Penetration testing (pen testing) ialah penyerangan simulasi yang dibenarkan ke atas sistem untuk mencari kelemahan yang boleh dieksploitasi sebelum penyerang sebenar melakukannya — hacker beretika secara aktif cuba menceroboh masuk. Ia menyediakan penilaian keselamatan yang realistik melampaui pengimbasan automatik.
Apakah pen testing
PENETRATION TESTING = AUTHORIZED simulated attacks on a system to find real, exploitable
vulnerabilities:
→ ethical hackers / security pros actively try to BREAK IN (think and act like attackers)
→ goes beyond automated scanning → finds complex, chained, and logic vulnerabilities
→ AUTHORIZED and scoped (legal, agreed boundaries) — unlike real attacks
→ "How would a real attacker compromise this, and what could they reach?"
