Method and device for system penetration testing

Abstract

The invention discloses a method for system penetration testing, comprising the following steps: S1, test target information of a system is acquired by use of a variety of public resources; S2, network information of a system test target is extracted; S3, online network host information of the system is detected; S4, all open ports of the system are scanned, and all services are enumerated through all the ports to position and analyze a loophole in the target system; and S5, the target system is penetrated by a loophole device. The invention further discloses a device for system penetration testing. By adopting the method and the device, provided by the invention, for system penetration testing, through static analysis of a source code, on one hand, potential risks can be identified, software can be detected from inside, and the safety of the code can be improved, and on the other hand, the quality of the code can be further improved, and the software security can be greatly improved.

Description

technical field [0001] The invention relates to the field of source code security, in particular to a method, device and system for system penetration testing. Background technique [0002] Now, more and more crackers appear on the Internet. They invade computer systems, use scanners to scan everywhere, bomb people with IP bombs, invade and destroy without any purpose. They are not beneficial to the development of computer technology, but instead It is detrimental to the security of the network and causes network paralysis, which brings huge economic and spiritual losses to people. The means of attack can be divided into two categories: non-destructive attack and destructive attack. Non-destructive attacks are generally used to disrupt the operation of the system without stealing system data, usually using denial of service attacks or information bombs; destructive attacks are aimed at invading other people's computer systems, stealing system confidential information, and d...

AI Technical Summary

Problems solved by technology

[0002] Now, more and more crackers appear on the Internet. They invade computer systems, use scanners to scan everywhere, bomb people with IP bombs, invade and destroy without any purpose. They are not beneficial to the development of computer technology, but instead Harmful to network security and cause network paralysis, bring huge economic and spiritual losses to people

Images