Advanced Penetration Testing for Highly-Secured Environments - Second Edition

Abstract methodology

As mentioned previously, we concentrate on a process and apply that to our security components when we go about security testing. For this, we describe an abstract methodology here:

A simple abstract methodology consists of the following steps:

1. Planning
2. Non-intrusive target search
3. Intrusive target search
4. Remote target assessment
5. Local target assessment
6. Data analysis
7. Reporting

The goal is to develop your process and select a minimum of two tools for each process, which provides the means for you to achieve the desired outcome at each step. Once you have done this, then you can add additional tools as required. The essential component is to have at least two tools to start professional security and penetration testing. For more on this ...