Pregame : the setup -- Before the snap : scanning the network -- The drive : exploiting scanner findings -- The throw : manual web application findings -- The lateral pass : moving through the network -- The screen : social engineering -- The onside kick : attacks that require physical access -- The quarterback sneak : evading AV -- Special teams : cracking, exploits, tricks -- Post game analysis : reporting -- Continuing education -- Final notes