Pentesting Fundamentals

Prompts and answers

• You are given permission to perform a security audit on an organisation; what type of hacker would you be?
  White hat
• You attack an organisation and steal their data, what type of hacker would you be?
  Black hat
• What document defines how a penetration testing engagement should be carried out?
  Rules of Engagement
• What stage of penetration testing involves using publicly available information?
  Information Gathering
• If you wanted to use a framework for pentesting telecommunications, what framework would you use? Note: We're looking for the acronym here and not the full name.
  OSSTMM
• What framework focuses on the testing of web applications?
  OWASP
• You are asked to test an application but are not given access to its source code - what testing process is this?
  Black Box
• You are asked to test a website, and you are given access to the source code - what testing process is this?
  White Box
• Complete the penetration test engagement against ACME's infrastructure.
  THM{PENTEST_COMPLETE}