Kali Linux

4.

The Penetration Testing Methodology

4.1.

Overview of Penetration Testing

4.1.1.

Definition and Goals

4.1.2.

Types of Penetration Tests

4.1.2.1.

Black Box Testing

4.1.2.2.

White Box Testing

4.1.2.3.

Gray Box Testing

4.1.3.

Testing Approaches

4.1.3.1.

External Testing

4.1.3.2.

Internal Testing

4.1.3.3.

Wireless Testing

4.1.3.4.

Web Application Testing

4.1.3.5.

Social Engineering Testing

4.2.

Industry Standards and Frameworks

4.2.1.

OWASP Testing Guide

4.2.2.

NIST SP 800-115

4.2.3.

4.2.4.

PTES (Penetration Testing Execution Standard)

4.2.5.

4.3.

Phases of a Penetration Test

4.3.1.

Pre-engagement Interactions

4.3.1.1.

Scoping and Rules of Engagement

4.3.1.1.1.

4.3.1.1.2.

Time Constraints

4.3.1.1.3.

Technical Constraints

4.3.1.1.4.

Legal Constraints

4.3.1.2.

Legal Agreements

4.3.1.2.1.

Contracts and NDAs

4.3.1.2.2.

Statement of Work

4.3.1.2.3.

Get-Out-of-Jail-Free Letter

4.3.1.3.

Communication Protocols

4.3.1.3.1.

Emergency Contacts

4.3.1.3.2.

Reporting Schedule

4.3.1.3.3.

Escalation Procedures

4.3.2.

Intelligence Gathering

4.3.2.1.

Passive Reconnaissance

4.3.2.1.1.

OSINT Collection

4.3.2.1.2.

Social Media Intelligence

4.3.2.1.3.

DNS Information Gathering

4.3.2.1.4.

4.3.2.1.5.

Search Engine Reconnaissance

4.3.2.2.

Active Reconnaissance

4.3.2.2.1.

Network Scanning

4.3.2.2.2.

Service Enumeration

4.3.2.2.3.

Banner Grabbing

4.3.2.2.4.

Social Engineering

4.3.3.

Threat Modeling

4.3.3.1.

Asset Identification

4.3.3.2.

Threat Identification

4.3.3.3.

Vulnerability Assessment

4.3.3.4.

4.3.4.

Vulnerability Analysis

4.3.4.1.

Automated Scanning

4.3.4.1.1.

Network Vulnerability Scanning

4.3.4.1.2.

Web Application Scanning

4.3.4.1.3.

Database Scanning

4.3.4.2.

4.3.4.2.1.

Configuration Review

4.3.4.2.2.

4.3.4.2.3.

Architecture Analysis

4.3.5.

4.3.5.1.

Exploit Selection

4.3.5.2.

Exploit Customization

4.3.5.3.

Exploit Execution

4.3.5.4.

Payload Delivery

4.3.5.5.

Access Verification

4.3.6.

Post-Exploitation

4.3.6.1.

Privilege Escalation

4.3.6.1.1.

Local Privilege Escalation

4.3.6.1.2.

Domain Privilege Escalation

4.3.6.2.

Persistence Mechanisms

4.3.6.2.1.

4.3.6.2.2.

Scheduled Tasks

4.3.6.2.3.

Registry Modifications

4.3.6.3.

Data Collection

4.3.6.3.1.

Sensitive Data Identification

4.3.6.3.2.

Data Extraction

4.3.6.3.3.

Screenshot Collection

4.3.6.4.

Lateral Movement

4.3.6.4.1.

Network Pivoting

4.3.6.4.2.

Credential Harvesting

4.3.6.4.3.

Additional System Compromise

4.3.7.

Covering Tracks

4.3.7.1.

Log Manipulation

4.3.7.1.1.

Event Log Clearing

4.3.7.1.2.

Log Modification

4.3.7.2.

Artifact Removal

4.3.7.2.1.

4.3.7.2.2.

Registry Cleanup

4.3.7.2.3.

Network Trace Removal

4.3.8.

Reporting and Communication

4.3.8.1.

Executive Summary

4.3.8.2.

Technical Findings

4.3.8.3.

Risk Assessment

4.3.8.4.

Remediation Recommendations

4.3.8.5.

Appendices and Evidence

Previous

3. Linux Fundamentals for Kali Users

Go to top

Next

5. The Kali Linux Toolkit: Information Gathering