CN117177245A - Vehicle WIFI security testing methods, systems and equipment - Google Patents

Abstract

The application discloses a WIFI safety test method, a system and equipment for a vehicle, wherein the method is applied to test equipment and comprises the following steps: establishing WIFI connection with the tested vehicle; acquiring a plurality of test instructions, transmitting the plurality of test instructions to a tested vehicle based on WIFI connection, so that the tested vehicle executes the plurality of test instructions, and performing security test on WIFI of the tested vehicle to obtain a test result; receiving a test result sent by a tested vehicle; if the test result represents that the WIFI of the tested vehicle has potential safety hazards, generating a vulnerability test report according to the test result, wherein the vulnerability test report comprises vulnerability information of the vulnerability of the WIFI of the tested vehicle and a vulnerability modification suggestion. The method and the device solve the technical problem of low WIFI safety test efficiency of the vehicle.

Description

Vehicle WIFI security testing methods, systems and equipment

Technical field

The invention belongs to the technical field of information security testing, and in particular relates to a vehicle WIFI security testing method, system and equipment.

Background technique

With the development of intelligent network-connected vehicles, vehicles are facing more and more information security attack risks. Criminals can easily obtain personal information and user information stored on the vehicle by illegally invading the vehicle's WIFI (Wireless Fidelity, wireless network). Data can even control and hijack vehicles. Among the technologies disclosed at this stage, they only involve the testing content and connection methods of vehicle WIFI information security. There is no solution that can conduct integrity testing and verification of vehicle WIFI information security, including completing the construction of the test environment and test execution. , test analysis, and test recording functions require manual confirmation and other operations, and each step is performed step by step, which makes the test process and result analysis of vehicle information security testing take too long. Therefore, the low efficiency of vehicle WIFI security testing is a technical problem that needs to be solved urgently.

Contents of the invention

Embodiments of the present invention provide a vehicle WIFI security testing method, system and equipment, which solves the technical problem of low efficiency in vehicle WIFI security testing.

In a first aspect, embodiments of the present invention provide a vehicle WIFI security testing method, which is applied to testing equipment. The method includes: establishing a WIFI connection with the vehicle under test; obtaining multiple test instructions, and converting all test instructions based on the WIFI connection. Send the multiple test instructions to the vehicle under test, so that the vehicle under test executes the multiple test instructions, conduct a safety test on the WIFI of the vehicle under test, and obtain test results; receive the vehicle under test The test results sent; if the test results indicate that the WIFI of the vehicle under test has security risks, a vulnerability test report is generated according to the test results, and the vulnerability test report includes information on the WIFI of the vehicle under test. Vulnerability information for the vulnerability and suggestions for modifications to said vulnerability.

In conjunction with the first aspect of the present invention, in some embodiments, sending the plurality of test instructions to the vehicle under test based on the WIFI connection includes: sending one test instruction of the plurality of test instructions. to the vehicle under test, so that the vehicle under test performs the current test of the WIFI security test; in response to receiving the current test completion signal fed back by the vehicle under test, select the next test from the multiple test instructions Instructions are sent to the vehicle under test.

In conjunction with the first aspect of the present invention, in some embodiments, sending the multiple test instructions to the vehicle under test based on the WIFI connection includes: sending the multiple test instructions at preset time intervals. Instructions are sent to the vehicles under test one by one, so that the vehicles under test perform WIFI security testing in the order in which they are received.

In conjunction with the first aspect of the present invention, in some embodiments, sending the multiple test instructions to the vehicle under test based on the WIFI connection includes: merging the multiple test instructions to obtain a test instruction set , and send the test instruction set to the vehicle under test.

In conjunction with the first aspect of the present invention, in some embodiments, obtaining multiple test instructions includes: obtaining multiple test contents; adding executable commands to the multiple test contents to obtain the multiple test instructions.

Combined with the first aspect of the present invention, in some embodiments, the plurality of test contents include at least two of the following: protocol stack vulnerability test contents; weak encryption algorithm test contents; denial of service attack test contents; weak password test contents; port Open test content; and phishing attack test content.

