Penetration testing involves ethically hacking systems to identify vulnerabilities. It is conducted annually or when systems change, using tools like Wireshark, Nmap, Metasploit, and John the Ripper. The process includes reconnaissance, threat modeling, exploitation, post-exploitation, and re-testing phases to measure security policy compliance, identify weak spots, prevent disasters, and help developers create secure apps.

1. PENETRATION TESTING
A BRIEF INSIGHT INTO
PENETRATION TESTING

2. CONTENTS
• INTRODUCTION
• PURPOSE
• HOW IS PENETRATION TESTING CONDUCTED
• PENETRATION TESTING TOOLS
• TYPES OF PENETRATION TESTS
• PENETRATION TESTING STAGES

3. INTRODUCTION
• Penetration testing is also called as Ethical Hacking
• Testing is done to find out security vulnerabilities
• It is done to identify possible entry points, attempting to break in -- either virtually
or for real -- and reporting back the findings
• Can be done from software's or manually
• Check security policies are properly implemented or not,

4. PURPOSE
• It measures the compliance of organization security policy
• Identify weak spots of the system
• Prevent from security disasters
• Help application developers create more secure apps
• Minimize errors in the future

5. HOW IS PENETRATION TESTING CONDUCTED
• It is conducted once in a year. However, it also depends upon the nature of the system
• Smaller organization does penetration test once every two years
• Penetration tests may also be conducted whenever an organization:
 Adds new network infrastructure or applications, significant upgrades or modifications to its
applications or infrastructure
 Establishes offices in new locations
 Applies security patches
 Modifies end-user policies.

6. PENETRATION TESTING TOOLS
Wireshark
Nmap
Metasploit Project John The Ripper

8. PENETRATION TESTING STAGES
Pre- engagement Reconnaissance Threat modelling
Exploitation Post-Exploitation Reporting
Re-testing

9. For more information about penetration testing and to kickstart your career, enroll now for penetration testing course!