Other General Information

A typical penetration test comprises the following stages:

  • Defining the Scope

  • Information Gathering

  • Vulnerability Detection

  • Initial Foothold

  • Privilege Escalation

  • Lateral Movement

  • Reporting/Analysis

  • Lessons Learned/Remediation

The scope of a penetration test engagement defines which IP ranges, hosts, and applications should be test subjects during the engagement, as compared to out-of-scope items that should not be tested.

Once we have agreed with the client on the engagement's scope and time frame, we can proceed to the second step, information gathering.

Passive Information Gathering

Last updated