Pentest

Definitions

1. Pentest, short for penetration test, is an authorized simulated cyberattack performed against a computer system, network, or application to evaluate its security posture by finding and exploiting vulnerabilities before malicious attackers do. Penetration testers (also called ethical hackers or white-hat hackers) use the same tools and techniques as real attackers, including reconnaissance, scanning, exploitation, and privilege escalation. Testing types include black box (no prior knowledge of the target), white box (full access to source code and architecture), and gray box (partial information). The process typically follows a methodology like PTES or OWASP and concludes with a detailed report documenting discovered vulnerabilities, their severity, evidence of exploitation, and remediation recommendations. Organizations conduct pentests for regulatory compliance (PCI-DSS, HIPAA, SOC 2), risk management, and security validation. Common tools include Burp Suite, Metasploit, Nmap, and Wireshark.

   In plain English: Short for 'penetration test' — a simulated cyberattack performed by friendly hackers to find security holes before the bad guys do.

   Example: "We pentested the new API last week and found three criticals."

Etymology

1965

The term 'penetration' first appears in computer security when a RAND Corporation paper discusses 'penetration' of time-sharing systems

1995

Dan Farmer and Wietse Venema release SATAN, one of the first automated penetration testing tools, sparking controversy

2003

The OWASP Testing Guide formalizes web application penetration testing methodology

2010s

'Pentest' becomes a career path; certifications like OSCP standardize professional qualifications

Related Terms

• Penetration Testing
• Red Team
• Nmap
• Fuzzing
• Feature Abuse
• Initial Access
• Pentest Tool
• Poison Pill
• Rich Text Attack