PenTest Methodologies

Question 1

CompTIA Methodology

Answer 1

1. Planning and Scoping
2. Info Gathering and Vulnerability ID
3. Attacks and Exploits
4. Reporting and Communication

Question 2

Ethical Hacker Methodology

Answer 2

1. Permission
2 Performing Recon
3. Scanning and Enumeration
4. Gaining Access
5. Escalation of Privilege
6. Maintaining Access
7. Covering Tracks and Placing Backdoors
8. Reporting

Question 3

NIST SP 800-115 Methology

Answer 3

1. Planning
2. Discovery
3. Attack (Additional discovery if needed)
4. Reporting