CN111309311B - Method, device, equipment and readable storage medium for generating a vulnerability detection tool - Google Patents

Abstract

The invention discloses a method for generating a vulnerability detection tool, which comprises the following steps: acquiring and analyzing a generating instruction, and determining a target vulnerability designated by the generating instruction; obtaining a vulnerability script corresponding to a target vulnerability, and adding an entry code to the vulnerability script to obtain the target script; determining a script language corresponding to the target script, and converting the target script into a target format according to the script language to obtain a vulnerability detection tool; according to the method, a development vulnerability detection tool is not required to be written by adopting a targeted development method, and the vulnerability detection tool can be obtained by adding an entry code to the existing vulnerability script and further performing format conversion processing, so that the development time of the vulnerability detection tool is shortened; in addition, the invention also provides a vulnerability detection tool generation device, equipment and a computer readable storage medium, which also have the beneficial effects.

Description

Method, device, equipment and readable storage medium for generating a vulnerability detection tool

technical field

The invention relates to the technical field of network security, in particular to a method for generating a vulnerability detection tool, a device for generating a vulnerability detection tool, a device for generating a vulnerability detection tool, and a computer-readable storage medium.

Background technique

With the rapid development of the Internet, the loopholes of various operating systems and application software in the Internet are also increasing day by day. For the leaks that break out, it is imperative to timely detect the leaks.

When a vulnerability breaks out in the Internet, in order to detect whether the vulnerability exists in the target terminal. Generally, a vulnerability scanning system or a vulnerability detection tool is used to conduct a comprehensive assessment of the target terminal to detect whether the vulnerability exists. The vulnerability scanning system is developed by a professional security vendor. The system disk takes up a lot of space, which is not conducive to installation and deployment. The installation, deployment and use of the vulnerability scanning system are relatively complicated, and there are certain network security technical requirements for users. Therefore, in actual situations , the number of terminals installed with the vulnerability scanning system is relatively small, and a large number of ordinary users do not install or use the vulnerability scanning system. The vulnerability detection tool is a vulnerability detection tool specially developed for a certain vulnerability. It occupies a small space, is easy to install, has low requirements for users, and is convenient for ordinary users to use. In actual scenarios, once a specific vulnerability is exposed, security vendors will upgrade the vulnerability scanning system to improve the security capability of the vulnerability scanning system. However, because vulnerability detection tools need to be developed in a targeted manner, and the development work takes a long time, they are often not developed and put into application in a timely manner, causing a large number of ordinary users to be attacked by attackers using vulnerabilities.

Therefore, how to solve the problem that the existing special vulnerability detection method requires targeted development, and the development work takes a long time is a technical problem to be solved by those skilled in the art.

Contents of the invention

In view of this, the object of the present invention is to provide a method for generating a vulnerability detection tool, a device for generating a vulnerability detection tool, a device for generating a vulnerability detection tool, and a computer-readable storage medium, which solves the need for targeted development of existing special vulnerability detection methods, and develops Problems that take a long time to work on.

In order to solve the above technical problems, the present invention provides a method for generating a vulnerability detection tool, comprising:

Obtaining and parsing the generation instruction to determine the target vulnerability specified by the generation instruction;

Obtaining a vulnerability script corresponding to the target vulnerability, adding an entry code to the vulnerability script, and obtaining the target script;

A script language corresponding to the target script is determined, and the target script is converted into a target format according to the script language to obtain the vulnerability detection tool.

Optionally, converting the target script into a target format according to the scripting language to obtain the vulnerability detection tool includes:

determining a conversion rule corresponding to the script language according to the script language;

performing information extraction processing on the target script by using the extraction rules in the conversion rules to obtain script information;

The executable file generation process is performed on the script information by using the generation rule in the conversion rule to obtain the vulnerability detection tool.

Optionally, the determining the scripting language corresponding to the target script includes:

Obtaining the script attribute corresponding to the target script, using the script attribute to determine the file suffix corresponding to the target script;

The script language corresponding to the file suffix is determined by using a preset correspondence relationship.

Optionally, converting the target script into a target format according to the scripting language to obtain the vulnerability detection tool includes:

Determine the corresponding conversion tool according to the scripting language;

The conversion tool is used to convert the target script into the target format to obtain the vulnerability detection tool.

