Let us start the last lecture on this introduction to hacking section in this video, you will see what
are the 10 steps security experts follow while doing a penetration test.
The first is legal documentation in this step, the penetration tester should form agreements with the
company or the organization for which he or she is going to test.
This is very important agreements such as non-disclosure agreement, memorandum of understanding and
financial agreements often.
Next is scope assessment.
In this step, the attacker or the penetration test must decide which aspects of the organizations should
be tested if the organization have application and web applications and websites.
Also, the attacker must decide which forms to test first.
The next is information assessment.
In this phase, the penetration test should gather as much information as possible to perform the required
penetration test.
Fourth step is vulnerability assessment.
We have seen in the previous videos what we did with the assessment means, and therefore I'm not going
to explain in this lecture the fifties penetration testing.
We have also seen this step in previous produce.
Six step is gaining access.
In this step, the attacker or the penetration tester explodes when the abilities of the target system
or the organization and then gains access to the valuable assets and data the organization.
The seven step is privilege escalation in this step, the penetration tester gets the rights of the
administrator of the database or of the system.
The second last or the third last, which is the most important step of any penetration test, is repo
generation now here in the step, and the attacker must file different types of reports.
For example, develop a report and high level management report.
Developers report stands for the developer of the system or the website explaining all the exploits,
codes and badges that need to be present and in the high level management report should explain the
business impact statistics and other things that are necessary for the management level personal.
The second last phase is Bache assistance in this phase, the penetration test should provide patches
and gauze to fix the bugs in the application.
And the last step is revalidation in this step, the attack or the penetration tester should check again
whether the organization or system has patched all the vulnerabilities which he or she had tested during
the test.
So this is a Tanque mantra if you follow these ahlborn steps.
This is a perfect penetration testing start, which would help you and your organization to perform
a perfect penetration test.
So this was all for this lecture, if you have any doubts, please feel free to ask us in the note section.
In the next section, you will see how to set up an ethical hacking lab.
So let us get started with the next section.