Question

Bob has been hired to perform a penetration test on Certkiller. He begins by looking at IP address ranges owned by the company and details of domain name registration. He then goes to News Groups and financial web sites to see if they are leaking and sensitive information or have any technical details online. Within the context of penetration testing methodology, what phase is Bob involved with

Answer 1

External phase

Step-by-step explanation:

The penetration testing was conducted by methodological and thorough approach.

There are six phase of penetration testing:

1. The pre-Engagement test
2. Open source intelligence gathering
3. The threat modeling and vulnerability identification:

• The Internal threat phase
• The external threat phase

4. Exploitation

5. Post exploitation

6. Reporting.