Pentest - 5 stages

Pentest - 5 stages

1. "Pen Tests are key for organisations to identify security vulnerabilities in their systems, applications and networks. "

2. 1. reconnaissance or planning

   • collet as much information as possible
     • network topology
     • operation system
     • user account management

3. 2. scanning or discovery

   • the tester uses a variety of tools to identify open ports and check elements such as network traffic on the target system.

4. 3. vulnerability assessment

   • the tester use all the collected data in the first two phases to identify potential vulnerabilities and determine wheter they can be exploited by hackers or not.
   • the tester will base on the multiple resources available, such as, NVD (National vulnerability DB), CVE DB (Common vulnerability and exposures). The severity of vulnerabilities is frequently scored using the Common Vulnerability Scoring System (CVSS).

5. 4. exploitation

   • the tester will attempt to access the target system and exploit the listed vulnerability.
   • a real-life attack simulation takes a place and tools such as Metasploit are utilized, and the tester gains access and maintaining access to system.

6. 4. reporting

   • the tester prepares a report clearly including the pen tester findings that specific vulnerabilities were exploited. remember: sensitive data must not be included in the report, due to clearance or permissions or even need-to-knlwn rights.