Before executing a penetration test on a system or network, we must first create the rules of engagement or a plan of action. It won't be professional if a penetration tester simply rushes into a network and launches random attacks against the target. In addition, having a plan of action makes the job at hand a bit simpler when deciding on the tools and types of attacks based on the vulnerabilities on the target.
The pre-attack phase focuses on the planning and preparation of the penetration test, this is done prior to any direct engagements to the target system or network. During this phase, the penetration tester would be creating an arsenal of tools, scripts, and operating systems to be used during the attack phase. Determining a penetration methodology prior to the actual penetration test is quite important, it will create a systematic approach in achieving each objective of the pen test.
We must not forget one of the most important objectives...