ÍÆ¼ö²¿ÊðÔÚÖдóÐ;ÖÓòÍø£¬Ö§³ÖϵͳɨÃè¡¢WebɨÃè¡¢Êý¾Ý¿âɨÃè¡¢Èõ¿ÚÁîɨÃèµÈ¹¦ÄÜ
²úÆ·ÌØÐÔ£º
ϵͳ©¶´¼ì²â
ÍøÂçÖ÷»ú£º·þÎñÆ÷¡¢¿Í»§»ú¡¢ÍøÂç´òÓ¡»ú¡¢Òƶ¯É豸¡¢ÐéÄ⻯É豸µÈ£»
²Ù×÷ϵͳ£ºMicrosoft Windows 9X/NT/2000/XP/2003¡¢Æ»¹û²Ù×÷ϵͳ¡¢¹ú²ú²Ù×÷ϵͳ¡¢Sun Solaris¡¢HP Unix¡¢IBM AIX¡¢IRIX¡¢Linux¡¢BSD¡¢HPUXµÈ£»
ÍøÂçÉ豸£ºCisco¡¢Juniper¡¢F5¡¢3Com¡¢CheckpointµÈÖ÷Á÷³§ÉÌÍøÂçÉ豸£»
°²È«É豸£ºCheckpoint¡¢ÈüÃÅÌú¿Ë¡¢Cisco¡¢Juniper¡¢Palo AltoµÈÖ÷Á÷³§É̵ݲȫÉ豸£»
Ó¦ÓÃϵͳ£ºÊý¾Ý¿â¡¢Web¡¢FTP¡¢µç×ÓÓʼþµÈ¡£
±¾²úƷ©¶´¿âº¸Ç·á¸»µÄ°²È«Â©¶´ºÍ¹¥»÷ÌØÕ÷£¬ÖÁÉÙÖ§³ÖCVE¡¢CVSS¡¢CNVID¡¢CNNVD¡¢CNCVE¡¢BugtraqµÈ©¶´ÖÖÀ࣬Ô̺¬×ŷḻµÄÑо¿¾ÑéºÍÉîºñµÄ֪ʶ»ýÀÛ£¬ÊÕ¼¶à¸ö±ê׼ϵĩ¶´£¬Äܹ»Îª¿Í»§Ìá³ÖÐøµÄ¡¢¸ßÆ·ÖʵIJúÆ·Ó¦ÓüÛÖµ¡£
Web©¶´¼ì²â
¡ñÍøÕ¾°²È«Â©¶´È«Ãæ¼ì²â
ÓëĿǰÊÐÃæÉÏµÄÆäËüÍøÕ¾°²È«¼ì²âÀà²úÆ·µ¥Ò»µØ¿¼ÂÇϵͳ°²È«¡¢ÍøÒ³±à³Ì°²È«¡¢SQL×¢Èë¡¢¿çվ©¶´µÈ·½ÃæµÄ°²È«ÎÊÌⲻͬ£¬±¾²úÆ·´ÓÉè¼ÆÍøÕ¾°²È«µÄ¸÷¸ö·½ÃæÀ´¶ÔÍøÕ¾°²È«×´¿ö×ö³ö×îÈ«ÃæµÄÆÀ¹À£¬°üÀ¨£ºÏµÍ³²¹¶¡¡¢Î£ÏÕ²å¼þ¡¢´úÂëÉ󼯡¢¶ñÒâÍøÕ¾¡¢ÍøÒ³Ä¾Âí¡¢ÍøÕ¾°µÁ´¡¢SQL×¢Èë¡¢¿çÕ¾×¢Èë¡¢¹ÜÀíÈë¿ÚÒÔ¼°Ãô¸ÐÐÅÏ¢µÈµÈ¡£
¡ñÍøÕ¾´úÂë±¾µØ°²È«¼ì²é
ĿǰµÄÔ¶³ÌSQL×¢ÈëɨÃè¡¢¿çվ©¶´É¨ÃèµÈÊÇÕë¶ÔÍøÕ¾´úÂë½øÐÐÍⲿµÄºÚºÐ²âÊÔ£¬¶øÎÒÃÇÕë¶ÔÍøÕ¾´úÂëµÄ°²È«¼ì²éÊÇÕë¶ÔÍøÕ¾´úÂë½øÐÐÈ«ÃæÖ±½ÓµÄ¼ì²é£¬ÕÒµ½SQL×¢Èë¡¢¿çվ©¶´¡¢ÍøÂíµÈһϵÁа²È«ÎÊÌâ¡£¼´Õë¶ÔÍøÕ¾´úÂë½øÐб¾µØµÄ°²È«¼ì²é¡£
