Pentest Methodology

Pentest Methodology

1. Phase 1:: Info Gathering

   • Hosts Detection
     • NMAP Scan
       • DNS Enumeration
         • Zone Transfer & Reverse Lookups
         • DNS Records
       • TCP Scan
       • UDP Scan
     • Ping Scan
     • No Ping Scan

2. Phase 2: Scanning

   • Port Scanning
     • Service Detection
       • OS Fingerprinting
         • Idle Scanning (Zombie)

3. Phase 3: Enumeration

   • NetBIOS/ SMB Enumeration
     • SNMP Analysis
   • NSE Scripts
     • Vulnerability Assessment
     • OS Fingerprint