Penetraciono testiranje (pen testing) je autorizirano, simulirano napadanje sustava kako bi se pronašle iskorištive ranjivosti prije nego što to učine pravi napadači — etički hakeri aktivno pokušavajući provaliti. Pruža realističku procjenu sigurnosti izvan automatizirane analize.
Što je pen testing
PENETRATION TESTING = AUTHORIZED simulated attacks on a system to find real, exploitable
vulnerabilities:
→ ethical hackers / security pros actively try to BREAK IN (think and act like attackers)
→ goes beyond automated scanning → finds complex, chained, and logic vulnerabilities
→ AUTHORIZED and scoped (legal, agreed boundaries) — unlike real attacks
→ "How would a real attacker compromise this, and what could they reach?"
