The steps involved in order to attack computer systems and networks to learn how to security harden them. Ideally, all applicable attack entities are tested- software, hardware, networking, physical security and social engineering.