Penetration testing – Exploitation: A phase of a penetration test where identified vulnerabilities are actually attacked. The tester attempts to exploit these vulnerabilities in a controlled manner to emulate potential attacks an actual hacker could perform. The goal of this phase is not to cause damage but rather to understand the depth of access an attacker could potentially achieve and what kind of data or control they might be able to obtain.
Categories: CC D5: Security Operations | CCSP D4: Cloud Application Security | CISM D4: Incident Management | CISSP D6: Security Assessment and Testing | Security+ D5: Security Program Management and Oversight | SSCP D3: Risk Identification Monitoring and Analysis
« Back to Glossary Index