Chapter 1: Introduction to Penetration Testing

1. Penetration testing aims to identify vulnerabilities in a controlled manner before an attacker is able to exploit them.
2. PTES and NIST SP800-115.
3. Scoping defines a number of important topics, such as what is to be tested, business goals, the duration of the pentest, and more.
4. STRIDE and VAST.
5. Metasploitable focuses on sharpening your skills with Metasploit. It also focuses more on the operating system and network layers.