phase of penetration testing pre-attack phase, attack phase and post-attack phase