Penetration testing methodologies and frameworks

In this section, we are going to take a look at various penetration testing methodologies and frameworks. To begin, we must understand what is meant by a methodology. A methodology is a set of methods applied to a field of study or an activity using a systematic approach. Another important terminology in the field of penetration testing is the term framework. A penetration testing framework is a comprehensive guide that details the usage and security-auditing tools for each category of penetration testing.

Completing your first training in penetration testing can be very exciting, and you were probably very eager to hack something. Imagine you’re on the client’s network, and you begin to stimulate your attacks all at once, focusing on a particular set of vulnerabilities or systems. A lot of misfires can occur – exploits can hit targets that are not specified within the scope of the penetration test agreements – and this can be bad for business...