Method and device for vulnerability scanning

摘要

The disclosed embodiment provides a method and device for vulnerability scanning, the method comprising: a reverse scanning agent module acquires a client message; the reverse scanning agent module transmits the client message to a vulnerability scanner, enabling the vulnerability scanner to identify a vulnerability of the client according to the client message; or the reverse scanning agent module identifies the vulnerability of the client according to the client message and transmits the vulnerability to the vulnerability scanner; the reverse scanning agent module receives a control instruction from the vulnerability scanner, changes operation manner and/or mode according to the control instruction, and updates a vulnerability rule. The reverse scanning agent module in the disclosure acquires and analyzes the client message to identify the vulnerability of the client, which supplements server security issue remote detection with client security issue analysis, thereby realizing security detection for the entire network.