Methodology and Tools

1. PENETRATION TESTING DEMO
METHODOLOGY AND TOOLS
PRESENTED BY: MANIGANDAN.J
IQZ SYSTEMS PVT. LTD.
COIMBATORE
16-07-2018 1

2. Agenda:
 Penetration Testing Introduction
 Penetration Testing Method
 Penetration Testing Tools
 Penetration Testing Demo
16-07-2018 2

3. Penetration Testing Introduction?
What Is Penetration Testing? Why Penetration Testing?
16-07-2018 3
• Type of security testing
• Find the security risk
• Take authorize access
• Configuration errors, design errors, an software
bugs, etc.
• Vulnerabilities, It will try and exploit
• Weakness in the infrastructure (HW & SW)

4. 16-07-2018 4
Penetration Testing Method:

5. Types of Penetration Testing?
16-07-2018 5

6. Network Penetration Testing:-
16-07-2018 6

7. Web Application Penetration Testing:-
16-07-2018 7
We have split the set of active tests in 9 sub-categories for a total of 66 controls:
• Configuration Management Testing
• Business Logic Testing
• Authentication Testing
• Authorization testing
• Session Management Testing
• Data Validation Testing
• Denial of Service Testing
• Web Services Testing
• Ajax Testing

8. Social Engineering Penetration Testing:-
16-07-2018 8

9. Penetration Testing Tools:
Framework:
16-07-2018 9
Version: 2018.1
Version: 3.11

10. 16-07-2018 10
Testing Tools:

11. 16-07-2018 11

12. 16-07-2018 12