Details.
Analyzes exposed infrastructure for vulnerabilities and direct attack vectors by scanning exposed services, manually testing them, and exploiting identified attack vectors to measure risks. Common activities include host and service discovery, hostname enumeration, vulnerability assessment, exploitation of discovered flaws, and pivoting into internal systems from exploited machines.