In conjunction with the first aspect of the present invention, in some embodiments, generating a vulnerability test report based on the test results includes: obtaining multiple vulnerabilities in the WIFI of the vehicle under test based on the test results; Score the multiple vulnerabilities according to the hazard scoring principle set up to obtain the vulnerability levels corresponding to the multiple vulnerabilities; obtain the vulnerability test report based on the multiple vulnerabilities and the vulnerability level corresponding to each vulnerability.

In a second aspect, embodiments of the present invention provide a vehicle WIFI security testing method, which is applied to a vehicle under test, including: receiving and responding to a WIFI connection request sent by a test device, so that the test device obtains multiple test instructions. Finally, send the multiple test instructions based on the WIFI connection; receive the multiple test instructions; execute the multiple test instructions, conduct a safety test on the WIFI of the vehicle under test, and obtain the test results; The test results are sent to the test equipment, so that if the test results indicate that there is a security risk in the WIFI of the vehicle under test, the test equipment generates a vulnerability test report based on the test results.

In a third aspect, embodiments of the present invention provide a vehicle WIFI security testing system. The system includes a vehicle under test and a testing device; the testing device is used to establish a WIFI connection with the vehicle under test; the tested vehicle The test vehicle is configured to receive and respond to the WIFI connection request sent by the test device; the test device is also used to obtain multiple test instructions and send the multiple test instructions to the vehicle under test based on the WIFI connection. ; The vehicle under test is also used to receive the multiple test instructions; execute the multiple test instructions, conduct a safety test on the WIFI of the vehicle under test, and obtain test results; send the test results to the vehicle under test; The test equipment; the test equipment is also used to receive the test results sent by the vehicle under test; if the test results indicate that there is a security risk in the WIFI of the vehicle under test, generate a vulnerability test according to the test results Report, the vulnerability test report includes vulnerability information on the vulnerabilities existing in the WIFI of the vehicle under test and suggestions for modifying the vulnerabilities.

In a fourth aspect, embodiments of the present invention provide an electronic device, including: a memory, a processor, and a computer program stored in the memory and executable on the processor. When the processor executes the computer program, the first The method described in any one of the aspects or the second aspect.

One or more technical solutions provided by embodiments of the present invention at least achieve the following technical effects or advantages:

The embodiment of the present invention establishes a WIFI connection with the vehicle under test; obtains multiple test instructions, and sends the multiple test instructions to the vehicle under test based on the WIFI connection, so that the vehicle under test executes the multiple test instructions, and the WIFI of the vehicle under test is Conduct security tests and obtain test results; receive test results sent by the vehicle under test; if the test results indicate that the WIFI of the vehicle under test has security risks, generate a vulnerability test report based on the test results. The vulnerability test report includes information on the WIFI of the vehicle under test. Vulnerability information of the vulnerability and suggestions for modifying the vulnerability. Send multiple test instructions to the vehicle under test through the test equipment, so that the vehicle under test executes multiple test instructions, and generates a vulnerability test report based on the test results, avoiding manual confirmation and other operations, and shortening the testing process of vehicle information security testing and the time required for result analysis. Therefore, the efficiency of vehicle WIFI security testing is improved.

At the same time, the automation level of vehicle WIFI security testing is improved.

Description of drawings

In order to more clearly illustrate the technical solutions in the embodiments of the present invention, the drawings needed to be used in the description of the embodiments will be briefly introduced below. Obviously, the drawings in the following description are some embodiments of the present invention. For those of ordinary skill in the art, other drawings can also be obtained based on these drawings without exerting creative efforts.

Figure 1 is a schematic diagram of a vehicle WIFI security test system in an embodiment of the present invention;

Figure 2 is a flow chart of a vehicle WIFI security testing method in an embodiment of the present invention;

Figure 3 is a schematic structural diagram of an electronic device in an embodiment of the present invention.

Detailed ways

The technical solutions in the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings in the embodiments of the present invention. Obviously, the described embodiments are only some of the embodiments of the present invention, rather than all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those of ordinary skill in the art without making creative efforts fall within the scope of protection of the present invention.

