Penetration testing makes use of the same instruments, methods, and practises that actual criminal hackers do. Blackhat techniques frequently used include phishing, SQL injection, brute force, and the use of customised malware.