Penetration testing methodology based on manual techniques conducted by ethical hackers, as opposed to automated scans. Includes in-depth analysis of application logic, business logic flaws, complex privilege escalation, and attack chains that require human reasoning and creativity in exploitation. Essential for identifying vulnerabilities that automatic scanners do not detect.