrypts the transmitted data with encryption algorithm , Ensure that there are no features in the data transmission process , So as to avoid the detection of various flow analysis equipment . The Webshell Support ASP、ASPX、PHP、JSP Code written in language . Deformation of the controlled end code can bypass the static Webshell Detection of killing tools . This function supports file management 、 Command execution 、 Database management 、 rebound Shell、 Upload files 、 Remote file download . Using this function, infiltrators can directly manage the files on the server , Execute various operation commands . Automatic penetration testing system script language provides memory horse function , Ensure that there are no files on the charged server “ to ground ”, Malicious code only runs in memory , Realize the technology of remote control by running code in memory .

5、 ... and 、 Post penetration function

Through the post penetration function, the target is penetrated horizontally . for example ： Discover the network topology of the intranet , Found the vulnerability of intranet database , Find the location of the mail server , Even get the office network segment 、 Permissions of the operation and maintenance host or domain controller .

stay

Early stage of penetration test

, Through tools, you can collect batch information , Including subdomain discovery 、 Directory scanning 、 Fingerprint identification, etc . stay

In the middle of penetration testing

, The vulnerability of the target can be found and exploited . stay

Late penetration test

, Provide functions such as horizontal penetration after entering the intranet , Improve the effect of penetration test .