Scope definition and information gathering - **Scanning and Enumeration** — Active probing to map the attack surface - **Gaining Access** — Exploiting discovered vulnerabilities - **Maintaining Access / Post-Exploitation** — Demonstrating real-world impact - **Reporting and Remediation** — Communica