> ## Documentation Index
> Fetch the complete documentation index at: https://notes.chaelsoo.me/llms.txt
> Use this file to discover all available pages before exploring further.

# Methodology & Assessments

Pentesting is not a linear checklist. It is a loop of enumeration, hypothesis, and exploitation. The pages here cover the mindset and workflow that structure that loop across different engagement types.

<CardGroup cols={2}>
  <Card title="Pentest Mindset" icon="lightbulb" href="./mindset">
    How to think about attack surfaces, prioritize findings, and avoid rabbit holes
  </Card>

  <Card title="Box Solving Workflow" icon="square-check" href="./workflow">
    Step-by-step approach for working through HackTheBox and CTF machines from initial recon to root
  </Card>
</CardGroup>

<Tip>
  Resist jumping to exploitation before thorough enumeration. When stuck, the answer is almost always more enumeration, not a different exploit.
</Tip>