comptia sec+ section 1

Deceptive online attempts to acquire sensitive information from individuals, often by impersonating trusted sources or organizations.

Phishing conducted through text messages or SMS, using misleading messages to obtain personal data.

Voice-based phishing using phone calls, where attackers pretend to be legitimate entities to extract sensitive information.

Unsolicited and often irrelevant messages, frequently containing advertisements, scams, or unrelated content, sent to a large number of recipients.

Unwanted messages, including potential threats, sent over instant messaging platforms to disrupt users' communication.

Targeted phishing attacks that craft personalized deceptive messages, frequently with knowledge about the recipient to enhance credibility.

Scouring discarded materials, like trash or documents, to uncover potentially confidential or sensitive information.

Observing someone's screen, keyboard, or activities in public to illicitly obtain private information.

Cyberattacks that manipulate DNS settings or exploit system vulnerabilities to redirect users to fake websites.

Unauthorized entry into secure areas by following authorized personnel, often without proper authentication.

Using manipulation or social engineering to subtly extract confidential knowledge from individuals.

A form of phishing that targets high-profile individuals or organizations for financial gain or data theft.

A technique used in cyber attacks to add specific characters or data at the beginning of a file or message, often to evade security measures or manipulate data.

The act of stealing personal information, such as a person's name and financial details, to impersonate them and engage in financial fraud, such as opening fraudulent accounts or making unauthorized purchases.

Deceptive schemes involving the sending of counterfeit invoices or bills to individuals or organizations, tricking them into making payments for fictitious products or services.

The process of collecting usernames, passwords, or other authentication data from individuals, often through deceptive means, with the goal of gaining unauthorized access to their accounts or systems.

The initial phase of a cyber attack where attackers collect specific information about potential targets, their vulnerabilities, and network configurations to plan and execute their attacks effectively.

A deliberately false or misleading statement or piece of information that is intentionally created to deceive or mislead individuals, often for humor or misinformation.

The act of pretending to be someone else, either in person or online, with the intent to deceive, manipulate, or commit fraud, such as impersonating a colleague or a trusted entity to steal information.

An attack strategy that targets websites or locations frequently visited by specific groups or organizations, compromising these sites to infect visitors with malware or collect information about the target group.

Creating websites or domain names that closely resemble legitimate ones, exploiting common typing errors, with the aim of deceiving users into visiting malicious sites or revealing sensitive information.

Using fabricated scenarios or pretexts to manipulate individuals into revealing confidential information, often through pretext phone calls that appear legitimate.

Deliberate efforts, often on social media or through misinformation, to shape public opinion, behaviors, or achieve specific political, social, or economic outcomes, such as altering public perception during elections.

A military and political strategy combining conventional and unconventional tactics, including cyber attacks, disinformation, and propaganda, to achieve strategic objectives in conflict or competition, often with the aim of sowing confusion and achieving political influence.

Social engineers employ this technique to take advantage of the perception of power and control, exploiting individuals' trust in someone who appears to have legitimate influence or superiority, leading to their manipulation.

Social engineers use tactics that induce fear and anxiety, coercing individuals into complying with their demands due to the fear of potential negative consequences or harm.

This method relies on creating a false sense of agreement or peer pressure to manipulate individuals into conforming to what they believe is the collective choice, thus guiding their actions.

Social engineers leverage the concept of limited resources or time-sensitive opportunities, encouraging targets to take hurried actions they might not otherwise contemplate.

By appearing familiar or known to the target, social engineers exploit the trust that naturally arises from such familiarity, which can lead to the disclosure of sensitive information or the granting of access.

The foundation of many social engineering attacks is the establishment of trust through rapport building, impersonation, or affiliations that are not what they seem, ultimately gaining the target's confidence and cooperation.

Attackers create a sense of time pressure to force targets into quick decisions without the opportunity for careful consideration, leading to impulsive actions that serve the attacker's objectives.

Malicious software that encrypts a victim's files and demands a ransom for the decryption key, often causing data loss and financial damage.

Malware disguised as legitimate software, which, once installed, provides unauthorized access or functionality to an attacker.

Self-replicating malware that spreads across networks and systems, often consuming network resources and causing damage.

Software that, while not inherently malicious, may have unwanted or harmful effects on a system and is typically installed without the user's consent.

Malware that operates in system memory rather than on disk, making it harder to detect and remove.

A server or communication channel used by malware to receive instructions and transmit data to and from an attacker, allowing them to control infected systems.

