Before diving into Kelly and let me explain to you what art is of four different phases of penetration
testing.
When you do penetration testing you have to go through four different phases and each phases depend
on the previous phase.
So any penetration testing consist of first phase is the reconnaissance phase the consciousness phase
is a phase where you start collecting or gathering information about your victim and those should be
passive information neck.
We're going to explain exactly what is best for information once I finish collecting the specimen information.
We're going to start the scanning phase and scanning is also collecting and gathering information except
in this phase will be active information and one more time later on I'm going to explain what is the
difference between passive and active.
But during the first two phases we can spend time and effort and we can utilize all Kelly in the tool
to gather information about our effect depending on those information.
We're going to start the exploitation process so I know that the victim has a specific operating system
and this operating system has a specific weakness.
So let me try to exploit the system hack the system through the sweetness.
I know that the victim is using a specific version of a crowbar three there for instance and this Acrobat
Reader.
It's very novel and can be hacked.
I'm going to hack his own system through district.
This is called exploitation and once I get access to the system once I compromised the system the final
phase will be supposed to explode exploitation.
So if I compromised the system through a weakness inside the browser.
If the victim closed the browser he would cut me off and that's it.
But I need to maintain my access.
I need to
do whatever it takes to become permanently on the system.
So I need to migrate to migrate one of my process to a system.
So victim will not be able to disconnect me from the session.
How can we do that.
We can explain during Kelly Linux source for different phases in depths using Kelly Linux too.
So please consider that penetration testing.
It's not a random process where you should start this tool and set to know it's a very organized process.
And when you write your report as you can see by the end of this course you need to mention what was
the output of each freezes during their concerns what was your output what was your finding and what
is your recommendation.
During the scanning what was the result of the scanning what portal and service are open.
What operating system.
Network topology and what do you recommend.
And how hacker can utilize it exploitation.
How you were able to exploit the system using which word ability.
And usually we do not just choose one but an ability we check for many vulnerability and try all of
them.
So it's not like I was able to find a vulnerability or a weakness in the system and I compromised it.
But this would be a proof of concept but for me I need to know all the fundamental I'm on the system
or most of that and try to exploit most of them because if one is not working maybe the second would
be working maybe the third to be.
So I need to have a different plan.
And finally how I was able to maintain my access on the system.
So those will be our blueprint that we will be using from now on during the penetration test.
And by the end of this course I'm gonna show you some real penetration testing report and when remove
the name of the company and maybe the name of you are and or anything that should not be showing.
But I will show you how using those different phases you can write professional penetration testing
report.