Infrastructure penetration testing involves assessing the security of an organisation's IT infrastructure, including servers, networks, databases, and other critical components, to identify vulnerabilities and potential attack vectors.

Network penetration testing focuses specifically on assessing the security of an organisation's network infrastructure, including routers, switches, firewalls, and other network devices, to identify vulnerabilities and weaknesses that could be exploited by attackers.

Web application penetration testing involves evaluating the security of web-based applications, such as websites, web portals, and web services, to identify vulnerabilities and security flaws that could be exploited by malicious actors.

Mobile application penetration testing assesses the security of mobile applications running on various platforms (e.g., iOS, Android) to identify vulnerabilities and weaknesses that could compromise the confidentiality, integrity, or availability of sensitive data.

Microsoft Azure penetration testing focuses on assessing the security of cloud-based infrastructure, services, and applications hosted on the Microsoft Azure platform, identifying potential vulnerabilities and misconfigurations that could pose security risks to organizations utilizing Azure services.

AWS penetration testing focuses on assessing the security of cloud-based infrastructure, services, and applications hosted on the Amazon Web Services (AWS) platform, identifying potential vulnerabilities and misconfigurations that could pose security risks to organisations utilising AWS services.

Google Cloud Platform penetration testing focuses on evaluating the security of cloud-based services, resources, and applications hosted on Google Cloud Platform (GCP), including virtual machines, databases, and storage solutions.

Black box testing focuses solely on the external behavior of a software application without examining its internal structure or coding, simulating how an end-user interacts with the system.

White box testing, also known as clear box or structural testing, involves examining the internal structure and coding of a software application to ensure that it functions as intended. In this type of penetration test, the tester has complete knowledge of the target system.

Grey box testing involves a combination of knowledge about the internal workings of a system (like white box testing) and external perspective (like black box testing), providing partial access or information to the tester.