Descriptions such as "first", "second", etc. in the present invention are for descriptive purposes only and cannot be understood as indicating or implying their relative importance or implicitly indicating the number of indicated technical features. Therefore, features defined as "first" and "second" may explicitly or implicitly include at least one of these features. In addition, the technical solutions in various embodiments can be combined with each other, but it must be based on the realization by those of ordinary skill in the art. When the combination of technical solutions is contradictory or cannot be realized, it should be considered that such a combination of technical solutions does not exist. , nor within the protection scope required by the present invention.

An embodiment of the present invention provides a vehicle WIFI security testing system. As shown in Figure 1, the system includes a vehicle under test and a testing device; the testing device is used to establish a WIFI connection with the vehicle under test; the vehicle under test is used to receive and In response to the WIFI connection request sent by the test equipment; the test equipment is also used to obtain multiple test instructions, and sends the multiple test instructions to the vehicle under test based on the WIFI connection; the vehicle under test is also used to receive multiple test instructions; execute Multiple test instructions are used to conduct security tests on the WIFI of the vehicle under test and obtain test results; the test results are sent to the test equipment; the test equipment is also used to receive test results sent by the vehicle under test; if the test results represent the There are security risks in WIFI. A vulnerability test report is generated based on the test results. The vulnerability test report includes vulnerability information on the vulnerabilities in the WIFI of the vehicle being tested and suggestions for modifying the vulnerabilities.

The embodiment of the present invention provides a vehicle WIFI security testing method, which is applied to testing equipment. Referring to Figure 2, the method includes the following steps S101 to S104:

S101: Establish a WIFI connection with the vehicle under test.

It can be understood that the vehicle under test receives and responds to the WIFI connection request sent by the test device, and establishes a WIFI connection between the test device and the vehicle under test.

S102: Obtain multiple test instructions, send multiple test instructions to the vehicle under test based on WIFI connection, so that the vehicle under test executes multiple test instructions, conduct a safety test on the WIFI of the vehicle under test, and obtain test results.

It can be understood that the method of obtaining multiple test instructions includes the following steps: obtaining multiple test contents; adding executable commands to the multiple test contents to obtain multiple test instructions.

Among them, multiple test contents include at least two of the following: protocol stack vulnerability test content, weak encryption algorithm test content, denial of service attack test content, weak password test content, port opening test content, and phishing attack test content.

Specifically, the protocol stack vulnerability testing content can be downloading the WIFI protocol stack vulnerability detection script from the official website of CVE (Common Vulnerabilities & Exposures) or CNNVD (China National Vulnerability Database of Informatio, China National Information Security Vulnerability Database). The weak encryption algorithm test content can be the built-in WIFI protocol detection function and identification of WIFI encryption algorithms. The denial of service attack test content can be a DOS attack script with built-in WIFI. The weak password test content can be a built-in password dictionary library and a script for cracking WIFI passwords. The content of the port open test can be a script that scans the WIFI port and determines the open port. The content of the phishing attack test can be a script that simulates a similar name and encryption method to the connected mobile phone WIFI network, connects to the vehicle WIFI, and requests sensitive information or personal data from the vehicle.

It can be understood that sending multiple test instructions to the vehicle under test based on WIFI connection can include multiple implementation methods, which are explained below:

Implementation method one:

Send one test instruction of multiple test instructions to the vehicle under test, so that the vehicle under test performs the current test of the WIFI security test; in response to receiving the current test completion signal fed back by the vehicle under test, select the next test instruction from the multiple test instructions A test command is sent to the vehicle under test.

It can be understood that the method of selecting the next test command from multiple test commands to send to the vehicle under test may be to send it in a preset order, or to send it randomly. Waiting to receive the current test completion signal before sending the next command can ensure the orderly conduct of the vehicle's WIFI security test and improve the credibility of the test results.

Implementation method two:

According to the preset time interval, multiple test instructions are sent to the vehicle under test one by one, so that the vehicle under test performs WIFI security testing in the order of reception.

