The Methodology · 2.1
🧭 The Five Phases of a Pentest
Professionals follow a process — hacking isn't random button-mashing⏱ ~2 min
🏔️A pentest is a planned expedition, not a random hike
You don't climb a mountain by wandering uphill. You study maps, plan a route, gather gear, make the climb, and write up the trip for the next team. A penetration test is the same: a structured, repeatable process where each phase feeds the next. Skilled hackers are methodical, not chaotic.
The Standard Five Phases
| Phase | Goal | Example Activity |
|---|---|---|
| 1. Reconnaissance | Learn everything about the target | Gather public info, employee names, tech used |
| 2. Scanning | Map systems and find potential ways in | Discover live hosts, open ports, running services |
| 3. Exploitation | Prove a weakness is real by (safely) using it | Gain access through an identified vulnerability |
| 4. Post-Exploitation | Assess the real-world impact of the access | Determine what data/systems could be reached |
| 5. Reporting | Document findings and how to fix them | Write a clear report with severity and remediation |
Reporting Is the Real Product
🔒 SecurityBeginners think the 'cool' part is exploitation. Professionals know the report is the entire point. A client is paying to learn how to be more secure — a beautifully clear report that helps them fix real problems is worth more than any flashy exploit. If you can't communicate a finding, you haven't finished the job.
★ FactThis process is formalized in industry standards like the Penetration Testing Execution Standard (PTES) and NIST SP 800-115. Real engagements also begin with a 'pre-engagement' phase — scoping, contracts, and rules of engagement — before any technical work starts.
🧠Quick Checkfirst try = +5 XP
What do professionals consider the real 'product' of a penetration test?
🎮 Practice what you learned
⭐ 0 XP🔥 0 days