Vulnerability discovery method and device and electronic equipment

Abstract

The embodiment of the invention discloses a vulnerability discovery method and device and electronic equipment. The method comprises the steps that fuzzy configuration data based on a target application program is generated; the target application program is started in a virtual machine arranged in advance, and a sample file for the target application program is read; the format of the sample file for the target application program is analyzed to obtain a data block, the fuzzy configuration data based on the target application program is called, and fuzzy configuration is carried out on the data block to generate fuzzy data; the fuzzy data is written into an input interface of the target application program, the fuzzy data runs in the target application program, and vulnerability discovery is carried out based on the information of a running result of the fuzzy data. By applying the vulnerability discovery method and device and the electronic equipment, the vulnerability discovery efficiency can be improved.

Description

technical field [0001] The invention relates to computer network security technology, in particular to a loophole mining method, device and electronic equipment. Background technique [0002] With the rapid development of computer network technology, the Internet has gradually become an indispensable part of people's work and life. However, while the Internet brings convenience to people, due to the complexity of the Internet application environment and the diversity of Internet applications, when people use the Internet through application software, the application software is vulnerable to computer viruses, Trojan horses, etc. Exploitation threat. Among them, loopholes refer to the functional or security logic defects in the application software, and are the defects and deficiencies in the hardware, application software, protocol implementation or system security strategy of the computer system. Therefore, using the vulnerability mining technology to dig out and repair t...

AI Technical Summary

Problems solved by technology

[0005] However, in this vulnerability mining method, the target content in the script needs to be manually modified, and after each manual modification of the target content in the script, the script needs to be reloaded to the target application to run, and after the script load times out, it needs to be submitted again The script runs to the target application, which makes it take a long time to discover potential vulnerabilities in the target application, and the vulnerability mining efficiency is low

Images