It should be noted that setting a preset time interval can ensure the orderly conduct of WIFI security tests on vehicles and improve the credibility of test results.

Implementation method three:

Multiple test instructions are combined to obtain a test instruction set, and the test instruction set is sent to the vehicle under test.

It should be noted that merging multiple test instructions to obtain a test instruction set without waiting for the current test to complete before sending can improve test efficiency and avoid too long test times.

It can be understood that after the test equipment sends multiple test instructions to the vehicle under test based on the WIFI connection, the vehicle under test receives the multiple test instructions; executes the multiple test instructions to perform a safety test on the WIFI of the vehicle under test, and obtains the test Results; sends the test results to the test device.

S103: Receive the test results sent by the vehicle under test.

S104: If the test results indicate that the WIFI of the vehicle under test has security risks, generate a vulnerability test report based on the test results. The vulnerability test report includes vulnerability information about the vulnerabilities in the WIFI of the vehicle under test and suggestions for modifying the vulnerabilities.

It should be noted that vulnerability information includes specific vulnerability types and their corresponding vulnerability levels.

It can be understood that the method of generating a vulnerability test report based on the test results includes steps S1041 to S1043:

S1041: Based on the test results, obtain multiple vulnerabilities in the WIFI of the vehicle under test.

It can be understood that the vulnerabilities identified in step S1041 include the following situations:

If the obtained vulnerability information and characteristic values match those of the protocol stack vulnerability, it is determined to be a protocol stack vulnerability. The vulnerability level can be consistent with the CVE or CNNVD official website.

If the weak encryption algorithm is the WPA algorithm, it is determined that a weak encryption vulnerability exists. If the weak encryption algorithm is the WPA2 algorithm, WPA2-PSK algorithm, or WPA3 algorithm, it is determined that there is no weak encryption vulnerability.

If WIFI cannot communicate normally when suffering a denial of service attack, it is determined that a denial of service attack vulnerability exists. If WIFI can communicate normally when suffering a denial of service attack, it is determined that there is no denial of service attack vulnerability.

If the password dictionary is used for cracking and the cracking is successful, it is determined that a weak password vulnerability exists. If the password dictionary is used for blasting and the blasting fails, it is determined that there is no weak password vulnerability. Among them, the password dictionary is composed of commonly used passwords, including pure numbers, birthdays, names, etc., including publicly available password dictionaries, customized password dictionaries and leaked password libraries.

If you check that the WIFI module has opened dangerous ports, it is determined that there is a port open vulnerability. Among them, common dangerous ports: management port, which provides specific ports for management and configuration of WIFI devices, such as 80 (HTTP) and 443 (HTTPS). If these ports are not configured correctly or abused by attackers, the device may be damaged. unauthorized access and manipulation. Open ports. Some WIFI networks may open some ports for specific services or applications, such as FTP (port 21), Telnet (port 23), etc. These open ports may be attacked without appropriate security measures. used by attackers to conduct unauthorized access or attacks. File sharing port, some WIFI networks may have the file sharing function enabled, such as SMB (port 445) or AFP (port 548). Failure to properly configure or secure these file sharing ports can lead to unauthorized network access and file disclosure. VPN Ports, Virtual Private Networks (VPNs) often use specific ports for secure communication. If VPN ports on Wi-Fi devices are not properly configured or protected, it can lead to data leakage or attacks on the VPN connection. UPnP port, Universal Plug and Play Protocol (UPnP) can help devices automatically configure networks and port forwarding. However, UPnP ports that are not properly configured and protected can become an entry point for attackers to enter the network and attack other devices.

Simulate the similar name and encryption method of the connected mobile phone WIFI network, connect to the vehicle WIFI, and request sensitive information or personal data from the vehicle. If the sensitive information or personal data of the vehicle can be obtained, it is determined that there is a phishing attack vulnerability. If sensitive vehicle information or personal data cannot be obtained, it is determined that there is no phishing attack vulnerability.

S1042: Score multiple vulnerabilities according to the preset hazard scoring principles to obtain vulnerability levels corresponding to multiple vulnerabilities.

