AI 中文总结
本文针对现有网络安全工具的缺陷，提出开发一款将侦察与POC验证结合的指纹驱动自动化工具，经测试其可完成目标自动侦察、数据处理及漏洞检测验证。
AI 中文摘要
在网络安全对抗领域，侦察是首要且最关键的步骤，准确、高效且全面的侦察可帮助网络安全工作者更充分地了解目标当前状态、识别潜在弱点并制定针对性的攻击策略。然而，现有市场工具存在诸多问题，如收集的信息准确性低、缺乏隐蔽性、耗时、工具集成度低或过高，导致难以使用。随着技术持续发展，系统需不断升级技术与策略、扩展新功能，工具功能的可扩展性也是需考虑的因素之一。这些网络安全实践中的问题严重影响用户体验和工作效率。鉴于此，本文提出开发一款高度自动化的侦察与漏洞验证工具，介绍该工具的功能并进行基础设计，最终实现并测试所有功能，以验证工具功能的可行性，并突出该工具在网络安全领域自动化、检索及使用方面的优势。在在线安全仿真靶场的测试中，结果显示该工具可完成特定目标的自动侦察与深度数据处理，并开展自动漏洞检测与验证。
英文摘要
In the field of network security confrontation, reconnaissance is the first and most critical step. Accurate, efficient, and comprehensive reconnaissance can help network security workers more fully understand the target's current state, identify potential weaknesses, and formulate a targeted attack strategy. However, there are some problems in the existing tools on the market, such as low accuracy of the collected information, lack of concealment, time-consuming, low or high integration of tools, which makes them difficult to start using. With the continuous development of technology, systems need to continuously upgrade their technologies and strategies, and expand new functions. The scalability of tool functions is also one of the factors that need to be taken into consideration. These problems in the practice of network security have a serious impact on user experience and work efficiency. In view of this, a more user-friendly, more automated reconnaissance and vulnerability verification tool is designed. This paper proposes to develop a highly automated reconnaissance and vulnerability verification tool. This paper presents the tool functions and conducts the basic design. Finally, we implement and test all the functions specifically to verify the feasibility of the tool functions and highlight the advantages of this tool in terms of automation, retrieval, and use in network security operations. Through the test of the online security simulation range, the results show that this tool can complete the automatic reconnaissance and in-depth data processing of specific targets, and conduct automatic vulnerability detection and verification.
