Non-Technical Pen Testing:




Note: Information shared over this blog is purely for knowledge purpose, misuse on your own risk :)
Phases:
Information gathering
Scanning the product
Attacking actively
Analyzing
Reporting.

Type:
Network services
Web Application
Wireless
Social Engineering
Client side


Attack type:
Internal
External
Blind

Different pentesting tools:
Metasploit
Openssl
NMAP [basically a port scanner]

Best OS for packed tools:
'Kali Linux' or 'Parrot OS'.

I use Kali Linux
Download Any Image from here for Kali Linux [Latest is preferable]
https://www.kali.org/downloads/

* Installtion of Linux is shared on a different blogs of mine. so please go over , <Link>
*For all those who are booting Kali Linux with windows, create a dual boot file and install it.
<Link>


Before deep diving into penTesting hands on,
get your basics clear with networking concepts and domain expertise in any of the areas you want to explore attacks.

Information monitoring is important which will be done using
iperf, tcpdump, wireshark. [get your basics]



*** suggestions are welcome.