External Network Pentest: An external network pentest is designed to discover and exploit vulnerabilities in hosts that exist in public-facing security controls. The pentest team acts as an attacker on the open Internet and attempts to mimic real scenarios as best as possible to identify as many potential vulnerabilities as possible. If an external host is compromised, it can lead to an attacker digging deeper into the internal environment.

internal Network Pentest: An internal network pen test is performed to help gauge what an attacker could achieve with initial access to a network. An internal network pen test can mirror insider threats, such as employees intentionally or unintentionally performing malicious actions. The target is typically the same as an external penetration test but relies on some sort of authorized access or starts from a point within your network.

Planning

Reconnaissance

Scanning

Vulnerability Assessment

Reporting