Penetration testing process looks like this:
Gathering and testing the project requirements.
Creating a testing strategy.Discovering vulnerabilities.
Exploiting them to find bottlenecks and solidify the security.
Creating testing reports
Fixing the issues if needed.