Penetration testing methodologies
- External penetration testing: Testing from the perspective of an internet facing attacker.
- Internal penetration testing: Testing from the perspective of an attacker with access to the internal network.
- Web application penetration testing: Testing web applications of various sizes from an authenticated and unauthenticated attacker perspective.
- API penetration testing: Testing web-based API from an authenticated and unauthenticated attacker perspective
- Wireless penetration testing: Testing wireless networks, including enterprise and guest WiFi.
- Mobile application penetration testing: Testing mobile applications for IOS or Android.
Red Team Exercises
- Red team and adversary simulation: Long-term targeting of an organisation with business relevant objectives. Usually includes social engineering techniques and physical intrusion.