> For the complete documentation index, see [llms.txt](https://pnpt.adot8.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://pnpt.adot8.com/external-pentest-playbook.md).

# External Pentest Playbook

- [Before Starting](https://pnpt.adot8.com/external-pentest-playbook/before-starting.md)
- [Objectives of an External Pentest](https://pnpt.adot8.com/external-pentest-playbook/before-starting/objectives-of-an-external-pentest.md)
- [Checklists](https://pnpt.adot8.com/external-pentest-playbook/before-starting/checklists.md)
- [Rules of Engagement](https://pnpt.adot8.com/external-pentest-playbook/before-starting/rules-of-engagement.md)
- [Verifying Scope](https://pnpt.adot8.com/external-pentest-playbook/before-starting/verifying-scope.md)
- [Client Communication](https://pnpt.adot8.com/external-pentest-playbook/before-starting/client-communication.md)
- [Methodology](https://pnpt.adot8.com/external-pentest-playbook/methodology.md)
- [Attack Strategy](https://pnpt.adot8.com/external-pentest-playbook/methodology/attack-strategy.md)
- [Vulnerability Scanning](https://pnpt.adot8.com/external-pentest-playbook/methodology/vulnerability-scanning.md)
- [Reviewing and Extracting Information](https://pnpt.adot8.com/external-pentest-playbook/methodology/reviewing-and-extracting-information.md)
- [Attacking Login Portals](https://pnpt.adot8.com/external-pentest-playbook/attacking-login-portals.md)
- [Password Spraying O365](https://pnpt.adot8.com/external-pentest-playbook/attacking-login-portals/password-spraying-o365.md)
- [Password Spraying OWA](https://pnpt.adot8.com/external-pentest-playbook/attacking-login-portals/password-spraying-owa.md)
- [Attacking Other Portals](https://pnpt.adot8.com/external-pentest-playbook/attacking-login-portals/attacking-other-portals.md)
- [Bypassing MFA](https://pnpt.adot8.com/external-pentest-playbook/attacking-login-portals/bypassing-mfa.md)
- [Escalating Access](https://pnpt.adot8.com/external-pentest-playbook/escalating-access.md)
- [Common Pentest Findings](https://pnpt.adot8.com/external-pentest-playbook/common-pentest-findings.md)
- [Insufficient  Authentication Controls](https://pnpt.adot8.com/external-pentest-playbook/common-pentest-findings/insufficient-authentication-controls.md)
- [Weak Password Policy](https://pnpt.adot8.com/external-pentest-playbook/common-pentest-findings/weak-password-policy.md)
- [Insufficient Patching](https://pnpt.adot8.com/external-pentest-playbook/common-pentest-findings/insufficient-patching.md)
- [Default Credentials](https://pnpt.adot8.com/external-pentest-playbook/common-pentest-findings/default-credentials.md)
- [Insufficient Encryption](https://pnpt.adot8.com/external-pentest-playbook/common-pentest-findings/insufficient-encryption.md)
- [Information Disclosure](https://pnpt.adot8.com/external-pentest-playbook/common-pentest-findings/information-disclosure.md)
- [Username Enumeration](https://pnpt.adot8.com/external-pentest-playbook/common-pentest-findings/username-enumeration.md)
- [Default Web Pages](https://pnpt.adot8.com/external-pentest-playbook/common-pentest-findings/default-web-pages.md)
- [Open Mail Relays](https://pnpt.adot8.com/external-pentest-playbook/common-pentest-findings/open-mail-relays.md)
- [IKE Agressive mode](https://pnpt.adot8.com/external-pentest-playbook/common-pentest-findings/ike-agressive-mode.md)
- [Unexpected Perimeter Services](https://pnpt.adot8.com/external-pentest-playbook/common-pentest-findings/unexpected-perimeter-services.md)
- [Insufficient Traffic Blocking](https://pnpt.adot8.com/external-pentest-playbook/common-pentest-findings/insufficient-traffic-blocking.md)
- [Undetected Malicious Activity](https://pnpt.adot8.com/external-pentest-playbook/common-pentest-findings/undetected-malicious-activity.md)
- [Historical Account Compromises](https://pnpt.adot8.com/external-pentest-playbook/common-pentest-findings/historical-account-compromises.md)
- [Concluding the External Pentest](https://pnpt.adot8.com/external-pentest-playbook/concluding-the-external-pentest.md)
- [Client Debriefs](https://pnpt.adot8.com/external-pentest-playbook/concluding-the-external-pentest/client-debriefs.md)
- [Attestation Letters](https://pnpt.adot8.com/external-pentest-playbook/concluding-the-external-pentest/attestation-letters.md)
- [Client Retests](https://pnpt.adot8.com/external-pentest-playbook/concluding-the-external-pentest/client-retests.md)
- [Wreath - Try Hack Me](https://pnpt.adot8.com/external-pentest-playbook/wreath-try-hack-me.md)
- [Recon](https://pnpt.adot8.com/external-pentest-playbook/wreath-try-hack-me/recon.md)
- [Enumeration](https://pnpt.adot8.com/external-pentest-playbook/wreath-try-hack-me/enumeration.md)
- [80,443](https://pnpt.adot8.com/external-pentest-playbook/wreath-try-hack-me/enumeration/80-443.md)
- [10000](https://pnpt.adot8.com/external-pentest-playbook/wreath-try-hack-me/enumeration/10000.md)
- [Foothold \[prod-serv\]](https://pnpt.adot8.com/external-pentest-playbook/wreath-try-hack-me/foothold-prod-serv.md)
- [Pivoting](https://pnpt.adot8.com/external-pentest-playbook/wreath-try-hack-me/pivoting.md)
- [10.200.101.150 \[git-serv\]](https://pnpt.adot8.com/external-pentest-playbook/wreath-try-hack-me/pivoting/10.200.101.150-git-serv.md)
- [Pivoting](https://pnpt.adot8.com/external-pentest-playbook/wreath-try-hack-me/pivoting/10.200.101.150-git-serv/pivoting.md)
- [Post Exploitation](https://pnpt.adot8.com/external-pentest-playbook/wreath-try-hack-me/pivoting/10.200.101.150-git-serv/post-exploitation.md)
- [C2](https://pnpt.adot8.com/external-pentest-playbook/wreath-try-hack-me/pivoting/10.200.101.150-git-serv/c2.md)
- [10.200.101.100](https://pnpt.adot8.com/external-pentest-playbook/wreath-try-hack-me/pivoting/10.200.101.100.md)
- [Pivoting](https://pnpt.adot8.com/external-pentest-playbook/wreath-try-hack-me/pivoting/10.200.101.100/pivoting.md)
- [Enumeration](https://pnpt.adot8.com/external-pentest-playbook/wreath-try-hack-me/pivoting/10.200.101.100/enumeration.md)
- [Code Analysis](https://pnpt.adot8.com/external-pentest-playbook/wreath-try-hack-me/pivoting/10.200.101.100/code-analysis.md)
- [Exploit](https://pnpt.adot8.com/external-pentest-playbook/wreath-try-hack-me/pivoting/10.200.101.100/exploit.md)
- [Priv Esc](https://pnpt.adot8.com/external-pentest-playbook/wreath-try-hack-me/pivoting/10.200.101.100/priv-esc.md)
- [Exfil](https://pnpt.adot8.com/external-pentest-playbook/wreath-try-hack-me/pivoting/10.200.101.100/exfil.md)