What is Penetration Testing?

This lesson offers a straightforward introduction to penetration testing, often referred to as a 'pen test' or ethical hacking. Penetration testing is defined as a legitimate, controlled attack on a company's systems, conducted under strict legal agreements and rules of engagement, utilizing the same tools malicious hackers use. The course breaks down the universal 8 steps of a pen test: planning and preparation, reconnaissance, scanning and enumeration, vulnerability scanning, exploitation, post-exploitation, reporting, and remediation. Leaners will explore how to differentiate a full penetration test from a vulnerability assessment or red teaming engagement. Additionally, the lesson introduces the foundational mechanics of port scanning across TCP and UDP using common tools like Nmap, ending with an overview of banner grabbing used to accurately detect network protocols.