Automated software programs that perform tasks on the internet, often used for malicious purposes, such as launching DDoS attacks.

Malware that encrypts data, rendering it inaccessible until a ransom is paid, making it a type of ransomware.

Code or software that is set to execute under specific conditions, often designed to cause harm or damage when triggered.

Software that covertly collects information about a user's online activities, such as browsing habits and personal information, typically for malicious purposes.

Malicious software or hardware that records keystrokes, often used to capture sensitive information like passwords and credit card details.

Malware that allows an attacker to gain remote control of an infected computer, potentially for purposes such as spying or data theft.

A type of malware that provides unauthorized access and control over a computer or network while hiding its presence, making it hard to detect and remove.

A hidden or undocumented means of gaining access to a computer or network, often exploited by attackers to maintain persistent access.

A type of attack where an attacker attempts to gain unauthorized access by trying a small number of common passwords against a large number of accounts, reducing the likelihood of account lockouts.

A list of words or commonly used passwords that attackers often use for password guessing attacks, like dictionary attacks.

An attack in which an attacker systematically tries a wide range of possible passwords or encryption keys until the correct one is found, typically by making numerous login attempts against an online service.

An offline attack which the attacker has obtained a copy of encrypted data (e.g., password hashes) and can crack them without direct access to the target system.

A precomputed table of encrypted or hashed passwords, used to speed up password cracking by looking up the hash to find the corresponding plaintext password.

Data that is in its original, readable form, not protected by encryption or hashing, and is vulnerable to theft or manipulation if not properly secured.

A USB cable modified or designed to carry out malicious activities when connected to a device, such as data theft, malware injection, or device compromise.

A USB storage device that contains malware or malicious software, often used to infect computers or networks when inserted.

The process of duplicating the information stored on a payment card's magnetic stripe or chip, allowing attackers to create counterfeit cards for fraudulent transactions.

A technique used to steal sensitive data from payment cards, such as credit card information, by placing a device (skimmer) on a legitimate card-reading system, like an ATM or gas pump, to capture card data without the victim's knowledge.

A branch of AI that focuses on creating AI models that are capable of defending against adversarial attacks, as well as AI models that are designed to launch such attacks, often used in cybersecurity for threat detection.

Training data that has been intentionally manipulated or poisoned to mislead machine learning models, potentially leading to incorrect predictions or decisions.

The practices and measures taken to protect machine learning algorithms and models from various threats, including adversarial attacks, data poisoning, and model theft.

Cyberattacks that target the supply chain, aiming to compromise hardware or software components during the production, distribution, or installation process, which can lead to widespread security breaches.

Distinctions between attacks on cloud-based infrastructure and on-premises systems, often related to different security considerations, responsibilities, and risks depending on the deployment environment.

Attacks that exploit weaknesses or vulnerabilities in cryptographic systems to compromise data security or privacy, including methods to break encryption.

type of cryptographic attack that exploits the birthday paradox and refers to the likelihood of two different pieces of data having the same hash value when using hash functions, which can be exploited in collision attacks.

Attack in cryptography where two different inputs produce the same hash value, which can be exploited in various attacks, such as collision attacks on digital signatures or password hashes.

A security attack where an attacker forces a system to use older or less secure protocols or encryption methods, making it vulnerable to known vulnerabilities.

The process by which an attacker gains elevated permissions or privileges, often going from a lower-privileged user to a higher-privileged user, enabling them to access restricted resources or execute unauthorized actions.

A web security vulnerability where attackers inject malicious scripts into web pages viewed by other users, potentially stealing their data, compromising their sessions, or performing other malicious actions.

An attack that occurs when an attacker injects malicious SQL statements into input fields of a web application, exploiting vulnerabilities in the application's code to access or manipulate the database.

A technique where an attacker injects malicious code or libraries into a running process, often used to exploit vulnerabilities in software, gain control over a system, or compromise its security.

An attack where an attacker manipulates LDAP queries to a directory service, often used to gain unauthorized access, retrieve sensitive information, or perform other malicious actions.

A type of attack where an attacker injects malicious XML content into an application, potentially leading to security vulnerabilities and data exposure.

A security issue that arises when a program attempts to access memory or an object that has not been initialized or is no longer valid, potentially leading to crashes or security vulnerabilities.

An attack where an attacker attempts to access files and directories outside of the intended path, exploiting vulnerabilities in an application's input validation to gain unauthorized access to sensitive files.

