Before diving into various aspects of the Métis boy framework, I think it's better to talk about some
absolute basics when conducting a penetration test.
Actually, this is not a pure penetration testing course.
This course will show the capabilities of the Métis boy framework while you are doing a penetration
test.
So that means I'm going to summarize the phases in the steps of a penetration test.
So this section will cover more theoretical information, so for you beginners out there, there's a
great point to start on the other side of things for the one who has a basic understanding of the penetration
testing, they OK, I guess you can skip over to other chapters, but I don't recommend this because
this section completes the course properly.
And what did I tell you before?
I'm going to do things a little differently, so you might get my unique take on it.
I don't want to push you, though, so do what you choose.
So in this section, you're going to learn and understand what penetration testing is all about and
where the meds point framework actually fits in.
Precisely.
So in this short section.
You have entered the world of penetration testing and one basic question immediately comes to mind,
what is it?
I'm sure that your answers to this question will be close, but they're going to be a slightly different.
I obviously can't actually guess your answers, but I know your definitions won't be enough because
there isn't an exact definition, right?
All the books and all the courses expand the definition of penetration testing.
And this effort, unfortunately, makes it harder to understand.
So I've been doing penetration testing for years and years, too many to count without some help.
To me, penetration testing is simply to find and exploit the weaknesses in a computer system by predefined
rules in a specific scope.
Compared to a vulnerability assessment on a penetration test, you not only discover the vulnerabilities
that could be used by attackers, but also you need to exploit the vulnerabilities to assess what attackers
might gain after a successful exploitation.
So you will simulate an attacker as a penetration tester.
Now, by this, you're going to figure out security weaknesses, find vulnerabilities and identify the
security level of the systems.
Who a little bit Mr. Robot style.
The important point here is to exploit the identified vulnerabilities by concerning the consistency
of the target system.
So honestly, in a penetration test, you will focus on how to improve the security of your target from
an attacker's perspective.
Oh, and by the way, I implicitly explain why I choose the Métis Boyte framework.