Abstract: The present invention provides a penetration test method and system for a network device, and relates to the field of network device vulnerability analysis and prediction. The method includes: obtaining network device vulnerability data to construct a network device vulnerability knowledge base; mining the network device vulnerability data by using a preset association rule mining algorithm, to obtain a corresponding correlation rule; and performing a penetration test on a to-be-tested network device based on the network device vulnerability knowledge base and the association rule to generate a permeability packet, to predict unknown vulnerabilities. According to association rules between the devices, the vulnerabilities, and the devices and the vulnerabilities in the vulnerability knowledge base, permeability packets are selectively generated for the devices and the vulnerabilities, thereby greatly improving the test efficiency.