Análise de pentest como ferramenta para segurança da informação

Abstract

This work aims to present the information security landscape, describing its foundations and principles, with a primary focus on penetration testing (pentest). It will cover the concepts, methodologies, and tools used during the process. This study also addresses the legal limitations involved in this process, which consists of simulating an attack. The development of this work will be based on the analysis of the methods and various tools used in conducting pentests. With the digitization of information, pentesting proves to be an essential tool for validating already implemented security processes, assessing their effectiveness and identifying potential vulnerabilities. Pentesting is characterized as a preventive process that seeks to identify the target's vulnerabilities through an attack simulation, with the main objective of identifying and analyzing these weaknesses. During the procedure, reports are generated for each phase, which will ultimately compose the final report, describing the identified issues and proposing solutions to address them. Throughout this work, the procedures and methods used in performing pentests will be presented and described, along with a description of the tools and functionalities of each. Additionally, the results obtained through the practical application of the concepts and techniques described in this study will also be presented.