# A Systematic Literature Review on Penetration Testing in Networks: Future Research Directions
## 3 Literature Review
### Wireless Local Area Network Penetration Testing  
We live in an age of digital transformation that relies on wires and wireless networks to communicate and share information between devices. Network-based technology has become an integral part of government and private organizations to organize simple operations in different fields such as education, healthcare, purchasing, sales, manufacturing, and other areas. In addition, this technology is an integral part of individuals' daily lives, such as using social media, which depends on a network. This leads to interactivity and efficiency at work, but also poses many risks when attackers target the networks. The security attacks carried out by the attackers create a large amount of damage that can lead to the complete or partial destruction of the network infrastructure, which brings the work of organizations to a halt and causes financial losses that can go as far as bankruptcy. Wireless networks, also called WLANs, are one of the most popular types of networks today. Wireless networks have the advantage over current wired technologies in that they are convenient. As a result, attackers can target these networks, and this is why security issues are considered one of the most important and significant problems with wireless networks. Therefore, authentication protocols have been developed to prevent unauthorized access to wireless networks. There are two different types of wireless networks: wired equivalent privacy (WEP) and Wi-Fi protected access (WPA), and these are the most common encryption technologies. There are vulnerabilities in the WPA2 protocol that secures all modern protected Wi-Fi networks. According to [PERSON], [PERSON] et al. [13], there are vulnerabilities in the WPA2 protocol that secures all modern protected Wi-Fi networks. Attackers have attempted to exploit these vulnerabilities using key recovery attacks (KRACKs) to read information that was previously thought to be securely encrypted. This can be abused to steal sensitive information such as credit card numbers, passwords, chat messages, emails, photos, etc. To mitigate this threat, security plans must be in place to prevent, detect, and respond to it. One way to mitigate security risks in infrastructure is through network penetration testing. The concept of network penetration testing is very important because it performs the defence-in-depth process and takes preventive measures to protect networks from intruders. Therefore, network penetration testers must think the same way as criminals and perform the same tasks to close the vulnerabilities. [PERSON], [PERSON] et al. [14] performed penetration tests in IEEE 802.11 encryption protocols that define WLAN properties. They used various tools and technologies to perform attacks on IEEE 802.11 encryption protocols. These tools and technologies are Wi-Fi adapters, Raspberry Pi kit, Wi-Fi routers, Raspberry Pi (power adapter), Bluetooth adapters, Kali Linux, Aircrack-ng, Airodump-ng, and Airplay-ng. They performed attacks on WEP by intercepting all packets from the target access point (AP) and cracked the WEP key. On WEP2, they performed passphrase cracking from the recorded four-way handshake and KRACK attack, and on WEP3, they performed a downgrade attack. [PERSON], [PERSON] et al. [15] designed and implemented a system called CheckShake to passively detect anomalies in the handshake of Wi-Fi security protocols, particularly WPA2, including KRACK attacks. This system works without decrypting traffic and aims to develop a fully automated tool to detect KRACK attacks. They found that CheckShake can achieve an accuracy of 93.39% and a false positive rate of 5.08%. By formally modeling and evaluating the pre-authentication phase in accordance with the IEEE 802.11-2020 roll up, [PERSON], [PERSON] et al. [16] have addressed one of the gaps in the formal analysis of the Wi-Fi protocol. This will enable them to prevent future large-scale security breaches such as KRACK attacks.