The present invention also provides a device for generating a vulnerability detection tool, including:

The target vulnerability determination module is used to obtain and analyze the generation instruction, and determine the target vulnerability specified by the generation instruction;

The script language determination module is used to obtain the vulnerability script corresponding to the target vulnerability, and add entry code to the vulnerability script to obtain the target script;

The tool generation module is configured to determine the scripting language corresponding to the target script, convert the target script into a target format according to the scripting language, and obtain the vulnerability detection tool.

Optionally, the tool generation module includes:

a conversion rule determination unit, configured to determine a conversion rule corresponding to the script language according to the script language;

a script information acquisition unit, configured to use the extraction rules in the conversion rules to perform information extraction processing on the target script to obtain script information;

The first conversion unit is configured to use the generation rules in the conversion rules to generate executable files on the script information to obtain the vulnerability detection tool.

Optionally, the tool generation module includes:

A file suffix determining unit, configured to obtain a script attribute corresponding to the target script, and use the script attribute to determine a file suffix corresponding to the target script;

A scripting language determining unit, configured to determine the scripting language corresponding to the file suffix by using a preset correspondence.

Optionally, the tool generation module includes:

A conversion tool determining unit, configured to determine a corresponding conversion tool according to the script language;

The second conversion unit is configured to use the conversion tool to convert the target script into the target format to obtain the vulnerability detection tool.

The present invention also provides a vulnerability detection tool generation device, including a memory and a processor, wherein:

The memory is used to store computer programs;

The processor is configured to execute the computer program, so as to realize the above method for generating a vulnerability detection tool.

The present invention also provides a computer-readable storage medium for storing a computer program, wherein, when the computer program is executed by a processor, the above method for generating a vulnerability detection tool is realized.

The method for generating a vulnerability detection tool provided by the present invention obtains and analyzes the generation instruction, and determines the target vulnerability specified by the generation instruction. Obtain the vulnerability script corresponding to the target vulnerability, add the entry code to the vulnerability script, and obtain the target script. Determine the scripting language corresponding to the target script, convert the target script into a target format according to the scripting language, and obtain a vulnerability detection tool.

It can be seen that after the specified target vulnerability is determined, the vulnerability script corresponding to the target vulnerability is determined, and the target script that can be converted and processed is obtained by adding entry codes to the vulnerability script. After the scripting language corresponding to the target script is determined, it is converted and processed, and the vulnerability detection tool can be obtained. This method does not need to use a targeted development method to write and develop a vulnerability detection tool, and the vulnerability detection tool can be obtained by adding entry codes to the existing vulnerability scripts, and then performing format conversion processing. The development time of vulnerability detection tools is reduced, so that a large number of ordinary users can also avoid attacks launched by attackers using vulnerabilities, and the problem that existing special vulnerability detection methods need to be developed in a targeted manner, and the development work takes a long time.

In addition, the present invention also provides a vulnerability detection tool generation device, a vulnerability detection tool generation device and a computer-readable storage medium, which also have the above beneficial effects.

Description of drawings

In order to more clearly illustrate the technical solutions in the embodiments of the present invention or the prior art, the following will briefly introduce the drawings that need to be used in the description of the embodiments or the prior art. Obviously, the accompanying drawings in the following description are only It is an embodiment of the present invention, and those skilled in the art can also obtain other drawings according to the provided drawings without creative work.

FIG. 1 is a flowchart of a method for generating a vulnerability detection tool provided by an embodiment of the present invention;

FIG. 2 is a flow chart of a specific format conversion method provided by an embodiment of the present invention;

FIG. 3 is a schematic structural diagram of a device for generating a vulnerability detection tool provided by an embodiment of the present invention;

FIG. 4 is a schematic structural diagram of a vulnerability detection tool generation device provided by an embodiment of the present invention.

Detailed ways

In order to make the purpose, technical solutions and advantages of the embodiments of the present invention clearer, the technical solutions in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments It is only some embodiments of the present invention, but not all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by persons of ordinary skill in the art without making creative efforts belong to the protection scope of the present invention.

