基于metasploit的渗透测试与攻击方法的研究

发布时间：2019-04-21 06:51

【摘要】：随着网络安全防范技术的提升,黑客攻击技术也随之进一步提高。根据美国官方年度统计调查显示,网络攻击发生的频率越来越高,造成的经济损失也越来越大。因此,全世界都十分关注网络信息安全以防信息泄漏造成不可挽回的损失,检查系统安全性成了保护信息安全必不可少的一部分。渗透测试是一种通过取得授权并合理检测目标系统安全性的方式,通过这种方式可以科学的得出目标系统的安全情况。主流的渗透测试工具有metasploit框架,metasploit框架有很好的兼容性、扩展性和自动化性能。逃逸技术是利用各种方式避开网络入侵检测系统,隐秘的将攻击数据流发送到目标系统,两者的结合可以更有效的检测目标系统的安全性。主流的逃逸工具有fagroute,fagroute框架包含了目前所发现的大部分原子逃逸方式。目前,市场上没有能够对网络防护设备进行测试的成熟的标准和方案,本文利用开源的metasploit与fragroute在国内首创出一种能够有效地测试网络防护设备的方案和设备仪表。本文阐述了当前国内外渗透测试和逃逸技术的研究现状,选择Metasploit渗透测试框架和fragroute模块作为平台,对Metasploit渗透框架的底层功能模块和fragroute代码进行了深入分析。本文全面地分析并研究了漏洞挖掘的主要技术手段,之后对Metasploit渗透测试框架和fragroute模块进行扩展,并在此基础上加载逃逸进行攻击测试,完成对渗透模块、逃逸模块的攻击成功率的检测。利用这种带有逃逸技术的攻击方式的设备仪表对网络防护设备进行测试,结果表明能够对网络防护设备防御性能进行有效检测。
[Abstract]:With the improvement of network security technology, hacker attack technology will be further improved. According to the official annual survey, the frequency of cyber attacks is increasing and the economic losses are increasing. Therefore, the security of network information is concerned all over the world in order to prevent irreparable loss caused by information leakage, and checking the security of the system has become an indispensable part of protecting the information security. Penetration testing is a way to obtain authorization and reasonably detect the security of the target system. Through this way, the security of the target system can be obtained scientifically. Mainstream penetration testing tools have metasploit framework, metasploit framework has good compatibility, scalability and automation performance. The escape technology uses various ways to avoid the network intrusion detection system and secretly sends the attack data stream to the target system. The combination of the two methods can detect the security of the target system more effectively. The mainstream escape workers have a fagroute,fagroute framework that contains most of the atomic escape modes found so far. At present, there is no mature standard and scheme to test network protective equipment in the market. In this paper, using open source metasploit and fragroute to create a scheme and equipment instrument which can effectively test network protective equipment in China. This paper describes the current research status of penetration testing and escape technology at home and abroad, selects Metasploit penetration test framework and fragroute module as the platform, and deeply analyzes the bottom function module and fragroute code of Metasploit penetration framework. This paper comprehensively analyzes and studies the main technical means of vulnerability mining, then extends the Metasploit penetration test framework and the fragroute module, and then loads the escape to test the attack, and completes the penetration module. Escape module attack success rate detection. The network protection equipment is tested by using the device instrument with the attack mode of escape technology. The results show that the network protection equipment can be effectively tested.
【学位授予单位】：华北电力大学(北京)
【学位级别】：硕士
【学位授予年份】：2017
【分类号】：TP393.08

【参考文献】