¡ñ»ýÀ۷ḻµÄÍøÂíÌØÕ÷¿â
±¾²úÆ·²ÉÓÃÁËÑо¿ÍŶӶàÄê»ýÀ۵ķḻµÄÍøÂíÌØÕ÷¿â£¬²»½ö°üÀ¨ÍøÂí´úÂëÌØÕ÷¡¢¶øÇÒ°üÀ¨¹ÒÂíÍøÕ¾µÄÁÐ±í£¬Ë«ÖØ¼ì²âÊֶα£ÕÏÍøÂí¼ì²â½ÏµÍµÄ©±¨ÂʺÍÎó±¨ÂÊ£¬Í¬Ê±ÎÒÃDZ£³ÖÿÖÜÖÁÉÙÒ»´ÎµÄÌØÕ÷¿âµÄÉý¼¶ÒÔ¼°0day©¶´µÄ24Сʱ½ô¼±Éý¼¶±£ÕÏ¡£
¡ñ¸ßЧµÄÍøÒ³ÅÀ³æ¼¼Êõ
±¾²úÆ·µÄÍøÒ³×¥È¡Ä£¿é²ÉÓùã¶ÈÓÅÏÈÅÀ³æ¼¼Êõ¡¢Éî¶ÈÓÅÏÈÅÀ³æ¼¼ÊõÒÔ¼°ÍøÕ¾Ä¿Â¼»¹Ô¼¼Êõ¡£¹ã¶ÈÓÅÏȵÄÅÀ³æ¼¼Êõ²»»á²úÉúÅÀ³æÏÝÈëµÄÎÊÌâ£¬ÍøÕ¾Ä¿Â¼»¹Ô¼¼ÊõÔòÈ¥³ýÁËÎ޹ؽá¹û£¬Ìá¸ßץȡЧÂÊ¡£
¡ñ»ùÓÚ״̬µÄSQL×¢ÈëɨÃè¼¼Êõ
±¾²úÆ·²»Í¬ÓÚ´«Í³µÄÕë¶Ô´íÎó·´À¡ÅжÏÊÇ·ñ´æÔÚ×¢Èë©¶´µÄ·½Ê½£¬¶ø²ÉÓÃ×ÔÖ÷´´ÐµÄ״̬¼ì²âÀ´Åжϡ£Ëùν״̬¼ì²â£¬¼´£ºÕë¶ÔijһÁ´½ÓÊäÈ벻ͬµÄ²ÎÊý£¬Í¨¹ý¶ÔÍøÕ¾·´À¡µÄ½á¹ûʹÓÃÏòÁ¿±È½ÏËã·¨½øÐбȶÔÅжϣ¬´Ó¶øÈ·¶¨¸ÃÁ´½ÓÊÇ·ñΪעÈëµã£¬´Ë·½·¨²»ÒÀÀµÓÚÌØ¶¨µÄÊý¾Ý¿âÀàÐÍ¡¢ÉèÖÃÒÔ¼°CGIÓïÑÔµÄÖÖÀ࣬¶ÔÓÚ×¢Èëµã¼ì²âÈ«Ãæ£¬²»»á²úÉú©±¨ÏÖÏó¡£¶ø³£¼ûµÄSQL×¢ÈëɨÃè²úÆ·¾ù²»¾ß±¸´ËÏî¼¼Êõ¡£
¡ñ»ùÓÚ״̬±È½ÏµÄ×¢ÈëÑéÖ¤¼¼Êõ
±¾²úÆ·²ÉÓÃ״̬¼ì²âÀ´¶ÔÊý¾Ý¿âµÄÊý¾Ý½øÐв½⣬ÎÞÂÛÍøÕ¾²ÉÓÃʲôCGIÓïÑÔ£¬ÎÞÂÛÍøÕ¾ÊÇ·ñ·´À¡´íÎóÐÅÏ¢£¬¶¼ÄܽøÐÐÕý³£µÄ²Â½â£¬¶ø³£¼ûµÄSQL×¢ÈëɨÃè²úÆ·¾ù²»¾ß±¸´ËÏî¼¼Êõ¡£
¡ñ»ùÓÚÄ£ºýÆ¥ÅäµÄ¹ÜÀíÈë¿Ú¼ì²â¼¼Êõ
±¾²úÆ·¹ÜÀíÈë¿Ú¼ì²âÄ£¿é²»½ö²ÉÓ󣹿¹ÜÀíÈë¿Ú¼ì²â¼¼Êõ£¬¼´£ºÊ¹Óó£ÓõĹÜÀíÈë¿Ú¿â½øÐÐÖðһƥÅä¼ì²é£¬¶øÇÒ»¹²ÉÓÃÁËÄ£ºýÆ¥ÅäµÄ·½Ê½À´¼ì²â¹ÜÀíÈë¿Ú£¬ËùνµÄÄ£ºýÆ¥Åä¼´Èí¼þʹÓÃÄ£ºýÆ¥ÅäµÄ·½Ê½À´¶ÔÍøÕ¾ËùÓÐÁ´½Ó½øÐÐÆ¥Å䣬´Ó¶ø×î´ó¿ÉÄÜÕÒ³öËùÓйÜÀíÈë¿Ú¡£