Please refer to FIG. 1 , which is a flowchart of a method for generating a vulnerability detection tool provided by an embodiment of the present invention. The method includes:

S101: Obtain and analyze the generation instruction, and determine the target vulnerability specified by the generation instruction.

Specifically, all or part of the steps of the method for generating a vulnerability detection tool provided by the present invention can be completed by a designated device or terminal, for example, a designated Windows system computer. The generation instruction is used to specify the target vulnerability. After the generation instruction is received, the generation instruction is parsed to determine the target vulnerability, and a vulnerability detection tool for detecting the target vulnerability is generated in a subsequent step. The type of the target vulnerability may be a vulnerability of the Windows operating system, or may be a vulnerability of the Linux operating system, or may be other types of vulnerabilities. The specific content of the generating instruction is not limited in this embodiment. In order to specify the target vulnerability, the generation instruction may include vulnerability information, and the vulnerability information may specifically be a name of the target vulnerability, or may be a serial number of the target vulnerability. According to the vulnerability information, the target vulnerability specified by the generation instruction can be determined.

This embodiment does not limit the method for obtaining the generation instruction. For example, the generation instruction input by the controller may be obtained, or the generation instruction sent by other devices or terminals may be obtained. When the generation instruction is obtained by obtaining the generation instruction input by the controller, this embodiment does not limit the specific input method of the generation instruction, for example, the controller can manually input the generation instruction; or a preset rule can be set, and the controller can input or select Target vulnerability, click OK and build the corresponding generation command according to the preset rules.

S102: Obtain a vulnerability script corresponding to the target vulnerability, add an entry code to the vulnerability script, and obtain the target script.

After determining the target vulnerability, obtain the vulnerability script corresponding to the target vulnerability. This embodiment does not limit the specific method of obtaining the vulnerability script. For example, it can be obtained from the vulnerability library of a specified vulnerability scanning system, or it can be sent by other devices or terminals, or it can be uploaded by the controller. Vulnerability codes are scripts in the vulnerability library used by the vulnerability scanning system, which are used by the vulnerability scanning system to perform call parsing and then scan. Specifically, they are non-executable vulnerability scripts, such as JS scripts, Python scripts, or Lua script. Since the vulnerability script is not executable, it cannot be used as a vulnerability detection tool. In order to quickly obtain the vulnerability detection tool, the corresponding vulnerability detection tool can be obtained by performing format conversion processing on it.

It should be noted that since the vulnerability script is originally used for call parsing by the vulnerability scanning system, it cannot be converted directly. After obtaining the vulnerable script, add the entry code to it, and then obtain the target script for format conversion processing. The specific form of the entry code is not limited in this embodiment. Depending on the script language of the vulnerability script, the form and content of the corresponding entry code will also be different. The target script is a script that can be converted into a format, and the vulnerability detection tool corresponding to the target vulnerability can be obtained by using the target script.

S103: Determine the script language corresponding to the target script, convert the target script into a target format according to the script language, and obtain a vulnerability detection tool.

The writing rules of target scripts in different scripting languages are different. In order to convert target scripts into target formats, it is necessary to determine the scripting language corresponding to the target scripts before conversion. It should be noted that the target format is an executable file format, and the vulnerability detection tool is obtained after converting the target script into an executable file format. This application does not limit the method of determining the script language corresponding to the target script. For example, the content of the target script can be used to determine the corresponding script language. Specifically, information such as the syntax of the code in the target script can be detected to determine the corresponding script language. scripting language.

Further, in order to accurately determine the script language, this embodiment preferably acquires the script attribute corresponding to the target script, uses the script attribute to determine the file suffix corresponding to the target script; uses the preset correspondence to determine the script language corresponding to the file suffix. It should be noted that the script attribute is used to record the attribute of the target script, that is, the file attribute of the target script. The file suffix of the target script is recorded in the script attribute, and the file suffix may indicate the file type of the target script. Since the target scripts generated by different scripting languages correspond to different file types, there are preset correspondences to record the correspondence between various scripting languages and file suffixes. After determining the file suffixes corresponding to the target scripts, use the preset The corresponding relationship can determine the script language corresponding to the file suffix, and can determine the script language corresponding to the target script. For example, when the target script is named vul, the script attribute of the vul script can be obtained, and the file suffix corresponding to vul can be determined from the script attribute, such as py. After the file suffix is determined to be py, according to the preset corresponding relationship, it can be determined that the target script is written in the Python language, that is, the corresponding scripting language is Python.

