1. Penetration testing (pentesting) involves authorized simulated cyberattacks against a target such as a company to test for vulnerabilities and weaknesses in their systems. 2. Pentesters first understand the business needs and scope, then scan targets to discover vulnerabilities which they attempt to exploit to gain access and highest privileges. 3. The process involves scanning, exploiting vulnerabilities to gain access, and attempting privilege escalation to end with the highest level of access, then cleaning traces of the testing.

1. Penetration Test
Process
By: Mahmoud Ashraf
Cyber Security Student | Penetration Tester

2. About Topic:
We will talk about how
pentest works and what the
process and overview of
Pentesting.

3. What Is Penetration Testing?
Penetration Testing or (Pentesting) is an authorized
simulated Cyberattack on the target (YOUR SCOPE)
sector ex: Bank, telecom Companies and etc… to test
their assets and env and discover the weakness points
or (Vulnerabilities) which can let the unauthorized
“Hacker” Stole or Damage the company’s systems that’s
mean of Cyber Attack.

4. Why We Need Pentesting?
Covering All Vulnerabilities
and patching them help the
env from Cyberattacks
over-well it improve the
security of the env…

5. What Penetration Testers Do?
The Objective?
The Value?
What’s Next?
Wendy Writer
1.
Test The Scope only
Ronny Reader Abby Author
2.
Understand the
business needs of the
customer “Company”
and planning for
Methodology
3.
Scan and enumerate
the scope or target
to move to another
stage is to discover
the vulnerabilities
and gain access
Berry Books
4.
After You Exploit To end
the engagement is
getting the highest
Privilege and clean the
traces

6. PenTesters Thinking…
January 20XX
1st: I have A scope and the target now i will scan the open ports and
search if the target host have a public Vulnerability so i can gain access
to the target host and i move to get the highest privilege
The Q: What if the target Don’t have a vulnerable Network Service
what the pentester do?
Answer: The Target Host not Vulnerable…
June 20XX
July 20XX
October 20XX

7. Penetration Testing Categories
In Pentesting you have a lot of categories you can test and i have collect
what in the env or assets Supposed to be tested in Penetration Testing
Field:
1- Web & Mobile & API Application
2- Network Service and Security Appliances
3- IoT Systems
4- Blockchain
5- Active Directory
6- Users
7- ICS & OT Devices
8- Cloud

8. Abbreviation of
penetration testing
process
Scanning
Exploit
Privilege Escalation

9. Required Skills:

10. Questions: