> For the complete documentation index, see [llms.txt](https://106-sam.gitbook.io/ejptv2-notes/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://106-sam.gitbook.io/ejptv2-notes/exploitation.md). # Exploitation * Exploitation consists of techniques and tools used by adversaries/penetration testers to gain an inital foothold on a target system or network. * Successful exploitation will heavily depend on the nature and quality of information gathering and service enumeration performed on the target. > "We can only exploit a target if we know what is vulnerable" - Unknown * So far, we have covered exploitation of Windows & Linux Systems both manually and automatically, however we still need to get a clearer picture of the exploitation methodology and the tools and techniques involved in the process. Penetration Testing Execution Standard * The Penetration Testing Execution Standard (PTES) is a penetration testing methodology that was developed by a team of information security practitioners with the aim of addressing the need for a comprehensive and up-to-date standard for penetration testing. Penetration Testing Phases
The following diagram outlines the various phases involved in a typical penetration test. **Exploitation Methodology :** * Identify Vulnerable Services * Identify & Prepare Exploit Code * Gaining Access * Automated - MSF * Manual * Obtain remote access on target system * Bypass AV detection * Pivot on to other systems ***