Iskena seTsunami yoKhuseleko sele ingumthombo ovulekileyo, uGoogle wagqiba kwelokuba kunjalo

Kwiintsuku ezininzi ezidlulileyo, abantu kuGoogle benze isigqibo sokukhupha ikhowudi su Isikena sokhuselo lweTsunami, Yeyiphi yenzelwe ukukhangela ukuba sesichengeni okwaziwayo kwenginginya kwinethiwekhi okanye uchonge iingxaki ngoqwalaselo oluchaphazela ukhuseleko lwezixhobo. Ikhowudi yeprojekthi ibhaliwe kwiJava kwaye isasazwa phantsi kwelayisensi ye-Apache 2.0.

Njengoko sinokufunda ngaphakathi kwindawo yokugcina izintoUGoogle uchaza iskena sayo ngolu hlobo lulandelayo:" I-tsunami yinjongo jikelele yokuskena ukhuseleko lwenethiwekhi ngenkqubo ye-plug-in eyandisiweyo yokufumana ubuzaza obuphezulu ngokuzithemba okukhulu. "

Tsunami ixhomekeke kakhulu kwinkqubo yakho ye-plugin ukubonelela ngesiseko sokuskena. Zonke iiplagi zetsunami ezikhoyo esidlangalaleni zigcinwe kwindawo eyahlukileyo kagoogle / tsunami-security-scanner-plugins. "

Malunga neSikena soKhuseleko lweTsunami

Inje ngokuba "yiTsunami" ibonelela ngeqonga eliqhelekileyo nelendalo yonke ukusebenza kwayo kuchazwe kwiiplagi. Ngokufanelekileyo, kukho iplagi yokuskena izibuko elisekwe kwi-nmap kunye ne-plug-in yokujonga iiparameter zokungathembeki ezingasekelwanga kwiNcrack, kunye neeplagi ezinokubona ubungozi kuHadoop Yarn, Jenkins, Jupyter, kunye neWordPress.

Injongo yeprojekthi yile bonelela ngesixhobo sokufumana ubungozi ngokukhawuleza kwiinkampani ezinkulu ezinezixhobo ezibanzi zenethiwekhi. Ngokukhupha ulwazi kwimiba emitsha ebalulekileyo, ugqatso lulandela ngabahlaseli abafuna ukuhlasela iziseko zophuhliso zeshishini ngaphambi kokuba umba usonjululwe.

Izinto eziyingxaki kufuneka zichongwe ngabasebenzi beenkampani ngokukhawuleza, njengoko inkqubo inokuhlaselwa zingaphelanga iiyure emva kokuba idatha yengozi ichaziwe.

Kwiinkampani ezinamawakawaka eenkqubo ezinokufikelela kwi-Intanethi, ukuqinisekiswa kokuzenzekelayo akunakwenziwa ngaphandle kwayo, kwaye iTsunami yamkelwa njengesombulula ingxaki efanayo.

Itsunami iyakwenza njalo ikuvumela ukuba ukhawuleze ngokuzimeleyo wenze izixhobo zokufumana ubungozi okanye usebenzise ingqokelela esele ikulungele ukufumanisa ezona ngxaki ziyingozi ekurekhodwe kuzo uhlaselo.

Emva kokuskena inethiwekhi, I-Tsunami ibonelela ngengxelo yokuqinisekisa, egxile ekunciphiseni inani leeposta ezingezizo ukuze zingathathi ixesha elide ukuhlalutya. I-tsunami ikwaphuhliswa ngokukala kunye nokuqinisekisa ukuzenzekelayo engqondweni, ukuvumela ukuba uyisebenzise, ​​umzekelo, ukubeka esweni ngokuthe rhoqo ukuthembeka kweeparameter zokungqinisisa ezisetyenzisiweyo.

Inkqubo yokuqinisekisa kwi I-tsunami yahlulwe yangamanqanaba amabini:

1. Ukuqokelelwa kolwazi malunga neenkonzo kwinethiwekhi. Okwangoku, amazibuko avulekileyo achaziwe, kunye neenkonzo ezinxulumene noko, iinkqubo kunye nokusetyenziswa. Izixhobo ezimiselwe kakuhle ezinje nge-nmap ziyasetyenziswa kweli nqanaba.
2. Ukuqinisekiswa komngcipheko. Ngokusekwe kulwazi olufunyenwe kwinqanaba lokuqala, iiplagi ezifanelekileyo zeenkonzo ezichongiweyo ziyakhethwa kwaye ziqaliswe. Ukuqinisekisa okokugqibela kobukho bengxaki, ukusetyenziswa gwenxa kokusebenza okungasetyenziswanga kuyasetyenziswa. Ukongeza, ukujonga ukuthembeka kweziqinisekiso eziqhelekileyo ukumisela iipaswedi ezibuthathaka kunokwenziwa kusetyenziswa inkqubo ye-ncrack exhasa iiprotocol ezahlukeneyo, kubandakanya i-SSH, i-FTP, i-RDP kunye ne-MySQL.

Iprojekthi ikwisigaba sokuqala sovavanyo lwe-alpha, kodwa UGoogle sele eyisebenzisa iTsunami ukuskena ngokuqhubekayo nokukhusela zonke iinkonzo zayo, ukufikelela kwakhe kuvulelekile kwizicelo zangaphandle.

Phakathi kwezicwangciso ezikufutshane zokunyusa ukusebenza, ukumiliselwa kweeplagi ezintsha zokuchonga iingxaki ezinokubangela ukwenziwa kwekhowudi ekude, kunye nokongeza icandelo eliphambili ukufumanisa ukuba zeziphi na izicelo ezizakusetyenziswa (iminwe yeminwe yesicelo sewebhu) eziza kuphucula Ingcinga yokukhetha enye okanye enye iplagin yovavanyo.

Kwizicwangciso ezikude, kukhankanywa ukubonelelwa kwezixhobo zokubhala iiplagi kulo naluphi na ulwimi lwenkqubo kunye nokukwazi ukongeza iiplagi ngamandla.

Gqibela ukuba unomdla wokwazi okungakumbi ngayo yeprojekthi okanye ukwazi ukubona ikhowudi yemvelaphi, ungayenza kwikhonkco elingezantsi.