Pre-Engagement
Overview Multiple documents should be reviewed during the pre-engagement period: Non-Disclosure Agreement (NDAs) NDAs can come in different types: unilateral, bilateral, multilateral. Each of...
Network Scanning
Command line tool nmap and its GUI counterpart zenmap are powerful tools that allow you to do thorough scanning of networks and hosts. From the most basic ping scan, OS and service detection, or...
Fri 19 June 2026
information_gathering
Vulnerability Assessment
Overview Divided into two areas, one is scanning for known vulns. The other is analyzing the results to determine a path forward Analysis can be broken down further into Descriptive - describes...
Mon 27 July 2026
vulnerability_assessment
Information Gathering
Overview Different test types can differ in how much information we start with Blackbox is the minimal information provided to start such as external IP ranges and domains. Nothing more. Greybox...
Fri 19 June 2026
information_gathering
Penetration Testing Process
Overview Throughout the entire penetration testing process, detailed notes & screenshots should be consistently captured for the final proof of concept report, and to assist with cleanup....
Sun 31 May 2026
intro