Further, after obtaining the vulnerability detection tool, follow-up operations can be performed, such as sending the vulnerability detection tool to the target device; or sending a notification of completion of generation; or detecting the vulnerability detection tool to determine whether there is an error. This embodiment does not limit the specific content of subsequent operations.

Applying the method for generating the vulnerability detection tool provided by the embodiment of the present invention, after determining the specified target vulnerability, determine the vulnerability script corresponding to the target vulnerability, and obtain the target script that can be converted by adding entry codes to the vulnerability script. After the scripting language corresponding to the target script is determined, it is converted and processed, and the vulnerability detection tool can be obtained. This method does not need to use a targeted development method to write and develop a vulnerability detection tool, and the vulnerability detection tool can be obtained by adding entry codes to the existing vulnerability scripts, and then performing format conversion processing. The development time of vulnerability detection tools is reduced, so that a large number of ordinary users can also avoid attacks launched by attackers using vulnerabilities, and the problem that existing special vulnerability detection methods need to be developed in a targeted manner, and the development work takes a long time.

Based on the foregoing embodiments of the present invention, the embodiments of the present invention will describe a specific format conversion method. Please refer to FIG. 2. FIG. 2 is a flowchart of a specific format conversion method provided by an embodiment of the present invention, including:

S201: Determine a conversion rule corresponding to the script language according to the script language.

It should be noted that, in the embodiment of the present invention, the conversion rule is used to convert the target script into the target format, that is, the executable file format. Since the grammatical rules of different script languages are different, the conversion rules corresponding to different script languages are also different. Before converting the target script, it is necessary to determine the conversion rules corresponding to the script language. Specifically, the conversion rules corresponding to various script languages may be stored locally, and after the script language corresponding to the target script is determined, the conversion rules corresponding to the script language may be obtained by using index information.

S202: Use the extraction rules in the conversion rules to perform information extraction processing on the target script to obtain script information.

In the embodiment of the present invention, the conversion rules include extraction rules and generation rules. Extraction rules are used to extract information from target scripts to obtain script information; generation rules are used to process script information to generate vulnerability detection tools. Since the writing rules corresponding to different scripting languages are different, the extraction rules in different conversion rules are different. The generation rules in different conversion rules can be the same or different. For example, in order to ensure the reliability of generation and prevent the failure of vulnerability detection tools, different generation rules can be set for different script languages; or in order to ensure consistency, different scripts can be set The same build rules are set for language.

The script information is used to generate the vulnerability detection tool, and its specific content is not limited in this embodiment, and the content of the script information corresponding to different target scripts is different.

S203: Using the generation rule in the conversion rule to generate an executable file on the script information to obtain a vulnerability detection tool.

After the script information is obtained, an executable file generation process is performed on the script information by using the generation rule in the conversion rule. That is, according to the generation rules, the script information is processed to obtain the vulnerability detection tool, which does not require developers to manually write the vulnerability detection tool, reduces the development time of the vulnerability detection tool, and enables a large number of ordinary users to avoid attacks initiated by attackers using vulnerabilities , which solves the problem that the existing special vulnerability detection method needs targeted development, and the development work takes a long time.

Further, in order to improve the generation speed and efficiency of the vulnerability detection tool, preferably in this embodiment, multiple conversion tools are preset, and each conversion tool corresponds to a different script language. When performing the step of converting the target script into the target format according to the script language to obtain the vulnerability detection tool, the corresponding conversion tool can be determined according to the script language, and the target script is converted into the target format by using the conversion tool to obtain the vulnerability detection tool. Specifically, the conversion tool can simultaneously complete two steps of script information extraction and executable file generation processing, which improves the generation speed of the vulnerability detection tool. For example, when the target script is vul.py, the corresponding script language is Python, so the corresponding conversion tool is determined to be the pyinstaller tool according to the script language, so use the pyinstaller tool to convert the format of the target script to obtain the vulnerability detection tool .

