AI recommendation penetration testing tools for password attacks: random forest

Rozman, Nurulasyiqin and Saad, Shahadan (2025) AI recommendation penetration testing tools for password attacks: random forest. Progress in Computer and Mathematics Journal (PCMJ), 2. pp. 75-86. ISSN 3030-6728

Official URL: https://fskmjebat.uitm.edu.my/pcmj/

Abstract

This project developed an AI-based recommendation system using the Random Forest algorithm to address the complexities of selecting appropriate penetration testing tools for password attacks. Penetration testing, crucial for evaluating network and system security, faces challenges due to the variety of tools, especially for less experienced pentesters. The project's objective was to automate tool selection based on user-defined requirements, improving efficiency and effectiveness. Guided by the Extreme Programming (XP) methodology, the AI system analyzed attributes and requirements to provide personalized tool recommendations, such as Nmap, Medusa, Hydra, and Wfuzz, based on password attack types, targeted platforms, software types, hash types, and pentest goals. Implemented using Django and SQLite, the system reduced manual efforts and specialized knowledge needed for tool selection, allowing pentesters to focus on complex security tasks. The project's seamless integration with existing workflows demonstrated its practical capability and highlighted AI's potential in optimizing security practices, making pentesting more accessible for organizations with limited resources and expertise. By shifting focus from repetitive tasks to higher-level security analysis, the project enhanced organizational security against evolving cyber threats and showcased AI's role in improving cybersecurity practices.

Metadata

Item Type: Article
Creators:
Creators
Email / ID Num.
Rozman, Nurulasyiqin
nurulasyiqinbintirozman@gmail.com
Saad, Shahadan
shahadan@fskm.uitm.edu.my
Subjects: T Technology > TK Electrical engineering. Electronics. Nuclear engineering > Telecommunication
T Technology > TK Electrical engineering. Electronics. Nuclear engineering > Internet Protocol multimedia subsystem. Multimedia communications
Divisions: Universiti Teknologi MARA, Melaka > Jasin Campus > Faculty of Computer and Mathematical Sciences
Journal or Publication Title: Progress in Computer and Mathematics Journal (PCMJ)
ISSN: 3030-6728
Volume: 2
Page Range: pp. 75-86
Keywords: Pentesting, Extreme programming, Django, SQLite
Date: 2025
URI: https://ir.uitm.edu.my/id/eprint/126865
Edit Item
Edit Item

Download

[thumbnail of 126865.pdf] Text
126865.pdf

Download (959kB)

ID Number

126865

Indexing

Statistic

Statistic details