All language subtitles for 5. Pentest phases - Part 2-en_US

Vulnerability analysis.

Vulnerability analysis, typically, most accessors or Testa's running vulnerability or network for

scans to better understand which services the network or the application is running and whether they

are there are any vulnerabilities in any systems, including in the scope of the assessment.

So this process often includes a manual vulnerability testing or discovery, which is often the most

accurate form of vulnerability analysis or vulnerability assessment.

There are many tools both free and paid for.

So to assist us in quickly identifying vulnerabilities on a target system or network after discovering

the vulnerabilities, after discovering security weaknesses.

The next phase is to attempt exploitation.

Exploitation is the most commonly ignored or overlooked part of the penetration testing.

And the reality is that clients and executives don't care about vulnerabilities unless they understand

why they matter to them.

Exploitation is the ammunition or evidence that helps articulate why the vulnerability matters and illustrates

the impact that the vulnerability could have on the organization.

Furthermore, brutal exploitation.

Their assessment is not a penetration test and is nothing more than an anaerobic assessment, which

is most companies can conduct in-house better than a third party consultant called.

To put it simply, during the information gathering phase, a penetration test will profile the target

and identify any more robotized.

Next, using the information about the vulnerabilities, the penetration tester will do their research

and Chris Bitburg exploits that will take advantage of the vulnerabilities of the target.

This is what exploitation is when we use exploit.

This means malicious code to leverage and vulnerability weakness in a system which will allow us to

execute accurate record and comments on the target, often after successful in exploiting a target system

or network.

We may think then the task is done, but it isn't just yet.

There are tasks and objectives to complete after breaking into the system.

This is the post exploitation phase in the penetration testing plus exploitation, commercial exploitation.

Exploitation is the process of gaining access to systems that may contain sensitive information.

The process exploitation.

The primary goal is typically to demonstrate the impact that their vulnerability and access gained can

pose the to the organization.

So the process of postfix rotation is the continuation of this step where the foothold gained leverage

it to access data or spread to other systems within the network during the post exploitation.

The primary goal is to typically to demonstrate the impact that they will mobility and access gain Campos

to the organization.

The impact assist in helping executive leadership better understand the vulnerabilities and damage it

called cost to the organization.

And the last phase is Re-import Writing Report.

Writing is exactly as it sounds and is one of the most important elements of any penetration test penetration

testing.

Maybe this helps, but report writing is a deliverable that the client sees and is the only tangible

element given to the client at the end of the assessment report shall be given as much attention and

care as the testing.

I our report for writing in greater detail later on this course, but report for writing involves much

more than listing and few vulnerabilities discovered during the assessment.

It is the medium in which to convey risk business impacts.

Summarize your findings and include remediation steps.

A good penetration test.

Our needs to be a good report writer or the users they find will be lost and may never be understood

by the client who hired them to conduct their assessment.

Having completed this lecture, you are now able to describe each pace of penetration test testing here.

Birchmore you have a better idea of expectation of penetration testers and expectation penetration testers

in the industry.

Next, we will dive into understanding various penetration testing methodologies, standards and frameworks.

So I am waiting you in Ecclesia.