A vulnerability in which an attacker writes more data to a buffer (temporary data storage) than it can handle, potentially leading to memory corruption, system crashes, or the execution of malicious code.

These vulnerabilities occur when a program checks the state of a resource or condition at one time and then uses that information at a later time without considering that the state may have changed in the interim, potentially leading to security issues.

The process of identifying and responding to errors in a program or system to prevent them from causing security vulnerabilities or compromising the functionality and reliability of the software.

Refers to the failure to validate, sanitize, or properly process user inputs, which can lead to various vulnerabilities, including injection attacks or buffer overflows.

An attack in which an attacker intercepts and reuses valid data packets or requests to gain unauthorized access to a system or impersonate a legitimate user.

Attacks where an attacker records and replays a user's session or authentication credentials to gain unauthorized access to a system, often used to impersonate the victim.

Occurs when an arithmetic operation generates a result that is too large to be represented using the data type, potentially leading to unexpected behaviors or security vulnerabilities.

An attack where an attacker tricks a server into making unintended requests to internal resources or other external systems, potentially exposing sensitive information or causing security issues.

A type of attack where an attacker tricks a user into performing actions on a web application without their knowledge or consent, often leading to unintended or malicious operations being executed.

Attacks that target the interfaces used by applications to communicate with other software components or services. These attacks can exploit vulnerabilities in the API, potentially leading to unauthorized access or data exposure.

A type of denial-of-service (DoS) attack in which an attacker consumes all available system resources (such as CPU, memory, or bandwidth), making a service or application unavailable to legitimate users.

Occurs when a program or application fails to release memory that it no longer needs, gradually depleting available memory and potentially causing performance issues or system crashes.

A type of attack where an attacker downgrades a secure HTTPS connection to an unencrypted HTTP connection, allowing them to intercept and manipulate data sent between the user and the web server.

A technique used to modify or extend the functionality of a software component, often with malicious intent, by inserting additional code between the application and the component.

The process of restructuring existing source code without changing its external behavior, typically done to improve code readability, maintainability, or performance.

An attack where an attacker captures a hashed version of a user's password and then uses this hash to gain unauthorized access to a system or network without needing to crack the actual password.

A rogue wireless access point that mimics a legitimate Wi-Fi network, often used to trick users into connecting to it and potentially intercept their data or launch attacks.

An unauthorized or malicious wireless access point that provides network access to users without proper authorization, potentially leading to security risks.

An attack that involves unauthorized access to information on a Bluetooth-enabled device, such as a mobile phone, often done to steal personal data or access sensitive information.

A harmless form of wireless hacking where an attacker sends unsolicited messages or data to a Bluetooth-enabled device, typically for fun or to annoy the user.

A method used by attackers to forcibly disconnect a device from a wireless network, potentially leading to service disruption or facilitating other attacks.

A deliberate interference with wireless communications by broadcasting radio signals on the same frequency, often used to disrupt wireless networks or prevent communication.

A technology that uses wireless communication to identify and track objects or individuals, often used in inventory management, access control, and payment systems.

A short-range wireless communication technology used for data exchange between devices, often employed for mobile payments and contactless card transactions.

A random value used in cryptographic algorithms, particularly in encryption, to enhance the security of the process by introducing additional randomness.

An attack in which an attacker intercepts or alters communication between two parties without their knowledge, often used to eavesdrop on data or manipulate it.

A technique used by attackers to link their MAC address to the IP address of another device, leading to unauthorized network access and potentially facilitating man-in-the-middle attacks.

A type of network attack where an attacker floods a network switch with a large number of MAC addresses, causing it to become overwhelmed and potentially disrupting network communications.

A method in which an attacker mimics the MAC address of an authorized device to gain access to a network, often used to bypass security measures based on MAC address filtering.

The unauthorized act of taking control of a domain name by changing its registration information, often leading to disruption of services or redirecting traffic to malicious websites.

An attack where an attacker alters the DNS records of a domain, causing legitimate requests to be redirected to malicious servers, potentially leading to data theft or traffic interception.

A technique used by attackers to redirect website visitors from a legitimate URL to a malicious one, often for phishing or other malicious purposes.

A measure of the trustworthiness and legitimacy of a domain based on its past behavior and activity, often used in email security and spam filtering.

An attack that floods a target network with a high volume of traffic from multiple sources, overwhelming its capacity and causing service disruption.

Similar to network DDoS attacks but focused on overwhelming specific application resources, such as web servers, to make them unavailable.

DDoS attacks that target industrial control systems and critical infrastructure, potentially causing operational disruptions or damage.

