Dumpster diving is a technique used in which stage of penetration testing methodology?

The Attack phase involves actively exploiting identified vulnerabilities against the target system, whereas dumpster diving is a passive information-gathering technique that precedes exploitation.

The Discovery phase involves gathering information about the target organization through passive and active reconnaissance methods, including dumpster diving - physically searching through discarded materials (trash) to find sensitive documents, credentials, network diagrams, or other useful data. This information is then used to plan and execute later attack phases, making it a reconnaissance activity by definition.

The Reporting phase occurs after testing is complete and involves documenting findings, vulnerabilities, and recommendations - no active information gathering like dumpster diving takes place here.

The Planning phase focuses on defining the scope, rules of engagement, and objectives of the penetration test, not on gathering intelligence about the target through techniques like dumpster diving.