> For the complete documentation index, see [llms.txt](https://notes.drngd0tter.red/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://notes.drngd0tter.red/hacking-methodology/penetration-testing-overview.md).

# Penetration Testing Overview

## What is a Penetration Tester?

A Penetration Test is an organized, targeted, and authorized attack that tests a business/company's infrastructure, employees, and other technologies to determine security vulnerabilities. A penetration test uses real world techniques that malicious actors use to find vulnerabilities before those actors compromise the business's infrastructure.

## External vs. Internal Penetration Test

### External Pentest

The penetration test is performed external from the company's network. This tests the external network perimeter's security and is more realistic to how a malicious user would gain access. Certain pentests may also be purposely "noisy" to test the company's blue team.

### Internal Pentest

The penetration test is performed from within the company's internal network. This stage may occur after a successful external pentest, or you may start from within the company's network.

## Types of Pentests

<table><thead><tr><th width="204">Type</th><th>Information Provided</th></tr></thead><tbody><tr><td><code>Blackbox</code></td><td><code>Minimal</code>. Only the essential information, such as IP addresses and domains, is provided.</td></tr><tr><td><code>Greybox</code></td><td><code>Extended</code>. In this case, we are provided with additional information, such as specific URLs, hostnames, subnets, and similar.</td></tr><tr><td><code>Whitebox</code></td><td><code>Maximum</code>. Here everything is disclosed to us. This gives us an internal view of the entire structure, which allows us to prepare an attack using internal information. We may be given detailed configurations, admin credentials, web application source code, etc.</td></tr><tr><td><code>Red-Teaming</code></td><td>May include physical testing and social engineering, among other things. Can be combined with any of the above types.</td></tr><tr><td><code>Purple-Teaming</code></td><td>It can be combined with any of the above types. However, it focuses on working closely with the defenders.</td></tr></tbody></table>