A powerful scripting language and automation framework developed by Microsoft, often used for legitimate administration and management of Windows systems. However, it can also be misused by attackers for malicious activities, such as running scripts to compromise systems.

A versatile, high-level programming language that is widely used in cybersecurity for various purposes, including scripting, web development, and ethical hacking.

A command-line shell and scripting language commonly used in Unix-based systems. Can be used for various purposes, including system administration and automation, and may also be leveraged by attackers for malicious actions.

small programs or scripts embedded in documents (e.g., Microsoft Word or Excel) and used to automate tasks. Malicious macros can be used to deliver and execute malware when the document is opened.

A programming language developed by Microsoft for creating custom applications within Microsoft Office programs like Excel, Word, and Access. Can be used to create automated processes, but it can also be exploited by attackers for malicious purposes, such as running malicious code within Office documents.

A type of cyberattack that is typically well-organized, highly sophisticated, and focused on stealthy, long-term infiltration of a target, often state-sponsored or financially motivated.

Security risks that originate from individuals within an organization who misuse their access, knowledge, or privileges to compromise security or data.

Nation-state organizations or government entities that engage in cyber activities for political, military, economic, or intelligence purposes.

Individuals or groups that use hacking techniques for political or social activism, often to promote a specific cause or raise awareness about particular issues.

Individuals with limited technical skills who use existing, pre-written scripts or tools to launch attacks, typically without a deep understanding of the technology involved.

Organized groups engaged in cybercriminal activities, such as identity theft, fraud, or the distribution of malware, for financial gain.

Individuals or organizations with permission to conduct ethical hacking, security testing, or penetration testing to identify and address vulnerabilities in systems.

Individuals or groups who attempt to breach computer systems, networks, or data without legal or ethical authorization.

Individuals or organizations that may have limited or ambiguous authorization for certain activities, blurring the line between ethical and unauthorized hacking.

The use of unauthorized software, applications, or devices by employees or departments within an organization without the knowledge or approval of the IT department.

Rival companies or organizations that may engage in corporate espionage or cyberattacks to gain a competitive advantage or obtain confidential information.

Refers to whether the threat actor originates from within the organization or is external to it, with potential implications for trust and access levels.

Denotes the extent of technical expertise and skills possessed by the threat actor, impacting the complexity of attacks and the tools used.

Signifies the financial or logistical support available to the threat actor, which can determine the scale and effectiveness of their operations.

Describes the underlying reasons or goals driving the threat actor, which may range from financial gain and political motives to activism or espionage.

This attack vector involves physical access to a device, system, or network, allowing an attacker to directly manipulate or compromise the target.

In this attack vector, attackers exploit vulnerabilities in wireless communication protocols or devices to gain unauthorized access to networks or intercept data.

This attack vector involves the use of email as a means to deliver malware, phishing attempts, or malicious links to target individuals or organizations.

Attackers target the supply chain by compromising hardware or software components during production or distribution, which can lead to widespread security breaches.

Attackers leverage social media platforms to gather information, launch phishing campaigns, or spread malicious content to exploit users' trust and habits.

Attackers use removable storage devices, like USB drives, to introduce malware or steal data when the device is connected to a computer or network.

This attack vector pertains to vulnerabilities within cloud services and infrastructure that attackers can exploit to gain unauthorized access or compromise data stored in the cloud.

The practice of gathering information and data from publicly available sources, including websites, social media, and other online platforms, to analyze and understand potential threats.

Refers to software, systems, or information that is not openly accessible to the public and is controlled or owned by specific entities, often requiring permissions or licensing for access.

Repositories that store information about known software vulnerabilities, providing security professionals with details to address and patch these vulnerabilities.

Organizations or platforms where public or private entities share and collaborate on cybersecurity threat information, facilitating the exchange of threat intelligence.

A part of the internet that is intentionally hidden and not indexed by search engines, often used for illegal activities, including the sale of hacking tools, stolen data, and other illicit goods and services.

Data elements or patterns that can indicate a security incident or compromise, helping organizations identify potential threats or breaches.

A system for automating the exchange of threat indicators and cyber threat information between organizations and government entities to enhance cybersecurity.

The use of data, modeling, and analytics to forecast future cyber threats and security risks, helping organizations proactively prepare for potential attacks.

Visual representations of cybersecurity threats, incidents, or vulnerabilities, often displayed on geographic or network maps to help organizations understand the threat landscape.

