公开(公告)号：US20080148408A1

公开(公告)日：2008-06-19

申请号：US11652128

申请日：2007-01-11

申请人： Hsin-Chieh Kao ,  Chih-Hung Lin

发明人： Hsin-Chieh Kao ,  Chih-Hung Lin

IPC分类号： G06F11/00

CPC分类号： H04L63/1433 ,  G06F21/577 ,  G06F2221/2119 ,  H04L43/50

摘要： A system and a method of parsing web page element to detect web page vulnerability and a recording medium thereof are provided. The method includes parsing elements in a target web page after requesting a web page server for the target web page, fetching attackable elements from the parsed elements and converting the attackable elements into attackable components, and then using all of the attackable components to perform a penetrable test on the web page server, so as to download more indirect web pages, thereby increasing the test coverage. Moreover, repetitive or test-free elements can be filtered by converting the attackable elements into the attackable components, so as to accelerate the detection.

摘要翻译： 提供了解析网页元素以检测网页漏洞的系统和方法及其记录介质。 该方法包括在请求目标网页的网页服务器之后解析目标网页中的元素，从解析的元素获取可攻击元素并将可攻击元素转换成可攻击的组件，然后使用所有可攻击的组件来执行可穿透的 在网页服务器上进行测试，以便下载更多的间接网页，从而提高测试覆盖率。 此外，可以通过将可攻击元素转换为可攻击组件来过滤重复或无测试元素，以加速检测。