Automatic penetration testing method and device based on network protocol and storage medium

Abstract

The invention provides an automatic penetration testing method and device based on a network protocol and a storage medium, and relates to the technical field of network security. The method comprises the steps of collecting fingerprint information, preprocessing the fingerprint information to set an attack path, testing an attack and generating a report, integrating a plurality of scripts by taking a network protocol as a starting point, quickly identifying basic information of a target server, further quickly identifying risks from known information, automatically generating a set of execution, and finally generating the report. Compared with the traditional penetration test, the test method provided by the invention has the advantages that complicated console operation commands memorized by testers are reduced, the problem of incomplete manual test is solved, one-key integration and automatic penetration are realized, and the penetration test efficiency is remarkably improved.

Description

technical field [0001] The invention relates to the technical field of network security, in particular to an automatic penetration test method, device and storage medium based on network protocols. Background technique [0002] With the Internet age, new technologies are constantly emerging. But at the same time Trojan virus is rampant, hacker attacks are frequent, and network threats are becoming more and more serious. Ordinary protective measures are not enough to resist hacker intrusions. Then how to ensure network information security, the answer is to conduct penetration testing. Penetration testing is a method of simulating hacker attacks. Behavior. Before a real hacker attack, the security personnel conduct a penetration test, use hacker techniques and hacker methods to find possible loopholes in the system, and make timely repairs, thereby eliminating hidden dangers and safeguarding network security. Penetration testing currently has problems in both theory and pra...

AI Technical Summary

Problems solved by technology

[0003] The purpose of the present invention is to provide a network protocol-based automated penetration testing method, device, and storage medium. From the perspective of network protocols, the penetration testing can be studied, and only a small amount of information can be provided to complete the target penetration, which solves the problem of traditional command lines. Complicated operation process, improving operator testing efficiency

Images