GIAC Penetration Tester (GPEN): key terms

Flashcards for this exam GIAC Penetration Tester (GPEN) guide

• Active ReconnaissanceGathering information by directly interacting with target systems, such as scanning or probing services.Foundational
• Authorization LetterWritten permission from an asset owner allowing testers to attack specified systems, sometimes called a get-out-of-jail-free letter.Foundational
• Open-Source Intelligence (OSINT)Intelligence collected from publicly available sources such as websites, social media, public records and search engines.Foundational
• Passive ReconnaissanceGathering information about a target without directly interacting with its systems.Foundational
• Penetration Test Planning and ScopingThe first phase of a penetration test, defining objectives, targets, constraints, rules of engagement and legal authorization.Foundational
• Penetration Test ReportThe final deliverable of a pen test, documenting methodology, findings, risk ratings, evidence and remediation recommendations.Foundational
• Penetration TestingAn authorized, simulated attack on systems to find and safely exploit vulnerabilities before real attackers do.Foundational
• Penetration Testing Execution Standard (PTES)A penetration testing methodology defining seven phases from pre-engagement interactions to reporting.Intermediate
• Penetration Testing PhasesThe typical sequence of a penetration test: planning and scoping, reconnaissance, scanning and enumeration, exploitation, post-exploitation, and reporting.Foundational
• PivotingUsing a compromised system as a relay to reach other networks or hosts that are not directly accessible to the tester or attacker.Intermediate
• Post-ExploitationThe pentest phase after initial compromise that assesses what an attacker could achieve, such as privilege escalation, lateral movement and data access.Intermediate
• ReconnaissanceThe information-gathering phase of an attack or test, identifying targets, technologies and people before exploitation.Foundational
• Rules of Engagement (RoE)The document defining how a security test will be conducted: timing, targets, allowed techniques, contacts and limits.Foundational