¡ñÇ¿ÓÐÁ¦µÄ½âÎö·½Ê½
±¾²úÆ·Ö§³ÖÖ§³ÖÅÀ³æ±íµ¥×Ô¶¯·ÖÎö¡¢Javascript½âÎö¡¢JavaÓëHtmlElement×Ô¶¯½»»¥¡¢Ajax½âÎö¡¢Flash½âÎöµÈÐÂÐÍ¡¢·á¸»¶ø¸ßЧµÄ½âÎö·½Ê½¡£Éî¶È½âÎöwebÒ³Ãæ£¬¿ÉÒÔ׼ȷ¶ø¸ßЧµÄ·¢ÏÖweb©¶´¡£
Êý¾Ý¿â©¶´¼ì²â
±¾²úÆ·²ÉÓÃÏȽøµÄÊý¾Ý¿â·¢ÏÖ¼¼ÊõºÍʵÀý·¢ÏÖ¼¼ÊõµÈ£¬¿ÉÒÔÕë¶Ôµ±ÏÂÖ÷Á÷µÄÊý¾Ý¿â£¬ÈçOracle¡¢MySQL¡¢DB2¡¢PostgreSQL¡¢sybase¡¢SQL Server¡¢InformixµÈ½øÐЩ¶´¼ì²â£¬°üÀ¨¶ÔÊý¾Ý¿âϵͳµÄ¸÷ÏîÉèÖá¢Êý¾Ý¿âϵͳÈí¼þ±¾ÉíÒÑ֪©¶´¡¢Êý¾Ý¿âϵͳÍêÕûÐÔ½øÐмì²éºÍ¶ÔÊý¾Ý¿âϵͳµÄÕûÌ尲ȫÐÔ×ö³öÆÀ¹À£¬²¢¸ø³öÌá¸ßÊý¾Ý¿â°²È«ÐÔµÄÐÞ¸´½¨Ò顣ͨ¹ýµÇ¼ɨÃè¿É¶ÔÊý¾Ý¿âµÄÿÕűíÿ¸ö×ֶνøÐа²È«¼ì²â¡£
¸²¸ÇÃæ¹ãµÄ©¶´¿â
±¾²úÆ·°üº¬CNNVDÈÏÖ¤µÄϵͳ©¶´¿â20¶àÀ࣬50000¶àÌõ£»Web©¶´¿â¹²¸²¸ÇOWASP¶¨ÒåµÄ10´óÀà©¶´¹æÔò¡£°üº¬ÐéÄ⻯É豸¡¢Òƶ¯É豸¡¢ÍøÂçÉ豸¡¢°²È«É豸µÈ¶àÖÖÀàÐ͵ĹæÔò£¬¸²¸ÇÁ˵±Ç°ÍøÂç»·¾³ÖÐÖØÒªµÄ£¬Ö÷Á÷µÄϵͳºÍÊý¾Ý¿âµÈ©¶´£¬²¢ÇÒÄܹ»¸ù¾Ý¼´Ê±¸üУ¬È·±£Â©¶´Ê¶±ðµÄÈ«ÃæÐÔºÍʱЧÐÔ¡£
¿É×Ô¶¨Ò广Ôò¿â
±¾²úÆ·ÖУ¬Óû§³ýÁË¿ÉÒÔʹÓÃÈí¼þĬÈÏÌṩµÄ¼ì²â¿âÍ⣬Ҳ¿ÉÒÔÌí¼Ó×Ô¶¨ÒåµÄ¹æÔò¿âÄ£°å£¬ÅúÁ¿É¸Ñ¡ËùÐèÄ£°å£¬Í¨¹ýн¨Ä£°å²¢Ñ¡ÔñËùÐèµÄ¹æÔò£¬¿É¸ßЧ¡¢ÓÐÕë¶ÔÐԵļì²â©¶´¡£
Ç¿ÓÐÁ¦µÄɨÃèЧÂÊ
±¾²úÆ·×ÛºÏÔËÓÃԤ̽²â¡¢½¥½øÊ½¡¢¶àÏ̵߳ÄɨÃè¼¼Êõ£¬Äܹ»¿ìËÙ·¢ÏÖÄ¿±êÍøÂçÖеĴæ»îÖ÷»ú£¬È»ºó¸ù¾Ý½¥½øÊ½Ì½²â½á¹ûÑ¡ÔñÊʺϵÄɨÃè²ßÂÔ£¬Æô¶¯¶à¸öÏ߳̽øÐв¢·¢É¨Ã裬´Ó¶ø±£Ö¤ÁËɨÃèÈÎÎñ¿ÉÒÔѸËÙÍê³É¡£
