Secondary vocational network security skills competition P100 web penetration test

One 、 What is penetration testing
Penetration test （penetration testing） It is an authorization attack on computer system , To evaluate the system / The security of the network , Perform tests to identify vulnerabilities and their risks . generally speaking , The penetration test process is divided into five stages ： Including identifying the target system 、 Detect the existing vulnerabilities and the availability of each vulnerability . The goal of penetration testing is to find as many vulnerabilities as possible , And deliver reports in a common format acceptable to customers .

Two 、 Penetration test type
White box （white box）： In the white box test , The testee will generally provide the target system to the tester 、 The Internet 、 Application and other details （ Including account number 、 password 、SSH/Telnet login information 、 framework 、 Network structure 、 Source code … … wait ）.

Black box （black box）： Test simulating the attacker scenario . Act as a real attacker's perspective , There is no information about the target system （ White box test description ）, The biggest feature of this test is that the tester will pay more attention to the first stage of penetration test —— information gathering . The more information you collect , The better the effect of post test .

Gray box （gray box）： Between black and white box test , In a typical gray box test , The tester will know the relevant target system in advance 、 Applications 、 Internet Information … … wait . This kind of test is usually applicable to organizations with time limit requirements , The tested person provides effective information , Testers can focus on systems that are more risky , Save the early information collection time .

3、 ... and 、 Penetration test phase
according to Harpreet Singh、Himanshu Sharma Professional description of others , The infiltration process can be divided into the following stages ：

Stage 1: Information collection and investigation

Stage 2： enumeration