In pentesting, what is the bundle of commands that is executed together called?

• A. A patch set
• B. A script
• C. A workflow
• D. A runbook

Answer: (B)

A script is a file containing a sequence of commands that can be executed as a unit to automate tasks. In pentesting, scripts are used to automate repetitive steps like scanning, enumeration, exploitation, and data collection, so you can run everything in one go and reuse the same set of actions across targets. A script can be written in languages like Bash, Python, or PowerShell and can include logic, loops, and error handling to handle variations in targets.

A patch set refers to a collection of patches or updates applied to software, not a bundled execution of commands. A workflow describes the overall process or sequence of steps across tools to achieve a goal, not a single file of executable commands. A runbook is a documented set of procedures for operations or incident response, focusing on how to proceed rather than the actual executable bundle of commands.