Penetration Testing Methodology

Summary

A structured process — reconnaissance, scanning, exploitation, post-exploitation, reporting — ensuring a pentest is thorough and repeatable rather than random poking, and always conducted with explicit written authorization.

• 1Learn the standard phases of a penetration test in order.
• 2Read a public penetration testing methodology document (e.g. PTES) for more depth.
• 3Understand why written authorization ('rules of engagement') must exist before any testing begins.