Pentesting Process

NDA

Scoping Call

  • https://www.dashe.com/blog/training-development/questions-learning-development-engagement/

Statement of Work (SOW)

Passive Recon

Active Scanning

Target Enumeration

Vulnerability Identification

Vulnerability Exploitation

Project Documentation