The device for generating a vulnerability detection tool provided by an embodiment of the present invention is introduced below, and the device for generating a vulnerability detection tool described below and the method for generating a vulnerability detection tool described above can be referred to in correspondence.

Please refer to FIG. 3. FIG. 3 is a schematic structural diagram of a vulnerability detection tool generation device provided by an embodiment of the present invention, including:

The target vulnerability determination module 310 is used to obtain and analyze the generation instruction, and determine the target vulnerability specified by the generation instruction;

The target script obtaining module 320 is used to obtain the vulnerability script corresponding to the target vulnerability, and adds entry code to the vulnerability script to obtain the target script;

The tool generation module 330 is configured to determine the script language corresponding to the target script, convert the target script into a target format according to the script language, and obtain a vulnerability detection tool.

Optionally, the tool generation module 330 includes:

A conversion rule determining unit, configured to determine a conversion rule corresponding to the script language according to the script language;

a script information acquisition unit, configured to extract information from the target script by using the extraction rules in the conversion rules to obtain script information;

The first conversion unit is configured to use the generation rules in the conversion rules to generate an executable file on the script information to obtain a vulnerability detection tool.

Optionally, the tool generation module 330 includes:

A file suffix determining unit, configured to obtain the script attribute corresponding to the target script, and determine the file suffix corresponding to the target script by using the script attribute;

The scripting language determination unit is configured to determine the scripting language corresponding to the file suffix by using the preset corresponding relationship.

Optionally, the tool generation module 330 includes:

A conversion tool determining unit, configured to determine a corresponding conversion tool according to the script language;

The second conversion unit is used to convert the target script into the target format by using the conversion tool to obtain the vulnerability detection tool.

The device for generating a vulnerability detection tool provided by the embodiment of the present invention is introduced below, and the device for generating a vulnerability detection tool described below and the method for generating a vulnerability detection tool described above can be referred to in correspondence.

Please refer to FIG. 4. FIG. 4 is a schematic structural diagram of a vulnerability detection tool generation device provided by an embodiment of the present invention. The vulnerability detection tool generation device includes a memory and a processor, wherein:

memory 410, used to store computer programs;

The processor 420 is configured to execute a computer program to implement the above method for generating a vulnerability detection tool.

The computer-readable storage medium provided by the embodiments of the present invention is introduced below, and the computer-readable storage medium described below and the method for generating a vulnerability detection tool described above can be referred to in correspondence.

The present invention also provides a computer-readable storage medium, on which a computer program is stored, and when the computer program is executed by a processor, the steps of the above-mentioned method for generating a vulnerability detection tool are realized.

The computer-readable storage medium may include: U disk, mobile hard disk, read-only memory (Read-OnlyMemory, ROM), random access memory (Random Access Memory, RAM), magnetic disk or optical disk, etc., which can store program codes. medium.

Each embodiment in this specification is described in a progressive manner, each embodiment focuses on the difference from other embodiments, and the same or similar parts of each embodiment can be referred to each other. As for the device disclosed in the embodiment, since it corresponds to the method disclosed in the embodiment, the description is relatively simple, and for the related information, please refer to the description of the method part.

Professionals can further realize that the units and algorithm steps of the examples described in conjunction with the embodiments disclosed herein can be implemented by electronic hardware, computer software or a combination of the two. In order to clearly illustrate the possible For interchangeability, in the above description, the composition and steps of each example have been generally described according to their functions. Whether these functions are executed by means of hardware or software depends on the specific application and design constraints of the technical solution. Those skilled in the art may use different methods to implement the described functions for each specific application, but such implementation should not be regarded as exceeding the scope of the present invention.

The steps of the methods or algorithms described in connection with the embodiments disclosed herein may be directly implemented by hardware, software modules executed by a processor, or a combination of both. Software modules can be placed in random access memory (RAM), internal memory, read-only memory (ROM), electrically programmable ROM, electrically erasable programmable ROM, registers, hard disk, removable disk, CD-ROM, or any other Any other known storage medium.

