The Playbooks Pentesters Follow (PTES, OSSTMM, NIST)

Why this matters

Multiple methodologies codify pentesting; they overlap but have different emphases. PTES (Penetration Testing Execution Standard) is the most-cited; OSSTMM focuses on operational security testing; NIST 800-115 is the US government's framework. A real engagement combines elements; the methodology is the planning skeleton.

Demo

PTES phases: 1. Pre-engagement (RoE, scope, contracts), 2. Intelligence gathering (OSINT), 3. Threat modelling (what's high-value), 4. Vulnerability analysis, 5. Exploitation, 6. Post-exploitation, 7. Reporting. Each has its own deliverables; the report is the only thing the client sees.

Try it yourself

1. Read PTES technical guidelines end-to-end. Note the depth of pre-engagement.
2. Compare to your own pentest experience (if any). Where does it match, where diverge?
3. Draft a 1-page methodology customised for your team / product.

References

• PTES Technical Guidelines
• NIST SP 800-115