which penetration testing methodology is similar to other methodologies but has some additional phases like enumerating further or covering tracks