1.8 techniques used in penetration testing

Question 1

Known environment

Answer 1

Also known as white box tests, are tests performed with full knowledge of the underlying tech, configs and settings that make up the target

Question 2

Unknown environment

Answer 2

Also known as black box tests, tests intended to replicate what an attacker would encounter. Testers are not provided much info on what they are testing.

Question 3

Partially known environment

Answer 3

This is a blend of black and white boxes. They provide some information on the environment but not full access

Question 4

rules of engagement

Answer 4

These are scoping agreements that define what will be tested as well as problem handling and resolution.

Question 5

lateral movement

Answer 5

This is also considered pivoting, this occurs as the attacker uses the initial system compromise to gain access to other systems on the target network.

Question 6

privilege escalation

Answer 6

This uses hacking techniques to shift from the initial access gained by the attacker to more advanced privileges

Question 7

persistence

Answer 7

This allows attackers to regain access to the network

Question 8

cleanup

Answer 8

This is restoring systems to normal working order and removing traces of their activity

Question 9

bug bounty

Answer 9

These are programs put in place by organizations to use outside talent to conduct security testing of an organizations public services.

Question 10

pivoting

Answer 10

Same as lateral movement

Question 11

drones

Answer 11

Testers use drones to eavesdrop on facilities and connect to the network

Question 12

war flying

Answer 12

Testers using drones and unmanned aerial vehicles to access networks at facilities.

Question 13

war driving

Answer 13

Testers driving by facilities in a car equipped with high-end antennas and attempt to eavesdrop or connect wireless networks

Question 14

footprinting

Answer 14

This identifies the operating systems and applications in use

Question 15

OSINT

Question 16

Red team

Answer 16

attackers that attempt to gain access to systems

Question 17

blue team

Answer 17

The defenders who must secure systems and networks from an attack

Question 18

white team

Answer 18

These are the observers and judges

Question 19

purple team

Answer 19

The combination of knowledge from the red and blue teams.