Chapter 1: Red-Teaming and Pentesting

1. OWASP, OSSTMM, ISSAF.
2. Different phases of PTES are:
   • Reconnaissance
   • Compromise
   • Persistence
   • Command and control
   • Privilege escalation
   • Pivoting
   • Reporting and cleanup

3. Difference between red-teaming and pentesting is:
   
   • Red-teaming involves finding and exploiting only those vulnerabilities that help to achieve our goal, whereas pentesting involves finding and exploiting vulnerabilities in the given scope, which is limited to digital assets.
   • Red-teaming has an extremely flexible methodology, whereas, pentesting has fixed static methods.
   • During red-teaming, the security teams of the organizations have no information about it, whereas during pentesting, security teams are notified.
   • Red-teaming attacks can happen 24/7, while pentesting activities are mostly limited to office hours.
   • Red-team is more about measuring the business impact of the vulnerabilities...