Comment by hn8788
4 years ago
It depends on the organization. Most that I've worked with have said everything is fine except for social engineering, but some want to know every tool you'll be running, and every type of vulnerability you'll try to exploit.
Yes, and a bank branch for example could be very interested in some social engineering to test physical security.
It is very varied. There are a lot of good and enjoyable stories out there on youtube and podcasts for anyone interested.
I tried google much but there were too many results haha. Do you have a few that you recommend?