With the rapid development of the Internet,more and more attention is paid to network security,and network penetration attack testing is an important means to assess the risk of network security.In this paper,network penetration attack testing technology(hereinafter referred to as penetration testing)is studied.Firstly,the concept and purpose of penetration testing are introduced.Secondly,the methods of penetration and test are classified and described in detail,including external penetration test,internal penetration test,blind penetration test and directional penetration test.Finally,the implementation process of penetration test is analyzed,including information collection,vulnerability scanning,authority promotion,password cracking,further penetration and trace,trace removal and report writing.