> For the complete documentation index, see [llms.txt](https://blog.rootkid.in/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://blog.rootkid.in/exam-prep-notes/junior-penetration-tester-ejptv2-notes/assessment-methodologies.md).

# Assessment Methodologies

In the world of cybersecurity, understanding the security posture of a system involves a series of methodical steps known as assessment methodologies. This section explores the fundamental techniques used to identify potential threats and vulnerabilities in a network or application. We begin with **Information Gathering**, where we collect essential data about the target environment to form the basis for our analysis. Next, **Footprinting & Scanning** helps us map out the target system's structure and identify its open ports and services. Following this, **Enumeration** allows us to gather detailed information about system components, user accounts, and network resources. Finally, we conduct a **Vulnerability Assessment** to identify weaknesses that could be exploited by attackers. Together, these methodologies form a comprehensive approach to understanding and improving the security of systems.

## **Sub-Sections**

* [Information Gathering](/exam-prep-notes/junior-penetration-tester-ejptv2-notes/assessment-methodologies/information-gathering.md)
* [Footprinting & Scanning](/exam-prep-notes/junior-penetration-tester-ejptv2-notes/assessment-methodologies/footprinting-and-scanning.md)
* [Enumeration](/exam-prep-notes/junior-penetration-tester-ejptv2-notes/assessment-methodologies/enumeration.md) 
* [Vulnerability Assessment](/exam-prep-notes/junior-penetration-tester-ejptv2-notes/assessment-methodologies/vulnerability-assessment.md)

***

***

***

**`Hacker's Mantra:`**`Technology trust is a good thing, but control is a better one. - Stephane Nappo`