In this chapter, we have seen several exploitation and penetration testing scenarios that we can perform using various services, such as databases, VOIP, SCADA, and even iDevices. Throughout this chapter, we learned about SCADA and its fundamentals. We saw how we can gain a variety of information about a database and how to gain complete control over it. We also saw how we could test VOIP services by scanning the network for VOIP clients and spoofing VOIP calls as well.

In the next chapter, we will see how we can perform a complete penetration test using Metasploit and various other popular scanning tools used in penetration testing. We will cover how to systematically proceed while carrying out penetration testing on a given subject. We will also take a look at how we can create reports and what should be included in or excluded from those reports.