It can be understood that the method of scoring multiple vulnerabilities according to the preset hazard scoring principles may be: scoring multiple vulnerabilities based on basic scores, time scores, and environment scores.

Specifically, Base: represents the original attribute of the vulnerability, which is not affected by time and environment, and is measured by Exploitability and Impact. The basic scoring principles are as follows: First, each security vulnerability must be evaluated independently, and cross-influence with other security vulnerabilities cannot be considered. Second, only the direct impact of vulnerabilities is considered, and indirect impacts are not considered. Third, assess the impact of the vulnerability in terms of commonly used permissions. Fourth, the vulnerability is scored according to its greatest impact. Temporal: reflects the impact of the vulnerability over time without being affected by the environment. For a simple example, as the patches of a vulnerable software continue to increase, the CVSS (Common Vulnerability Scoring System) of the vulnerability will The score will be reduced accordingly. Environmental score (Environmental): represents the score of execution vulnerabilities in a specific environment, allowing the score to be increased or decreased according to corresponding business needs. Often environmental scores require evaluation and calculation by the end user. Scoring fields are used to record or transmit CVSS quantitative information in a concise form. Scoring fields should be scored in the order shown in Table 1 and Table 2. Among them, the basics are divided into mandatory options, and the time points and environment are divided into optional options. Each metric value (Metric Value) has an associated constant (Numerical Value), which is used in the formula.

Table 1:

Table 2:

Through the above method, multiple vulnerabilities are scored. Then, the vulnerability levels corresponding to multiple vulnerabilities based on the scores can be obtained as shown in Table 3. Vulnerability scores range from 0 to 10.0 and are divided into five levels: critical, high, medium, low, and none.

table 3:

grade score none 0 low risk 0.1-3.9 medium risk 4-6.9 high risk 7-8.9 Extremely dangerous 9-10

S1043: Obtain a vulnerability test report based on multiple vulnerabilities and the vulnerability level corresponding to each vulnerability.

The embodiment of the present invention establishes a WIFI connection with the vehicle under test; obtains multiple test instructions, and sends the multiple test instructions to the vehicle under test based on the WIFI connection, so that the vehicle under test executes the multiple test instructions, and the WIFI of the vehicle under test is Conduct security tests and obtain test results; receive test results sent by the vehicle under test; if the test results indicate that the WIFI of the vehicle under test has security risks, generate a vulnerability test report based on the test results. The vulnerability test report includes information on the WIFI of the vehicle under test. Vulnerability information of the vulnerability and suggestions for modifying the vulnerability. Send multiple test instructions to the vehicle under test through the test equipment, so that the vehicle under test executes multiple test instructions, and generates a vulnerability test report based on the test results, avoiding manual confirmation and other operations, and shortening the testing process of vehicle information security testing and the time required for result analysis. Therefore, the efficiency of vehicle WIFI security testing is improved. At the same time, the automation level of vehicle WIFI security testing is improved.

Based on the same inventive concept, an embodiment of the present invention provides a vehicle WIFI security testing method, which is applied to the vehicle under test. The method includes steps S201 to S204:

S201: Receive and respond to the WIFI connection request sent by the test device, so that after the test device obtains multiple test instructions, it sends multiple test instructions based on the WIFI connection.

S202: Receive multiple test instructions.

S203: Execute multiple test instructions, conduct a security test on the WIFI of the vehicle under test, and obtain the test results.

S204: Send the test results to the test equipment, so that if the test results indicate that there is a security risk in the WIFI of the vehicle under test, the test equipment generates a vulnerability test report based on the test results.

It should be understood that, in the embodiment of the present invention, for more implementation details of the WIFI security testing method applied to the vehicle under test, please refer to the aforementioned WIFI security testing method applied to the vehicle testing equipment. For the sake of simplicity of the description, here No longer.

Based on the same inventive concept, an embodiment of the present invention also provides an electronic device, as shown in Figure 3, including a memory 304, a processor 302, and a computer program stored in the memory 304 and executable on the processor 302. The processor 302 Execute the program to implement the WIFI security testing method of the vehicle applied to the test device or implement the steps described in any embodiment of the WIFI security testing method applied to the vehicle being tested.

