WO2023178990A1

WO2023178990A1 - Vulnerability poc detection-based security scanning tool

Info

Publication number: WO2023178990A1
Application number: PCT/CN2022/124303
Authority: WO
Inventors: 张媛琳; 谭宽; 蒋莹; 王冰; 保佑智; 徐吉用; 何爽; 杨韵融; 朱艳琼; 冷大伟
Original assignee: 云南电网有限责任公司红河供电局
Priority date: 2022-03-22
Filing date: 2022-10-10
Publication date: 2023-09-28
Also published as: CN217216606U

Abstract

Disclosed in embodiments of the present application is a vulnerability POC detection-based security scanning tool, comprising a box body (1). A cover plate (2) is hingedly connected to the top of the box body (1); a plurality of battery containers (13) and a device container (15) are formed in the box body (1); batteries (3) are arranged in the battery containers (13); a scanning tool (4) is arranged in the device container (15); a first inflation gasket (14) is arranged on the inner wall of each battery container (13); a second inflation gasket (16) is arranged on the inner wall of the device container (15); the first inflation gaskets (14) and the second inflation gasket (16) are of a rectangular ring-shaped structure; a sealing strip (18) is installed on the inner wall of an opening of the box body (1). According to the vulnerability POC detection-based security scanning tool, batteries and a device can be conveniently placed and fixed by means of the battery containers and the device container arranged therein, the batteries and the device are protected by the first inflation gaskets and the second inflation gasket, vibration or crush damage during carrying is avoided, the box body facilitates carrying, and the portability of the apparatus is improved.

Description

A security scanning tool based on vulnerability POC detection

Technical field

The utility model relates to the technical field of vulnerability detection equipment, specifically to a security scanning tool based on vulnerability POC detection.

Background technique

POC testing, or Proof of Concept, is a popular verification test in the industry for customer-specific applications. According to the performance requirements and expansion demand indicators proposed by users for the adopted system, real data is run on the selected server to carry out user data. Conduct actual calculations on the volume and running time, and increase the amount of data according to the user's future business expansion needs to verify the carrying capacity and performance changes of the system and platform. When conducting POC detection of vulnerabilities, security scanning tools need to be used for security scanning, NMAP Confirm port status through port scanning. Scanning technologies include: TCP SYN scan; TCP connect scan; TCP ACK scan; TCP FIN/Xmas/NULL scan; UDP scan; SCTP INIT/COOKIE-ECHO; idle scan; FTP bounce scan. Service version detection and identification, if it is a TCP port, try to establish a TCP connection, usually within the waiting time, you will receive the "Welcome Banner" message sent by the target machine.

Existing security scanning tools based on vulnerability POC detection are not easy to carry when using them. The tools are not easy to fix when carrying, and they are easy to be collided or squeezed, causing damage to the equipment. In addition, the battery needs to be replaced during use. The placement of the battery And storage is not convenient enough.

Utility model content

The purpose of this utility model is to provide a security scanning tool based on vulnerability POC detection to solve the problems raised in the above background technology.

In order to achieve the above purpose, the present utility model provides a security scanning tool based on vulnerability POC detection, which includes a box body, the top of the box body is hinged with a cover plate, and a number of battery slots and equipment slots are provided inside the box body. , a battery is arranged inside the battery slot, a scanning tool is arranged inside the equipment slot, a first inflatable gasket is arranged on the inner wall of the battery slot, a second inflatable gasket is arranged on the inner wall of the equipment slot, The first inflatable gasket and the second inflatable gasket are rectangular annular structures, and a sealing strip is installed on the inner wall of the opening of the box.

Preferably, a buckle plate is installed on one side of the cover plate, a button hole is installed on one side of the outer wall of the box body, and the buckle plate snaps into the button hole.

Preferably, a handle is installed on the outer wall of the box.

Preferably, the outer walls of the first inflatable gasket and the second inflatable gasket are provided with inflatable openings.

Preferably, an inflation tube is installed on the outer wall of the box, and the inside of the inflation tube is connected to the inflation port through a pipeline.

Preferably, compression blocks are installed on the inner walls of both sides of the second inflatable gasket.

Preferably, the pressing block has an L-shaped structure, and a pressure plate is installed on the inside. A spring is provided between the pressing block and the pressure plate.

Compared with the existing technology, the beneficial effects of this utility model are:

In this security scanning tool based on vulnerability POC detection, the battery slot and the device slot provided in it can facilitate the placement and fixation of the battery and the device. The battery and the device are protected by the first inflatable gasket and the second inflatable gasket to avoid carrying them. It is easily damaged by vibration or extrusion, and can be easily carried through the box, improving the portability of the device.

