Penetration Testing
16 terms in this topic area.
Brute-Force Attack
A brute-force attack guesses passwords or keys by trying many options. See how it works, which weak spots it exploits and how to protect your accounts.
Bug Bounty
What is a bug bounty? How bug bounty programs work, how they differ from pentests and VDPs, platforms, rewards, legal questions and tips for getting started.
Credential Stuffing
What is credential stuffing? How attackers exploit leaked passwords, how it differs from brute force and password spraying, detection and good protection.
Ethical Hacking
Ethical hacking finds vulnerabilities through authorized, planned attacks. See its tools, benefits and challenges for IT security.
Gold Teaming
What is gold teaming? The crisis exercise for executives and boards explained: origin, how it differs from red, blue and purple teaming, process and scenarios.
Mobile Application Security Testing
Mobile Application Security Testing (MAST) checks mobile apps for weak spots. See typical vulnerabilities, tools and techniques.
Pass-the-Hash Attack Simulation
A pass-the-hash attack simulation tests hash-based authentication. It helps harden systems against credential theft and misuse.
Password Spraying
Password spraying tries a few common passwords across many accounts. See how these attacks work, how to detect them and how to protect your systems.
Penetration Test
A penetration test finds security vulnerabilities. See how a pentest works and why regular testing protects your IT infrastructure.
Physical Penetration Testing
Physical penetration testing finds physical security gaps, such as weak access controls and surveillance blind spots. It helps you fix them.
Purple Teaming
Purple teaming brings attackers and defenders together. They find and fix weaknesses faster as one team.
Red Team Assessments
A red team assessment is a realistic security test. See how it strengthens your cybersecurity and which benefits and safeguards it brings.
Red Team vs. Blue Team
In red team versus blue team, one side attacks and the other defends. See what each team does and how they work together.
Red Teaming
Red teaming tests your cyber defenses with simulated attacks. See how these tests help you improve your security measures.
Static Application Security Testing (SAST)
Static Application Security Testing (SAST) checks source code for vulnerabilities. See how it works, its benefits, limits and place in development.
Vulnerability Assessment
A vulnerability assessment finds weak spots in your IT infrastructure. It helps you assess risks and plan remediation.