Security assessment methodology that simulates real attacks on IT infrastructure, web and mobile applications, corporate networks, APIs, and cloud environments to identify exploitable vulnerabilities. Includes reconnaissance, controlled exploitation, privilege escalation, post-exploitation, technical evidence, risk prioritization, and remediation guidance according to frameworks like OWASP, PTES, OSSTMM, and MITRE ATT&CK.