Professional Penetration Testing, 2nd Edition

Chapter 4

Methodologies and Frameworks

Abstract

This chapter discusses the need for methodologies and frameworks within the professional penetration testing industry. Different options are explored and examined for their usefulness in real-world penetration testing and for newcomers to the profession.

Keywords

ISSAF

OSSTMM

Framework

Methodology

Penetration testing

Project management

Planning

Information gathering

Vulnerability identification

Contents

Introduction

Information System Security Assessment Framework

Planning and Preparation—Phase I

Phase I: Planning and Preparation

Assessment—Phase II

Network Security

Host Security

Application Security

Database Security

Social Engineering

Reporting, Clean-up, and Destroy Artifacts—Phase III ...