Tech4uk’ broad penetration testing methodology is given here with brevity. But, a carefully define scope would leverage actual components of the testing.
Depending on the scope of the test, ensure that com promised systems may be accessed
Pentest conducted through the Internet by an ‘attacker’ with no preliminary knowledge of your system
Exploitation