A network protocol-based automated penetration testing method, device and storage medium

Abstract

The network protocol-based automated penetration testing method, device and storage medium provided by the present invention relate to the technical field of network security; the method includes fingerprint information collection, fingerprint information preprocessing to set attack paths, test attacks and generate reports, using network protocols as the basis The starting point integrates multiple scripts to quickly identify the basic information of the target server, and then quickly identify risks based on the known information, automatically generate a set of execution, and finally generate a report; Memorizing complex console operation commands solves the problem of incomplete manual testing. One-key integration and automated penetration significantly improve the efficiency of penetration testing.

Description

technical field [0001] The invention relates to the technical field of network security, in particular to an automatic penetration test method, device and storage medium based on network protocols. Background technique [0002] With the Internet age, new technologies are constantly emerging. But at the same time Trojan virus is rampant, hacker attacks are frequent, and network threats are becoming more and more serious. Ordinary protective measures are not enough to resist hacker intrusions. Then how to ensure network information security, the answer is to conduct penetration testing. Penetration testing is a method of simulating hacker attacks. Behavior. Before a real hacker attack, the security personnel conduct a penetration test, use hacker techniques and hacker methods to find possible loopholes in the system, and make timely repairs, thereby eliminating hidden dangers and safeguarding network security. Penetration testing currently has problems in both theory and pra...

AI Technical Summary

Problems solved by technology

[0003] The purpose of the present invention is to provide a network protocol-based automated penetration testing method, device, and storage medium. From the perspective of network protocols, the penetration testing can be studied, and only a small amount of information can be provided to complete the target penetration, which solves the problem of traditional command lines. Complicated operation process, improving operator testing efficiency

Images