Exercise 1: Mapping PTES's Seven Phases to This Course's Own Chapters — Possible Solution ==================================================================== THE TASK ------------------------------ Map each of PTES's seven phases to the specific chapter of this course that corresponds to it, using the chapter's own tip-box. THE MAPPING, PER THE CHAPTER'S OWN TIP-BOX ------------------------------ 1. Pre-engagement Interactions -> pentest1-1 / pentest1-2 (authorization, what the engagement actually is, and scope) 2. Intelligence Gathering -> pentest1-4 (Reconnaissance & OSINT) 3. Threat Modeling -> (folded into the intelligence gathering / vulnerability analysis arc rather than given its own standalone chapter in this course; the chapter's tip-box does not assign Threat Modeling its own dedicated chapter number) 4. Vulnerability Analysis -> pentest1-5 (groundwork) and pentest1-6 (the phase proper) Per the chapter: "pentest1-5 extends that into active Vulnerability Analysis groundwork" and "pentest1-6 is Vulnerability Analysis proper." 5. Exploitation -> pentest1-7 6. Post Exploitation -> pentest1-8 7. Reporting -> pentest1-9 WHY THIS WORKS AS AN ANSWER ------------------------------ It reproduces the chapter's own stated mapping precisely, including being honest that the chapter's tip-box does not explicitly assign a standalone chapter to PTES's own Threat Modeling phase — rather than inventing a mapping the chapter didn't actually state.