Depending on the scope of the test, ensure that com promised systems may be accessed throughout the test.
Exploitation
In passive Recon, Pentest team attempt to gather information from sources of Open Source Intelligence
Tech4UK broad penetration testing methodology is given here with brevity. But, a carefully define scope