penetration tests
Authorized hacking assessments
Penetration tests are authorized simulated cyberattacks on computer systems, networks, or applications to identify security vulnerabilities before malicious hackers can exploit them.
Security professionals—often called pen testers or ethical hackers—attempt to breach defenses using the same techniques real attackers would.
The company hired a firm to run penetration tests on their new payment system.
Often shortened to pen tests.
Evaluating likelihood of harm
- complianceAdhering to requirements
- red teamSimulated attackers testing defenses
- blue teamDefensive cybersecurity group
- scopeExtent or range
report · findings · remediation · methodology · reconnaissance · enumeration · exploitation · documentation
Fraudulent credential harvesting
- social engineeringManipulating people for information
- privilege escalationGaining unauthorized higher permissions
- buffer overflowExceeding allocated memory bounds
- brute forcePower over technique
man-in-the-middle · credential stuffing · fuzzing · lateral movement
Unpatched security vulnerability
- exploitNotable act or abuse
- misconfigurationIncorrect system setup
risk assessment
Evaluating likelihood of harm
- complianceAdhering to requirements
- red teamSimulated attackers testing defenses
- blue teamDefensive cybersecurity group
scope · report · findings · remediation · methodology · reconnaissance · enumeration · exploitation · documentation · rules of engagement
phishing
Fraudulent credential harvesting
- social engineeringManipulating people for information
- privilege escalationGaining unauthorized higher permissions
- buffer overflowExceeding allocated memory bounds
brute force · man-in-the-middle · credential stuffing · fuzzing · lateral movement
Hydra
Multi-headed mythical serpent
war game
Mock military operation
zero-day
Unpatched security vulnerability
- exploitNotable act or abuse
- misconfigurationIncorrect system setup
penetration testscyberattacks
Malicious digital intrusions
hacking · data breaches · unauthorized access · exploitation · network intrusion
penetration testsremediation
Act of correcting faults
patching · mitigation · bug fixes · security updates · risk mitigation
penetration, test, penetrate, penetrating, penetrated, penetrates, penetrative, impenetrable, tests