Among them, in Figure 3, the bus architecture (represented by bus 300), bus 300 may include any number of interconnected buses and bridges, bus 300 will include one or more processors represented by processor 302 and memory 304. The various circuits of memory are linked together. Bus 300 may also link together various other circuits such as peripherals, voltage regulators, power management circuits, etc., which are all well known in the art and therefore will not be described further herein. Bus interface 305 provides an interface between bus 300 and receiver 301 and transmitter 303 . The receiver 301 and the transmitter 303 may be the same element, a transceiver, providing a unit for communicating with various other devices over a transmission medium. The processor 302 is responsible for managing the bus 300 and general processing, while the memory 304 may be used to store data used by the processor 302 in performing operations.

The embodiment of the present invention establishes a WIFI connection with the vehicle under test; obtains multiple test instructions, and sends the multiple test instructions to the vehicle under test based on the WIFI connection, so that the vehicle under test executes the multiple test instructions, and the WIFI of the vehicle under test is Conduct security tests and obtain test results; receive test results sent by the vehicle under test; if the test results indicate that the WIFI of the vehicle under test has security risks, generate a vulnerability test report based on the test results. The vulnerability test report includes information on the WIFI of the vehicle under test. Vulnerability information of the vulnerability and suggestions for modifying the vulnerability. Send multiple test instructions to the vehicle under test through the test equipment, so that the vehicle under test executes multiple test instructions, and generates a vulnerability test report based on the test results, avoiding manual confirmation and other operations, and shortening the testing process of vehicle information security testing and the time required for result analysis. Therefore, the efficiency of vehicle WIFI security testing is improved. At the same time, the automation level of vehicle WIFI security testing is improved.

The functionality described herein may be implemented in hardware, software executed by a processor, firmware, or any combination thereof. If implemented in software executed by a processor, the functions may be stored on or transmitted over as one or more instructions or code on a computer-readable medium. Other examples and implementations are within the scope and spirit of the invention and appended claims. For example, due to the nature of software, the functions described above may be implemented using software executed by a processor, hardware, firmware, hardwiring, or a combination of any of these. In addition, each functional unit can be integrated into one processing unit, or each unit can exist physically alone, or two or more units can be integrated into one unit.

In the several embodiments provided in this application, it should be understood that the disclosed technical content can be implemented in other ways. The device embodiments described above are only illustrative. For example, the division of the units may be a logical functional division. In actual implementation, there may be other division methods. For example, multiple units or components may be combined or may be Integrated into another system, or some features can be ignored, or not implemented. On the other hand, the coupling or direct coupling or communication connection between each other shown or discussed may be through some interfaces, and the indirect coupling or communication connection of the units or modules may be in electrical or other forms.

The units described as separate components may or may not be physically separated, and the components described as control devices may or may not be physical units, that is, they may be located in one place, or they may be distributed to multiple units. Some or all of the units can be selected according to actual needs to achieve the purpose of the solution of this embodiment.

If the integrated unit is implemented in the form of a software functional unit and sold or used as an independent product, it may be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present invention is essentially or contributes to the existing technology or all or part of the technical solution can be embodied in the form of a software product, and the computer software product is stored in a storage medium , including several instructions to cause a computer device (which can be a personal computer, a server or a network device, etc.) to execute all or part of the steps of the method described in various embodiments of the present invention. The aforementioned storage media include: U disk, read-only memory (ROM, Read-Only Memory), random access memory (RAM, Random Access Memory), mobile hard disk, magnetic disk or optical disk and other media that can store program code. .

The above are only examples of the present invention and are not intended to limit the present invention. For those skilled in the art, the present invention may have various modifications and changes. Any modifications, equivalent substitutions, improvements, etc. made within the spirit and principles of the present invention shall be included in the scope of the claims of the present invention.

