Design and Implementation of an XML-Based Penetration Testing System

摘要

According to the low efficiency of system testing, the longer test cycle, the single form of the test results, no standardized documents of tested results and other drawbacks of the traditional penetration testing system, this paper design and implement of an XML-based penetration testing system. The system uses SNMP, PING, Telnet and other ways to explore resource, is based on OVAL, CVE to assess vulnerability, and finally realize the function of penetration testing combining with the strategy of penetration testing. Data is transmitted by XML format in whole system, and the tested results are shown in XML format ultimately. The system can improve test efficiency, reduce cycle time, make the tested results performance-rich and unified, and the system is cross-platform, uniformity and scalability.