All posts
Adli BilişimSiber Güvenlik

Penetration Testing

In this article, I will try to give you information about Penetration testing. I hope it's a useful article for you. Thank you all in advance. Happy…

Mehmet Kadir CIRIK

2 min read

Hello everyone :)

In this article, I will try to give you information about penetration testing. I hope it’s a useful article for you. Thank you all in advance. Happy reading.

Penetration testing is a type of attack carried out against a system, network, individual, institution, or organization, in order to reveal to what extent the target system can, or cannot, defend itself when subjected to a real attack. The actual purpose of these attacks is to make systems more secure and to protect them against attacks that could come from outside. These tests are carried out legally, purely for security purposes, by expert and authorized people in the field.

computer,

Objectives of penetration testing:

  • Learning how secure the systems of individuals, institutions, and organizations are.
  • Performing a thorough vulnerability scan.
  • Closing the vulnerabilities found as quickly as possible.
  • Enabling organizations to learn their security capacity.
  • Uncovering attacks and threats made against organizations’ systems.
  • Meeting organizations’ needs regarding updates to their software, hardware, and network, etc.

Penetration Testing Methods:

  • BlackBox: The expert or person performing the test isn’t given any information about the organization and system to be tested. They act like a real attacker.
  • WhiteBox: The expert or person performing the test is given full information about the system by the organization. The necessary information is gathered and the process moves on to the vulnerability scanning stage.
  • GreyBox: A mix of BlackBox and WhiteBox penetration tests. The person performing the test isn’t given detailed information about the system and organization.

Penetration tests are a type of test that independent organizations commission for their own purposes. In this context, tests are performed for many different companies, and there are many types of them.

Types of Penetration Tests

  • Web Application Penetration Testing
  • Network Penetration Testing
  • Mobile Penetration Testing
  • DOS/DDoS Penetration Testing
  • Wireless Penetration Testing
  • Social Engineering Penetration Testing