What is penetration testing? Definition, types & examples

Penetration testing puts a security professional in the role of an attacker, with permission, to prove which vulnerabilities are actually exploitable rather than just theoretically present. The goal is a prioritized report of real risk, not a raw list of findings.

How does penetration testing work?

A typical engagement follows recognized stages:

• Scoping and rules of engagement define what is in bounds and what is off limits.
• Reconnaissance gathers information about the target (see OSINT).
• Scanning and enumeration map open ports, services, and versions.
• Exploitation abuses a weakness to gain access.
• Post-exploitation covers privilege escalation, lateral movement, and proving impact.
• Reporting documents findings, evidence, and remediation steps.

Common types and tools

Tests are often labeled black-box (no inside knowledge), grey-box, or white-box (full access to source and architecture). They target web apps, internal networks, cloud, wireless, or social engineering. Practitioners commonly use Nmap for discovery, Burp Suite for web testing, Metasploit for exploitation, and Hydra for credential attacks.

How to practice penetration testing hands-on

The fastest way to learn is to attack deliberately vulnerable systems in a safe range. On Purple Edge you launch real cloud labs and follow the penetration-testing learning hub, working through reconnaissance, exploitation, privilege escalation, and Capture the Flag style challenges in an isolated environment you fully control.