pentesting

Authorized vulnerability hunting

Pentesting is short for penetration testing—authorized attempts to break into computer systems, networks, or applications to find security vulnerabilities before malicious hackers do.

A pentest simulates real attacks: We hired a firm to pentest our infrastructure before launch.

Those who do this work are pentesters or, more formally, penetration testers.

methodology

exploitation

Selfish use of others

reconnaissanceInformation-gathering before action
enumerationSequential listing of items
scanningSystematic visual examination

footprinting · red-team · scope · proof-of-concept · pivoting · reporting · remediation

professional

white-hat

Authorized security tester

certifiedOfficially declared valid
engagementCommitment to wed or attend
clientOne who hires professionals

NDA · compliance · audit · report · findings · disclosure · consultant · authorization · legal

vulnerabilities

zero-day

Unpatched security vulnerability

misconfigurationIncorrect system setup

tools

Hydra

Multi-headed mythical serpent

nucleiCentral parts of atoms
payloadsCarried goods for delivery
scriptsWritten texts for performances

wordlists

targets

APIs

Software communication protocols

networksInterconnected groups or channels
wirelessUntethered signal transmission
databasesOrganized electronic information collections

firewalls · endpoints · servers · containers · VPNs

Opposites

intent and authorization

pentestingcyberattack

Malicious digital intrusion

unauthorized access · cracking · data breach · cybercrime · ransomware attack

security methodology

pentestingdefense in depth

Redundant protective barriers throughout

threat detection · access control

security posture

pentestingdefense

Protection against harm

network defense · access control · perimeter defense · cyber defense · security theater

Family

pen, pens, penned, penning, test, tests, tested, testing, tester

Familiarity: Top 1,000,000
Profile: Used worldwide · Rated G