A test conducted by external consultants or specialized security firms, who use external access points, such as the internet, to identify vulnerabilities that could be exploited by malicious actors from outside without physical access to the premises or internal networks of the organization.

A test performed remotely using methods and tools to simulate attacks from external threats without the need for internal network or system access to the organization, in order to discover potential vulnerabilities that could be exploited by malicious actors.

A test conducted to identify vulnerabilities by analyzing systems from the perspective of an internal user or system administrator, utilizing access to the organization's internal resources and networks.

A test carried out exclusively by the organization's internal staff without involving external experts or services, usually for the purpose of internal security checks and assessing vulnerabilities from the perspective of potential internal threats.

Network

Internet

Endpoint

Perimeter

Data

Zero-day

Perimeter layer

Threat

Cipher

Asset

A centralized repository that contains detailed information about known vulnerabilities in software and hardware, including descriptions, impact, detection methods, and remediation recommendations.

A tool for automating code analysis to detect potential vulnerabilities based on known patterns and signatures.

An interactive tool for conducting penetration testing using a database of known exploits, which allows automating the vulnerability detection process and assessing the security level of the system

A system for storing and managing confidential information, such as passwords, certificates, and encryption keys, with the ability to monitor their use and availability.

Nmap cannot identify old operating systems

The target is not running port 80

The target device does not have any open ports

The target device is running a firewall

TCP

ICMP

ARP

UDP

The logs get wiped, there is no trace of the scan

The SYN has no options so the target will not connect

The handshake does not complete - it might not be logged

The scan only check port 80 so it does not like an Nmap scan