基于Python的自动化渗透工具的设计与实现

ABSTRACTIn recent years,millions of governments and enterprises around theworld have encountered different degrees of network attacks,and thesituation of network security has become more and more serious.Penetration test is a method to evaluate the information security of thetarget.At present,there are still many problems in this industry,such asthe high price of security service industry,the huge shortage of securitytalents,the tedious steps and low efficiency in penetration test.At present,the penetration testing tools still have many problems,such as lowautomation,learning cost expensively and difficult to expand functions.In order to solve the above problems,this paper designs anautomatic penetration testing tool based on python programminglanguage.The main group is SRC white hats who are fond ofvulnerability mining and professional penetration testers.This tool willautomatically simulate the process of manual penetration test,and carryout step-by-step information collection,vulnerability detection,reportoutput and other steps for the target website,and at the same time oftesting the website security,print out the relevant information in real time.Finally,according to the intention of the testers,the exploitation of thevulnerabilities can greatly reduce the workload of the penetration testersin each stage of the penetration test,and facilitate the testers to completethe typical penetration test tasks quickly.Key words:automatic penetration test vulnerability scanning