Finally, it should also be noted that in this article, relationships such as first and second etc. are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply that these entities or operations, any such actual relationship or order exists. Furthermore, the term "comprises", "comprising", or any other variation is intended to cover a non-exclusive inclusion such that a process, method, article, or apparatus comprising a set of elements includes not only those elements, but also items not expressly listed. other elements, or also include elements inherent in such a process, method, article, or apparatus.

A method for generating a vulnerability detection tool, a device for generating a vulnerability detection tool, a device for generating a vulnerability detection tool, and a computer-readable storage medium provided by the present invention have been described above in detail. In this paper, specific examples are used to explain the principle and implementation of the present invention. Elaborated, the description of the above embodiments is only used to help understand the method of the present invention and its core idea; at the same time, for those of ordinary skill in the art, according to the idea of the present invention, there will be specific implementation methods and application scopes. Changes, in summary, the contents of this specification should not be construed as limiting the present invention.

Claims (10)

1. A vulnerability detection tool generation method, comprising:

acquiring and analyzing a generating instruction, and determining a target vulnerability designated by the generating instruction;

obtaining a vulnerability script corresponding to the target vulnerability, and adding an entry code to the vulnerability script to obtain a target script;

and determining a scripting language corresponding to the target script, and converting the target script into a target format according to the scripting language to obtain the vulnerability detection tool.

2. The method of generating a vulnerability detection tool according to claim 1, wherein the converting the target script into a target format according to the scripting language, to obtain the vulnerability detection tool, comprises:

determining a conversion rule corresponding to the scripting language according to the scripting language;

performing information extraction processing on the target script by using an extraction rule in the conversion rule to obtain script information;

and performing executable file generation processing on the script information by using the generation rules in the conversion rules to obtain the vulnerability detection tool.

3. The vulnerability detection tool generation method of claim 1, wherein the determining the scripting language corresponding to the target script comprises:

acquiring script attributes corresponding to the target script, and determining file suffixes corresponding to the target script by utilizing the script attributes;

and determining the script language corresponding to the file suffix by using a preset corresponding relation.

4. A vulnerability detection tool generation method according to any one of claims 1-3, wherein the converting the target script into a target format according to the scripting language, to obtain the vulnerability detection tool, comprises:

determining a corresponding conversion tool according to the script language;

and converting the target script into the target format by using the conversion tool to obtain the vulnerability detection tool.

5. A vulnerability detection tool generation apparatus, comprising:

the target vulnerability determining module is used for acquiring and analyzing a generating instruction and determining a target vulnerability designated by the generating instruction;

the target script acquisition module is used for acquiring a vulnerability script corresponding to the target vulnerability, and adding an entry code to the vulnerability script to obtain a target script;

and the tool generation module is used for determining a scripting language corresponding to the target script, and converting the target script into a target format according to the scripting language to obtain the vulnerability detection tool.

6. The vulnerability detection tool generation apparatus of claim 5, wherein the tool generation module comprises:

the conversion rule determining unit is used for determining a conversion rule corresponding to the script language according to the script language;

the script information acquisition unit is used for carrying out information extraction processing on the target script by utilizing the extraction rule in the conversion rule to obtain script information;

and the first conversion unit is used for generating executable files for the script information by utilizing the generation rules in the conversion rules to obtain the vulnerability detection tool.

7. The vulnerability detection tool generation apparatus of claim 5, wherein the tool generation module comprises:

a file suffix determining unit, configured to obtain a script attribute corresponding to the target script, and determine a file suffix corresponding to the target script using the script attribute;

and the script language determining unit is used for determining the script language corresponding to the file suffix by utilizing a preset corresponding relation.

8. The vulnerability detection tool generation apparatus of any one of claims 5 to 7, wherein the tool generation module comprises:

a conversion tool determining unit, configured to determine a corresponding conversion tool according to the scripting language;

and the second conversion unit is used for converting the target script into the target format by using the conversion tool to obtain the vulnerability detection tool.

9. A vulnerability detection tool generation apparatus comprising a memory and a processor, wherein:

the memory is used for storing a computer program;

the processor is configured to execute the computer program to implement the vulnerability detection tool generation method of any one of claims 1-4.

10. A computer readable storage medium for storing a computer program, wherein the computer program when executed by a processor implements the vulnerability detection tool generation method of any one of claims 1 to 4.

Images