Penetration Testing Concepts
A penetration test is an intrusive test where a third party has been authorized to carry out an attack on a company's network to identify weaknesses. The intrusive tests used by them can cause damage to your systems.
Penetration testing is commonly known as pen testing. Pen testers are given different amounts of information, including the following:
- Black Box: Black box pen testers work in an unknown environment and are given no information on the company. They will carry out an initial exploitation looking for vulnerabilities.
- Gray Box: Gray box pen testers work in a partially known environment as they are given limited information.
- White Box: White box pen testers work in a known environment. One of the purposes of a white box pen tester is to test applications in a sandbox so that when they are released, they do not have any vulnerabilities. They know everything about a system or application as they have access to an application...