Claims (10)

1. A vehicle WIFI security testing method, applied to testing equipment, characterized in that the method includes: Establish a WIFI connection with the vehicle under test; Acquire multiple test instructions, send the multiple test instructions to the vehicle under test based on the WIFI connection, so that the vehicle under test executes the multiple test instructions, and perform the WIFI on the vehicle under test Safety testing and obtaining test results; Receive the test results sent by the vehicle under test; If the test results indicate that there is a security risk in the WIFI of the vehicle under test, a vulnerability test report is generated according to the test results, and the vulnerability test report includes vulnerability information about the vulnerabilities in the WIFI of the vehicle under test and the Suggestions for modifying the vulnerability. 2. The WIFI security testing method of a vehicle according to claim 1, wherein the sending the plurality of test instructions to the vehicle under test based on the WIFI connection includes: Send one test instruction of the plurality of test instructions to the vehicle under test, so that the vehicle under test performs the current test of the WIFI security test; In response to receiving the current test completion signal fed back by the vehicle under test, a next test instruction is selected from the plurality of test instructions and sent to the vehicle under test. 3. The WIFI security testing method of a vehicle according to claim 1, wherein the sending the plurality of test instructions to the vehicle under test based on the WIFI connection includes: According to the preset time interval, the plurality of test instructions are sent to the vehicle under test one by one, so that the vehicle under test performs the WIFI security test in the order of reception. 4. The WIFI security testing method of a vehicle according to claim 1, wherein the sending the plurality of test instructions to the vehicle under test based on the WIFI connection includes: The multiple test instructions are combined to obtain a test instruction set, and the test instruction set is sent to the vehicle under test. 5. The vehicle WIFI security testing method according to claim 1, characterized in that said obtaining multiple test instructions includes: Get multiple test content; Add executable commands to the multiple test contents to obtain the multiple test instructions. 6. The vehicle WIFI security testing method according to claim 5, characterized in that the plurality of test contents include at least two of the following: Protocol stack vulnerability testing content; Weak encryption algorithm test content; Denial of service attack test content; Weak password test content; Port opening test content; and Phishing attack test content. 7. The vehicle WIFI security testing method according to claim 1, characterized in that generating a vulnerability test report based on the test results includes: Based on the test results, obtain multiple vulnerabilities in the WIFI of the vehicle under test; Score the multiple vulnerabilities according to preset hazard scoring principles to obtain vulnerability levels corresponding to the multiple vulnerabilities; Based on the multiple vulnerabilities and the vulnerability level corresponding to each vulnerability, the vulnerability test report is obtained. 8. A vehicle WIFI security testing method, applied to the vehicle under test, characterized by including: Receive and respond to the WIFI connection request sent by the test device, so that after the test device obtains multiple test instructions, it sends the multiple test instructions based on the WIFI connection; Receive the multiple test instructions; Execute the plurality of test instructions, conduct a safety test on the WIFI of the vehicle under test, and obtain test results; The test results are sent to the test equipment, so that if the test results indicate that there is a security risk in the WIFI of the vehicle under test, the test equipment generates a vulnerability test report based on the test results. 9. A vehicle WIFI security testing system, characterized in that the system includes the vehicle under test and testing equipment; The test equipment is used to establish a WIFI connection with the vehicle under test; The vehicle under test is used to receive and respond to the WIFI connection request sent by the test device; The test equipment is also used to obtain multiple test instructions and send the multiple test instructions to the vehicle under test based on the WIFI connection; The vehicle under test is also used to receive the multiple test instructions; execute the multiple test instructions, conduct a safety test on the WIFI of the vehicle under test, and obtain test results; and send the test results to the Test Equipment; The test equipment is also used to receive the test results sent by the vehicle under test; if the test results indicate that there is a security risk in the WIFI of the vehicle under test, generate a vulnerability test report according to the test results, The vulnerability test report includes vulnerability information about the vulnerabilities existing in the WIFI of the vehicle under test and suggestions for modifying the vulnerabilities. 10. An electronic device, characterized in that it includes: a memory, a processor, and a computer program stored in the memory and executable on the processor. When the processor executes the computer program, claims 1-7 are implemented. Any one of the methods described in claim 8, or any one of the methods described in claim 8.