׼ȷµÄ©¶´Ê¶±ðÂÊ
±¾²úÆ·²ÉÓý¥½øÊ½É¨Ãè·ÖÎö·½·¨£¬ÈÚºÏÇ°ÑØµÄ²Ù×÷ÏµÍ³Ö¸ÎÆÊ¶±ð¡¢ÖÇÄܶ˿ڷþÎñʶ±ðµÈ¼¼Êõ£¬Äܹ»×¼È·Ê¶±ð±»É¨Ãè¶ÔÏóµÄ¸÷ÖÖÐÅÏ¢£¬Èç²Ù×÷ϵͳ¡¢ÍøÂçÃû¡¢Óû§ÐÅÏ¢¡¢·Ç³£¹æ¶Ë¿ÚÉÏ¿ª·ÅµÄ·þÎñµÈ¡£
±ã½ÝµÄ©¶´ÑéÖ¤¹¤¾ß¼¯
±¾²úÆ·Ìṩһ¼üʽ©¶´ÑéÖ¤¹¤¾ß¼¯£¬°üº¬SQL×¢Èë©¶´ÑéÖ¤¡¢ä¯ÀÀÆ÷©¶´ÑéÖ¤¼°Í¨Óé¶´ÑéÖ¤µÈ¡£ÔËάÈËÔ±¿ÉÒÔÖ±½ÓÔÚϵͳ½çÃæÖÐÑ¡ÔñÏàÓ¦µÄÐÒé²¢Ìî³ä²âÊÔ×ֶζÔÄ¿±ê½øÐЩ¶´ÑéÖ¤£¬²¢ÇÒÕë¶ÔϵͳÒÑ·¢Ïֵĩ¶´¿ÉÒÔʵÏÖÒ»¼üÌî³äʽ×Ô¶¯ÑéÖ¤¹¦ÄÜ£¬½µµÍÈ˹¤²Ù×÷ÄѶȵÄͬʱÌáÉý½á¹ûÑéÖ¤µÄ׼ȷÐÔ¡£
¶àÑù»¯µÄ½á¹û±¨±í³ÊÏÖ
±¾²úÆ·Äܹ»Éú³ÉÃæÏò¶à¸öÓû§½ÇÉ«µÄ¿Í»§»¯±¨±í£¬²¢ÒÔͼ¡¢±í¡¢ÎÄ×Ö˵Ã÷µÈ¶àÖÖÐÎʽ½øÐÐÕ¹ÏÖ£¬Í¬Ê±Ö§³ÖÒÔPDF¡¢XML¡¢HTML¡¢EXCEL¡¢WORDµÈ¶àÖÖ¸ñʽµ¼³ö½á¹û±¨±í¡£
| Ó²¼þ¹æ¸ñ | ||||
| ²úÆ·ÐͺŠ| RG-Scan | |||
| ǧÕ×µç¿Ú | 6¸ö | ǧÕ×¹â¿Ú | 4¸ö | |
| ¹ÜÀí¿Ú | Console½Ó¿Ú£¨RJ45½Ó¿ÚÐÎ̬£© | À©Õ¹²Û | 2¸ö | |
| USB¿Ú | 2¸ö | »ú¼Ü³ß´ç | 1U | |
| ¹¤×÷ÎÂ¶È | 0¡æ¡«40¡æ | ¹¤×÷ʪ¶È | 5%¡«90% RH | |
| Ó²¼þÖʱ£ÆÚ | 3Äê | ÉÏÊÐʱ¼ä | 2021Äê1Ô | |
| Èí¼þ¹¦ÄÜ | ||||
| ²úÆ·ÐͺŠ| RG-Scan | |||
| ²úÆ·²¿Êð | Ö§³Ö¶à¸ö»ò¶à¼¶²úÆ·µÄͳһ¹Ü¿Ø | |||
| Ö§³Ö²ßÂÔµÄÍ³Ò»ÖÆ¶¨ºÍ·Ö·¢£¬Ìṩ¿É±à¼µÄ²ßÂÔÄ£°å | ||||
| Ö§³Ö¶ÔÈ«ÍøÉ¨Ãè½á¹ûµÄ¼¯Öвéѯ¡¢·ÖÎö | ||||
