The 8 Phases of Cyber Security Testing | Stephen Ajulu · IT Professional, Writer, Founder & Consultant

Unlike the previous post: The 5 Phases Of Hacking . This procedure mostly resonates with cybersecurity professionals and/or ethical hackers.

Determining the rules of engagement for the assessment.

Also known as Information Gathering. Gather Relevant information and enumerate the attack surface.

Also known as Scanning and Enumeration. Identify vulnerabilities and quantify risk associated.

Also known as Exploitation or Gaining Access. Pop some shells. Exploit identified vulnerabilities.

Maintain access, pivot and find more data and assets.

Clean users, software, logs, and files used throughout assessment.

Prepare and Write Report. Communicate test results and remediation steps with client.

Start the remediation process. Secure the vulnerabilities found according to client’s go ahead.

Let’s work on it →