Penetration testing often involves strategies like scanning networks, searching for vulnerabilities gathering information using manipulation, taking advantage of known weaknesses cracking passwords escalating privileges and attempting to extract data. These methods replicate real-life attack scenarios to discover flaws in the infrastructure, applications and security measures.