In penetration tests, it is tried to infiltrate and seize the information infrastructure of an institution by using the methods used by cybercriminals in the real world. Thus, security guards performing penetration test-Pentest ensure that when a real attack is encountered, the vulnerable points of the system are repaired and security is tightened by thinking like a hacker, applying infiltration and hijacking scenarios, and trying all the methods that the attackers can try. Licensed or open-source tools are used in penetration tests, and all vulnerabilities are identified and corrected as much as possible by applying manual tests specific to the institution as well as automated scanning tools.

OBJECTIVES OF PENETRATION TESTS:
 Testing and auditing the efficiency of the organizations security policies and controls
 Implementing vulnerability and vulnerability scanning internally and externally
 To provide usable data to audit teams collecting data for compliance with standards
 Reducing the cost of security audits by providing comprehensive and detailed analysis of the security capacity of the organization
 Systematize the application of patches suitable for known vulnerabilities
 To reveal the risks and threats existing in the network and systems of the organization
 Evaluate the efficiency of network security devices such as firewalls, routers, and web servers
 Presenting a comprehensive plan that identifies actions that can be taken to prevent future attacks, infiltration, and exploitation attempts.
 Determine if the existing software hardware or network infrastructure needs a change or upgrade Before penetration testing, the organization needs to conduct a risk assessment that will reveal the major threats that the network may face.

PENETRATION TESTS: ExternalSecurity Check, Server Security Analysis, Network DevicesSecurity Analysis, Wired and Wireless Network Vulnerabilities Check, Branch Security Check, Access Control Checks, Web Application Vulnerabilities Check, Device Drop Test, DDOS Test, DNS Firewall Test, Data Internal Tests of Bases, SIEM Testing, Network PassingPackets Monitoring, OneArm IDS Testing, Threat IntelligenceQuery

Phishing TESTS: Phishing by mail, Phishing with official text, Phishing by phone IMPROVEMENTS: Tightening Windows Servers, TighteningLinux Servers, Configuration Control of Network Devices