Description of the drawings

Figure 1 is a schematic diagram of the overall structure of the utility model;

Figure 2 is a schematic structural diagram of the first inflatable gasket in the present utility model;

Figure 3 is a schematic structural diagram of the compression block in the present utility model.

The meaning of each symbol in the figure is:

1. Box body; 11. Button hole; 12. Handle; 13. Battery slot; 14. First inflatable gasket; 141. Inflatable port; 15. Equipment slot; 16. Second inflatable gasket; 161. Pressure block; 162 , pressure plate; 163, spring; 17, inflatable tube; 18, sealing strip; 2, cover plate; 21, buckle plate; 3, battery; 4, scanning tool.

Detailed ways

The technical solutions in the embodiments of the present utility model will be clearly and completely described below with reference to the accompanying drawings in the embodiments of the present utility model. Obviously, the described embodiments are only part of the embodiments of the present utility model, not all implementations. example. Based on the embodiments of the present utility model, all other embodiments obtained by those of ordinary skill in the art without making creative efforts belong to the scope of protection of the present utility model.

In the description of the present invention, it should be understood that the terms "center", "longitudinal", "transverse", "length", "width", "thickness", "upper", "lower", "front", The directions indicated by "back", "left", "right", "vertical", "horizontal", "top", "bottom", "inside", "outside", "clockwise", "counterclockwise" etc. Or the positional relationship is based on the orientation or positional relationship shown in the drawings, which is only for the convenience of describing the present invention and simplifying the description, and does not indicate or imply that the equipment or components referred to must have a specific orientation, be constructed in a specific orientation, and operation, therefore it cannot be construed as a limitation of the present invention.

In addition, the terms “first” and “second” are used for descriptive purposes only and cannot be understood as indicating or implying relative importance or implicitly indicating the quantity of indicated technical features. Thus, defining "first" and "second" features may explicitly or implicitly include one or more of these features. In the description of the present invention, "several" means two or more, unless otherwise clearly and specifically limited.

Example 1

The utility model provides a security scanning tool based on vulnerability POC detection, as shown in Figures 1 to 3, including a box body 1. The top of the box body 1 is hinged with a cover plate 2 to facilitate the opening and closing of the box body 1. A number of battery slots 13 and equipment slots 15 are provided inside the body 1. Batteries 3 are provided inside the battery slot 13 to facilitate storage and placement of the batteries. A scanning tool 4 is provided inside the equipment slot 15 for scanning the security scanning tool. When stored and placed, the inner wall of the battery slot 13 is provided with a first inflatable gasket 14 for protecting the outside of the battery 3, and the inner wall of the equipment slot 15 is provided with a second inflatable gasket 16 for protecting the outside of the scanning tool 4. The first inflatable gasket 14 and the second inflatable gasket 16 are rectangular annular structures, and a sealing strip 18 is installed on the inner wall of the opening of the box body 1 to ensure the sealing performance after the cover plate 2 is closed.

In this embodiment, a buckle plate 21 is installed on one side of the cover 2, and a button hole 11 is installed on one side of the outer wall of the box body 1. The buckle plate 21 snaps into the button hole 11 to facilitate the cover 2 to remain fixed after being closed. , will not cause looseness.

It is worth mentioning that Scan Tool 4 will scan sequentially based on IP addresses when performing network scans. Security devices such as firewalls usually have anti-scanning mechanisms and will judge based on the order of scanning. If there are too many requests for a single IP and With certain rules, it can easily be judged as an attack, and subsequent connection requests will be blocked. In order to bypass the filtering of security devices such as firewalls, in order to break through the firewall blockade and collect network asset information, technologies such as IP packet fragmentation, IP deception, and scan delay can usually be used during remote scanning. IP packet fragmentation technology can fragment detection packets, for example, splitting TCP packets into multiple IP packets and sending them over. Some simple firewalls may not perform reassembly checks in order to speed up processing. This avoids its inspection. IP decoys (IP decoys) mix real IP addresses with the IP addresses of other online hosts during scanning, allowing the target host's firewall or IDS to track and inspect a large number of data packets with different IP addresses, reducing the number of traceable own probability. However, some advanced IDS systems can still track the scanner's real IP address through statistical analysis. Another technique is scanning delay. Some firewalls will conduct strict detection of data packets sent too frequently, and some systems limit the frequency of error packets. For example, Solaris systems typically limit generating one ICMP message per second in response to a UDP scan. Therefore, customizing the frequency and delay of sending messages in this case can reduce the censorship intensity of the target host and save network bandwidth.

Specifically, a handle 12 is installed on the outer wall of the box 1 to facilitate the carrying of the box 1 .