Platforms or systems where developers store and manage source code and files, often containing vulnerabilities that can be exploited by attackers.

standardized language used to represent and exchange structured threat information. It's designed to express cybersecurity information in a consistent format and helps to communicate and analyze threats effectively.

a protocol that facilitates the exchange of cyber threat intelligence in a standardized and automated manner and defines the methods and services to share STIX information.

Websites maintained by technology and software vendors, often providing product-specific security updates, patches, and advisories.

Subscription-based or publicly available data streams that offer information on the latest security vulnerabilities, patches, and alerts.

Publications containing peer-reviewed research articles and studies related to cybersecurity, offering in-depth analysis and findings from academic research.

A series of documents published by the Internet Engineering Task Force (IETF) that define internet standards, protocols, and best practices, including those related to cybersecurity.

Organizations and associations specific to a particular industry or region that share cybersecurity insights and collaborate on security issues within their respective sectors.

Data sources that provide real-time or periodic updates on cybersecurity threats, including indicators of compromise, attack patterns, and emerging risks.

A collection of information and analysis regarding the methods, tactics, and techniques used by cyber adversaries, enabling organizations to understand and defend against specific threat actors and their strategies.

A type of vulnerability that is exploited by attackers before it is discovered or patched by the software vendor or security community.

Inadequate or insecure settings within a cloud-based environment that can be exploited by attackers to gain unauthorized access or compromise data.

Misconfigured access controls that grant overly permissive privileges to users or applications in the cloud, potentially leading to unauthorized access.

Vulnerabilities associated with privileged accounts or administrator access in cloud services, which, if compromised, can result in significant security breaches.

Security vulnerabilities that result from coding mistakes, misconfigurations, or other unintentional issues within cloud-based environments.

Vulnerabilities related to encryption practices that do not adequately protect data, allowing attackers to potentially intercept or decrypt sensitive information.

Vulnerabilities arising from the use of insecure communication protocols in cloud-based services, increasing the risk of eavesdropping or data interception.

Vulnerabilities that result from leaving default configurations unchanged in cloud services, which may have security weaknesses.

Vulnerabilities arising from open or exposed ports and services in cloud environments, which can provide entry points for attackers.

Challenges related to managing and assessing the security practices of third-party vendors that provide services or components to an organization.

Security concerns related to integrating third-party systems or software into an organization's environment, which may introduce vulnerabilities or compatibility issues.

Vulnerabilities associated with third-party products or services that are no longer supported or updated by the vendor, leaving systems exposed to unpatched security issues.

Risks stemming from vulnerabilities in the supply chain, including the hardware or software components acquired from external sources.

Security challenges related to code or software development outsourced to third-party vendors, including the potential introduction of vulnerabilities.

Vulnerabilities arising from the storage of data with third-party providers, including issues related to data access controls and data privacy.

The software embedded in hardware devices, including components such as microcontrollers, that requires periodic updates to fix security vulnerabilities.

The core software that manages hardware resources and provides essential functions for computing devices. Regular updates are essential to address security flaws.

Software programs that run on an operating system, including applications used in business operations. Security patches are required to address vulnerabilities in these programs.

Outdated hardware or software systems that are no longer actively supported, leading to vulnerabilities due to the absence of security updates.

The unauthorized or accidental removal or destruction of data, which can lead to operational disruptions and potential compliance issues.

Incidents in which sensitive or confidential data is accessed, disclosed, or stolen without authorization, often resulting in legal, financial, and reputational consequences.

The unauthorized transfer of data from a system to an external location, which can lead to data breaches and loss of intellectual property.

The fraudulent acquisition and use of personal information to impersonate an individual for financial gain or other malicious purposes.

Refers to monetary losses or costs incurred as a result of security incidents, including remediation expenses, legal fees, and regulatory fines.

Damage to an organization's image or brand due to security incidents or data breaches, affecting trust among customers, partners, and the public.

The unavailability of critical systems or services, often resulting from cyberattacks or technical failures, which can impact business operations and customer satisfaction.

The process of integrating and analyzing various sources of threat intelligence to gain a comprehensive understanding of potential security threats.

Real-time or periodic updates on cybersecurity threats, including indicators of compromise and attack patterns.

Reports or notifications issued by security organizations or vendors that provide information about vulnerabilities, security issues, and recommended actions.

