Penetration testing is a simulated cyber attack to assess system vulnerabilities, involving white-hat hackers using various tools and techniques to breach the system. There are three methodologies: black box, white box, and gray box testing. A penetration test consists of five phases: reconnaissance, scanning and enumeration, vulnerability identification, exploitation, and post-exploitation.