S\u0131zma testi (pentest), sistemlerdeki, a\u011flardaki, uygulamalardaki veya fiziksel tesislerdeki g\u00fcvenlik a\u00e7\u0131klar\u0131n\u0131 sistematik olarak istismar etmeye \u00e7al\u0131\u015fma prati\u011fidir\u2014zay\u0131fl\u0131klar\u0131 rakipler tespit etmeden \u00f6nce belirlemek i\u00e7in k\u00f6t\u00fc niyetli bir sald\u0131rgan\u0131n eylemlerini sim\u00fcle eder. Pentest’ler tipik olarak \u00f6zelle\u015fmi\u015f g\u00fcvenlik firmalar\u0131 (veya i\u00e7 ekipler) taraf\u0131ndan kontroll\u00fc, yetkili ko\u015fullar alt\u0131nda y\u00fcr\u00fct\u00fcl\u00fcr.<\/p>\n
B\u00fcy\u00fck kategoriler \u015funlar\u0131 i\u00e7erir: a\u011f s\u0131zma testi (harici ve dahili a\u011f sald\u0131r\u0131 y\u00fczeyleri), web uygulama testi (\u00f6zel uygulamalarda OWASP Top 10 a\u00e7\u0131klar\u0131), mobil uygulama testi, bulut s\u0131zma testi (AWS\/Azure\/GCP yanl\u0131\u015f yap\u0131land\u0131rmalar\u0131), kablosuz a\u011f testi, sosyal m\u00fchendislik (phishing sim\u00fclasyonlar\u0131, fiziksel eri\u015fim giri\u015fimleri), API testi ve giderek artan bi\u00e7imde AI\/LLM<\/a> red-team testi.<\/p>\n Standartla\u015ft\u0131r\u0131lm\u0131\u015f metodolojiler pentest’leri y\u00f6nlendirir: OWASP Web G\u00fcvenlik Test K\u0131lavuzu, PTES (S\u0131zma Testi Y\u00fcr\u00fctme Standard\u0131), NIST SP 800-115 ve OSSTMM. Tipik bir g\u00f6rev \u015fu ad\u0131mlar\u0131 izler: kapsam belirleme ve g\u00f6rev kurallar\u0131, ke\u015fif ve bilgi toplama, a\u00e7\u0131k tan\u0131mlama, istismar giri\u015fimleri, istismar sonras\u0131 (ayr\u0131cal\u0131k y\u00fckseltme, yanal hareket), raporlama (d\u00fczeltme rehberli\u011fiyle \u00f6nem derecesi puanlanm\u0131\u015f bulgular) ve d\u00fczeltmeden sonra yeniden test.<\/p>\n Pentest’ler bir\u00e7ok \u00e7er\u00e7eve alt\u0131nda gerekli veya beklenir: SOC 2<\/a> ve ISO 27001<\/a> tipik olarak y\u0131ll\u0131k pentest bekler; PCI-DSS kart sahibi veri ortamlar\u0131n\u0131n d\u00fczenli pentest’ini gerektirir; NIS2<\/a> temel kurulu\u015flar i\u00e7in g\u00fcvenlik testi gerektirir; bir\u00e7ok kurumsal m\u00fc\u015fteri sat\u0131c\u0131 g\u00fcvenlik incelemelerinin bir par\u00e7as\u0131 olarak pentest gerektirir. Maliyetler b\u00fcy\u00fck \u00f6l\u00e7\u00fcde de\u011fi\u015fir\u2014k\u00fc\u00e7\u00fck kapsaml\u0131 testler i\u00e7in 5K-10K dolardan karma\u015f\u0131k kurumsal g\u00f6revler i\u00e7in 50K+ dolara kadar.<\/p>\n","protected":false},"excerpt":{"rendered":" TLDR: S\u0131zma testi (pentest), sistemlerdeki, a\u011flardaki, uygulamalardaki veya fiziksel tesislerdeki g\u00fcvenlik a\u00e7\u0131klar\u0131n\u0131 sistematik olarak istismar etmeye \u00e7al\u0131\u015fma prati\u011fidir\u2014zay\u0131fl\u0131klar\u0131 rakipler tespit etmeden \u00f6nce belirlemek i\u00e7in k\u00f6t\u00fc niyetli bir sald\u0131rgan\u0131n eylemlerini sim\u00fcle eder. Pentest’ler tipik olarak \u00f6zelle\u015fmi\u015f g\u00fcvenlik firmalar\u0131 (veya i\u00e7 ekipler) taraf\u0131ndan kontroll\u00fc, yetkili ko\u015fullar alt\u0131nda y\u00fcr\u00fct\u00fcl\u00fcr. S\u0131zma Testi T\u00fcrleri B\u00fcy\u00fck kategoriler \u015funlar\u0131 i\u00e7erir: a\u011f s\u0131zma […]<\/p>\n","protected":false},"author":4,"featured_media":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","format":"standard","meta":{"footnotes":""},"categories":[],"class_list":["post-11971","term","type-term","status-publish","format-standard","hentry"],"_links":{"self":[{"href":"https:\/\/virconlegal.com\/tr\/wp-json\/wp\/v2\/term\/11971","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/virconlegal.com\/tr\/wp-json\/wp\/v2\/term"}],"about":[{"href":"https:\/\/virconlegal.com\/tr\/wp-json\/wp\/v2\/types\/term"}],"author":[{"embeddable":true,"href":"https:\/\/virconlegal.com\/tr\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/virconlegal.com\/tr\/wp-json\/wp\/v2\/comments?post=11971"}],"version-history":[{"count":1,"href":"https:\/\/virconlegal.com\/tr\/wp-json\/wp\/v2\/term\/11971\/revisions"}],"predecessor-version":[{"id":12299,"href":"https:\/\/virconlegal.com\/tr\/wp-json\/wp\/v2\/term\/11971\/revisions\/12299"}],"wp:attachment":[{"href":"https:\/\/virconlegal.com\/tr\/wp-json\/wp\/v2\/media?parent=11971"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/virconlegal.com\/tr\/wp-json\/wp\/v2\/categories?post=11971"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}Metodoloji ve Standartlar<\/h3>\n
D\u00fczenleyici ve \u0130\u015f Gereksinimleri<\/h3>\n