In the context of threat hunting, this refers to actions taken to respond to and mitigate identified threats or vulnerabilities.

standard used for identifying and naming specific security vulnerabilities or exposures found in software and hardware products. It's a dictionary of publicly known cybersecurity vulnerabilities (each has a unique ID and description)

framework for assessing and rating the severity of security vulnerabilities in a standardized and consistent way. It provides a numerical score that helps organizations prioritize their responses to vulnerabilities.

also known as authenticated scanning, is a scan using valid user credentials to gain access to the target system or application. With these credentials, the scanning tool can perform a more thorough and accurate assessment of vulnerabilities.

also known as unauthenticated scanning, involves scanning a system or network without using valid user credentials. It relies on network-level scans and publicly available information to identify vulnerabilities.

also known as active scanning or aggressive scanning, involves actively probing and interacting with the target systems or applications to identify vulnerabilities. It typically sends test traffic, exploit attempts, or various requests to discover weaknesses.

also known as passive scanning or non-aggressive scanning, involves examining the target systems or networks without actively probing or interacting with them. It primarily relies on observation and information gathering.

Vulnerability scans specifically focused on identifying security issues within software applications.

Vulnerability scans that target web-based applications to find and address security weaknesses.

Vulnerability scans aimed at identifying vulnerabilities in network infrastructure, devices, or services.

The examination of system settings and configurations to identify and address potential security misconfigurations and vulnerabilities.

A technology and approach that involves the collection, storage, analysis, and correlation of log and event data from various sources to identify security incidents and monitor system activities.

The practice of examining and analyzing reports generated by various security tools and systems, often to identify security issues, trends, or incidents.

The process of capturing and storing network packets or data for analysis, often used to investigate network-related security incidents or performance issues.

Information and data collected from various sources, such as logs, network traffic, and sensors, to be processed and analyzed for security monitoring and threat detection.

The practice of monitoring and analyzing user actions and activities to detect abnormal or potentially malicious behavior within a system or network.

A natural language processing technique that assesses and interprets text data, often used to determine the sentiment or emotional tone of communication, which can be relevant in security investigations.

The ongoing process of observing and analyzing systems, networks, and data to identify and respond to security threats, incidents, and vulnerabilities.

The collection and centralization of log and event data from multiple sources into a single repository or platform for efficient analysis.

Systems or tools that gather log and event data from various sources and forward them to log aggregation or SIEM systems for analysis and storage.

A security solution that combines orchestration (workflow automation), automation, and incident response capabilities to streamline and enhance security operations and incident response processes.

A penetration testing scenario where the tester possesses substantial information about the target system, including network configurations, application details, and known vulnerabilities.

A penetration testing scenario where the tester has minimal or no information about the target system, often simulating a real-world scenario where little is known about the environment to be tested.

A penetration testing scenario where the tester has some information about the target system but not a complete understanding, requiring them to gather additional data during the testing process.

The guidelines and limitations set for a penetration test, outlining the scope, objectives, and rules that testers must follow during the engagement.

The progression of an attacker or tester through a network or system, moving from one compromised host or account to another to gain deeper access.

The ability of an attacker or tester to maintain unauthorized access or control over a system even after the initial compromise.

The process of returning the target system to its original state after a penetration test, removing any changes or artifacts introduced during testing.

A program offered by organizations that rewards individuals or security researchers for discovering and reporting security vulnerabilities and bugs in their systems or applications.

The technique used by attackers or testers to leverage one compromised system to gain access to other systems or networks within the same environment, often through the exploitation of trust relationships.

The process of collecting information about a target system or network without directly interacting with it, often using publicly available information and open-source intelligence (OSINT).

Involves direct interactions with the target, such as scanning, probing, or querying to gather information, often in a more intrusive manner.

Unmanned aerial vehicles equipped with various sensors and cameras that can be used for reconnaissance, surveillance, and data collection.

The act of using airborne technology, often drones or aircraft, to scan or map wireless networks and their vulnerabilities.

The practice of driving or moving around with the goal of identifying and mapping wireless networks, often with a focus on finding open or insecure networks.

The initial phase of reconnaissance, during which an attacker gathers information about a target system or network to identify potential vulnerabilities or attack vectors.

The practice of collecting and analyzing publicly available data from a wide range of sources to gain insights and information about a target, often used in reconnaissance.

A security exercise where a group of experts (the "red team") simulates attackers to test the security of a system or organization.

The team responsible for defending against red-team attacks, often working to improve security measures and respond to threats.

An independent group that assesses and evaluates the results of red and blue teams and ensures the fairness and effectiveness of security exercises.

A collaborative approach where red and blue teams work together to test, assess, and improve an organization's security.