Vulnerability and port scanning cannot identify the issues that manual testing can, and this is the reason that an organization hires penetration testers to conduct these assessments. Delivering scans instead of manual testing is a form of fraud and is, in my opinion, highly unethical. If you can't cut it testing, then practice, practice, and practice some more. You will learn legal ways to up your tradecraft later in this book.

In the following sections, we will dive into various types of penetration tests.