PENETRATION TEST OR SECURITY EVALUATION GUIDE(FOR BEGINNERS):

ENUMERATION:

1. First step is the enumeration (documentation of current state of the target)

2. Learn as much as possible about it.

PORTS :

1. Scanning the open ports.

2. Every server uses ports to serve data to other clients

3. Find the purpose and vulnerabilities of the target on the network

NMAP :

Nmap stands for Network Mapper.
Nmap command: sudo nmap -sV (IP)
-sV is service detection flag to determine the name and description of the identified services.
PING :

Ping the target’s IP address to see if our packets reach their destination.

After four successful replies from the target, we can determine that our connection is formed and stable.

Ctrl + C to cancel the ping command.

Use different tools or scripts to access the contents of the target.
Do research, use google and find the information.
Following the completion of the scan, identify port( eg: tcp) and its state( eg: open),
Exploit the service using the required commands.
Find Weakpoints / loopholes.