| ÍøÂç¹ÜÀí | Ö§³ÖVLAN»®·Ö£¬Ö§³Ö¶àVLAN»·¾³ÏµIJ¿Êð | |||
| ×Ô¶¨ÒåÍøÂç½Ó¿ÚÊôÐÔ£¬¶¨Òå¸öÐÔ»¯ÐèÇó | ||||
| ÈÎÎñ¹ÜÀí | Ö§³ÖÏÞÖÆÓû§ÏµÍ³É¨ÃèIP·¶Î§ | |||
| Ö§³ÖÏÔʾɨÃèÊ£Óàʱ¼ä£¬ËæÊ±²é¿´É¨Ãè½ø¶È½á¹û | ||||
| ϵͳ©¶´É¨Ãè | Ö§³Öʶ±ðÖ÷»úÐÅÏ¢¡¢Óû§ÐÅÏ¢¡¢·þÎñÐÅÏ¢¡¢Â©¶´ÐÅÏ¢µÈÄÚÈÝ | |||
| Ö§³Ö¶ÔɨÃè¶ÔÏó´àÈõÐÔµÄÈ«Ãæ¼ì²é£¬È簲ȫ²¹¶¡¡¢¿ÚÁî¡¢·þÎñÅäÖÃµÈ | ||||
| ©¶´¿â¾ß±¸CVE¡¢CVSS¡¢CNVID¡¢CNNVD¡¢CNCVE¡¢Bugtraq±àºÅ | ||||
| Ö§³Ö¶¯Ì¬µÄÏÔʾɨÃè½á¹ûºÍʵʱµÄ²é¿´É¨Ãè½á¹û | ||||
| Ö§³ÖÔÚÏ߲鿴¶Ô±È·ÖÎöºÍÇ÷ÊÆ±¨¸æ£»Ö§³Ö©¶´½á¹û·¢Ë͵½Ö¸¶¨FTP·þÎñÆ÷ | ||||
| Web©¶´É¨Ãè | Ö§³Ö±»É¨ÃèÍøÕ¾×éÖ¯¼Ü¹¹µÄʵʱչʾ | |||
| ©¶´É¨ÃèÖ§³ÖSQL×¢Èë¡¢Cookie×¢È롢äע¡¢¿çÕ¾¡¢Îļþ°üº¬µÈ©¶´¼ì²âÄÜÁ¦ | ||||
| Äܸù¾Ý²»Í¬Ä¿±êÖÆ¶¨²»Í¬É¨Ãè²ßÂÔµÄÄÜÁ¦ | ||||
| Êý¾Ý¿â©¶´É¨Ãè | Ö§³ÖÖ÷Á÷Êý¾Ý¿â©¶´µÄ¼ì²â | |||
| Èõ¿ÚÁîɨÃè | Ö§³ÖĿǰ֪ÃûµÄ¼ì²âÐÒ飬TELNET¡¢FTP¡¢SSH¡¢POP3¡¢SMB¡¢SNMP¡¢RDPµÈ | |||
| ±¨±íÄÜÁ¦ | ±¨¸æ¾ßÓÐÒ×¶®µÄ©¶´ÃèÊöºÍÏ꾡µÄ°²È«ÐÞ²¹¹«º£²Ê´¬¡¤6600¹ÙÍø½¨Òé | |||
| ¿ÉÒÔµ¼³ö²»Í¬¸ñʽµÄ±¨±í£¬ÈçWORD¡¢HTML¡¢Excel¡¢PDF¡¢XMLµÈ | ||||
| Éý¼¶¡¢¹ÜÀí | Ö§³Ö×Ô¶¯ºÍÈ˹¤Ô¶³ÌÉý¼¶£¬Éý¼¶ÄÚÈݰüÀ¨×îеĩ¶´¿âºÍϵͳ×ÔÉíµÄ²¹¶¡³ÌÐò | |||
| Ö§³ÖSSLµÄWeb½çÃæ¡¢SSH¡¢Console¶àÖÖ·½Ê½½øÐйÜÀí | ||||
| Ö§³ÖPING¡¢WGETµÈ·½Ê½¶ÔÍøÂç½øÐÐÕï¶Ï | ||||