| As the application of network gets more and more extensive, the value of network information is more and more valuable and the attack tools and technology for computer network are improving better, the computer network faces the threat of network attacks all the time.So the network security is a major area of network research being paid closer and closer attention, more and more researchers are studying how to guarantee the network security.Penetration testing is one of the important means in security of network which can be found the potential safety by executing test. Another, as it provides the hidden danger of evidence, help users to evaluate the network, and provide the safety standards of enterprise information, its significance is great.This paper analyses and researches deeply focusing on the research on the penetration testing,, being based on this, it gives the path on attacks,this paper implemented the penetration testing based on the path on attacks, it also describes the application and importance of penetration testing in the area of network security.This paper includes the following sections:1 This paper analyses the main technology about all phases in the penetration testing and studies the technology about the testing. This paper summarizes and classifies the usual tools for the penetration testing.2 This paper refines the phases in the penetration testing, designs the penetration testing based on the attacks on the path and also researches more about the penetration testing. This paper implements the penetration testing based on the attacks on the path, which makes the results of testing more precise.3 This paper analyses the risk in the penetration testing and some measures are proposed to avoid it. |