Professional Security Testing
Penetration testing is a simulated cyber attack on a system to find and fix security vulnerabilities.
Black Box → No knowledge White Box → Full knowledge Gray Box → Partial knowledge
Recon → Info gathering Scanning → Find vulnerabilities Exploitation → Test weakness Reporting → Document findings
Nmap → Network scanning Burp Suite → Web testing Metasploit → Exploitation OWASP ZAP → Security testing
Web apps Networks APIs Cloud systems
- Vulnerability found - Risk level - Fix recommendation