Furthermore, the outer walls of the first inflatable gasket 14 and the second inflatable gasket 16 are provided with inflation openings 141 to facilitate inflating the first inflatable gasket 14 and the second inflatable gasket 16 to ensure the protective effect.

Further, an inflation tube 17 is installed on the outer wall of the box body 1. The inside of the inflation tube 17 is connected to the inflation port 141 through a pipeline. The inflation tube 17 is inflated through an air pump to inflate the first inflatable gasket 14 and the second inflatable gasket 14. The gasket 16 is filled with gas, thereby ensuring the protective effect on the battery and the scanning tool 4 .

Example 2

In order to further improve the positioning of the scanning tool 4, on the basis of Embodiment 1, compression blocks 161 are installed on both sides of the inner walls of the second inflatable gasket 16 for compressing and fixing the outside of the scanning tool 4 so that it is in the equipment. It remains fixed in the groove 15 and will not loosen.

Further, the pressing block 161 has an L-shaped structure, and a pressing plate 162 is installed on the inside. The outside of the pressing block 161 is pressed against the outer wall of the scanning tool 4, and the outside of the pressing plate 162 is pressed against the inner wall of the equipment slot 15. A spring 163 is provided between the tightening block 161 and the pressure plate 162. The spring 163 compresses the pressure plate 162 to increase the friction between the pressure plate 162 and the inner wall of the equipment slot 15, thereby ensuring that the scanning tool 4 is fixed.

When using the security scanning tool based on vulnerability POC detection of the present invention, first open the cover 2 of the device, then put the battery into the battery slot 13, put the scanning tool 4 into the equipment slot 15, and use the air pump to By inflating the gas tube 17, the gas in the first gas washer 14 and the second gas gasket 16 can be filled, thereby ensuring the protective effect on the battery and the scanning tool 4. The pressure plate 162 is pressed tightly by the spring 163 to increase the size of the pressure plate. 162 and the inner wall of the equipment slot 15 to ensure that the scanning tool 4 is fixed. Then cover the cover 2, and you can carry the box 1 with you. When you need to use the security scanning tool 4, open the cover 2 , and then take out the scanning tool 4 from the equipment slot 15.

The basic principles, main features and advantages of the present utility model are shown and described above. Those skilled in the industry should understand that the present utility model is not limited by the above-mentioned embodiments. The above-mentioned embodiments and descriptions are only preferred examples of the present utility model and are not used to limit the present utility model. Without departing from the present utility model, Under the premise of keeping the spirit and scope of the present utility model, there will be various changes and improvements, and these changes and improvements all fall within the scope of the claimed utility model. The protection scope of the present utility model is defined by the appended claims and their equivalents.

Claims

A security scanning tool based on vulnerability POC detection, including a box body (1), which is characterized in that: a cover plate (2) is hinged on the top of the box body (1), and a cover plate (2) is provided inside the box body (1). Several battery slots (13) and equipment slots (15), the battery slot (13) is provided with a battery (3), the equipment slot (15) is provided with a scanning tool (4), and the battery slot (13) is provided with a scanning tool (4). The inner wall of (13) is provided with a first inflatable gasket (14), and the inner wall of the equipment slot (15) is provided with a second inflatable gasket (16). The first inflatable gasket (14) and the second inflatable gasket (16) ) is a rectangular annular structure, and a sealing strip (18) is installed on the inner wall of the opening of the box (1).
The security scanning tool based on vulnerability POC detection according to claim 1, characterized in that: a buckle plate (21) is installed on one side of the cover plate (2), and a buckle plate (21) is installed on one side of the outer wall of the box body (1). There is a button hole (11), and the button plate (21) snaps into fit with the button hole (11).
The security scanning tool based on vulnerability POC detection according to claim 1, characterized in that: a handle (12) is installed on the outer wall of the box (1).
The security scanning tool based on vulnerability POC detection according to claim 1, characterized in that: the outer walls of the first inflatable gasket (14) and the second inflatable gasket (16) are provided with inflation ports (141).
The security scanning tool based on vulnerability POC detection according to claim 4, characterized in that: an inflation tube (17) is installed on the outer wall of the box (1), and the inside of the inflation tube (17) is connected to the inflation port (17). 141) are connected through pipelines.
The security scanning tool based on vulnerability POC detection according to claim 1, characterized in that: compression blocks (161) are installed on the inner walls of both sides of the second inflatable gasket (16).
The security scanning tool based on vulnerability POC detection according to claim 6, characterized in that: the pressing block (161) has an L-shaped structure, and a pressing plate (162) is installed inside, and the pressing block (161) A spring (163) is provided between the pressure plate (162).