Security Advanced

What is Penetration Testing?

An authorized simulated cyberattack on a system to evaluate its security defenses and identify vulnerabilities.

Penetration testing (pen testing) mimics real-world attacks to find security weaknesses before malicious actors do. Phases include reconnaissance, scanning, exploitation, post-exploitation, and reporting.

Types include black box (no knowledge), white box (full access), and gray box (partial knowledge). Tools include Metasploit, Burp Suite, Nmap, and OWASP ZAP. Regular pen testing is essential for security compliance and risk management.

Learn More About This Topic

Ethical Hacking & Penetration Testing

Directly covers this topic

SOC Analyst Fundamentals

Related reading

SOC Analyst Advanced: Incident Response & Forensics

Related reading

Related Terms

Supply Chain Attack

A cyberattack that targets less-secure elements in the software supply chain to compromise downstream users and organizations.

A technique that controls the number of requests a client can make to a server within a specified time period.

Vulnerability Scanning

Automated testing that identifies known security weaknesses in systems, applications, and network infrastructure.

PKI (Public Key Infrastructure)

A framework of policies, hardware, and software for creating, managing, distributing, and revoking digital certificates.

Webhook Signature Verification

A security mechanism that verifies webhook payloads are authentic and unmodified using cryptographic signatures.

A social engineering attack that uses fraudulent communications to trick people into revealing sensitive information or installing malware.

View All Security Terms →