Terminologies
Ethical hacking, also known as penetration testing or white-hat hacking, involves authorized professionals testing computer systems and networks for security vulnerabilities.
Here are some key terminologies associated with ethical hacking :
Table of Contents :
Firewall 🔥
Security barrier protecting your computer from online threats.
Virus 🦠
Malicious software that can harm your computer.
Phishing 🎣
Tricking people into revealing sensitive information through fake emails or websites.
Encryption 🔐
Turning information into a secret code for privacy.
Password Cracking 🕵️♂️
Trying to guess or break someone’s password.
White Hat Hacker 👼
Good-guy hacker working to strengthen security.
Black Hat Hacker 👿
Bad-guy hacker with malicious intentions.
Grey Hat Hacker 😶
Somewhere in between, not all good or bad.
Spoofing 🎭
Pretending to be someone else online.
VPN (Virtual Private Network) 🌐
Secure connection to protect your online identity.
Malware 🤖
Software designed to harm or exploit your computer.
Zero-Day Exploit 📆
Attacking a vulnerability before it’s fixed.
Bug Bounty 🐞
Rewarding people who find and report software bugs.
Social Engineering 🤹♂️
Manipulating people to gain unauthorized access.
Intrusion DetectionSystem(IDS) 🚨
Alert system for suspicious activities on your network.
Payload 💣
The part of an attack that causes harm.
Brute Force Attack 💪🔓
Trying every possible password until one works.
Rootkit 🕵️♀️
Hidden software that gives unauthorized access.
Cryptography 🤐
Making information unreadable without the right key.
Keylogger📝
Recording keystrokes to steal passwords.
Two-Factor Authentication(2FA) 🔒
Adding an extra layer of security to logins.
Worm 🐍
Self-replicating malware spreading across networks.
Denial-of-Service (DoS) Attack 🚫💻
Overloading a system to make it unavailable.
Incident Response 🚑
Managing and recovering from a security breach.
Packet Sniffing 📡
Intercepting and examining data packets on a network.
Adware 📰
Unwanted software that displays ads on your computer.
DNS Spoofing 🌐
Redirecting website traffic to a fake site.
Backdoor🚪
Secret entry point to a computer system.
Honeypot🍯
A trap set to detect, deflect, or study attackers.
Encryption Key 🔑
The secret code needed to unlock encrypted data.
Root Access 🗝
Full control over a computer or network.
VPN Tunnel 🚇
Secure passage for data between two points.
Biometric Authentication 🤚🔒
Using unique body features for security.
Packet Filtering📤📥
Allowing or blocking data packets based on rules.
SQL Injection 💉
Exploiting vulnerabilities in database queries.
Bluetooth Hacking 📱
Unauthorized access to Bluetooth-enabled devices.
Ransomware 💸🔒
Holding your data hostage until a ransom is paid.
Man-in-the-Middle-Attack (MITM) 🤵
Intercepting communication between two parties.
Proxy Server 🔄
Acting as an intermediary between your device and the internet.
CISO (Chief Information Security Officer) 🕵️♂️
Head of security in an organization.
DNS Security 🌐
Protecting the domain name system from attacks.
Forensics 🕵️♂️
Security barrier protecting your computer from online threats.
Exploit Kit 🧰
A toolkit containing various exploits for cyber attacks.
Blockchain Security 🧱
Ensuring the security of transactions in a blockchain.
Social Media Engineering📱
Manipulating social media for malicious purposes.
Captcha 🤖
A challenge-response test to ensure users are human.
Firmware📱
Software embedded in hardware devices.
Trojan Horse 🐴
Malicious software disguised as something benign.
Swarming Attack 🦠
Coordinated attack using multiple vectors.
IP Spoofing 🌐
Faking your IP address to impersonate someone else.
Secure Sockets Layer (SSL) 🔐
Ensuring secure communication over the internet.
Distributed Denial-of-Service (DDoS) Attack 🚫
Overloading a system from multiple sources.
MAC Spoofing 🎭
Changing the Media Access Control address to impersonate a device.
Social Media Spoofing 📱🎣
Tricking users on social platforms for malicious purposes.
Cross-Site Scripting (XSS) 📜
Injecting malicious scripts into websites.
Root Certificate 🔒
The highest-level certificate in a public key infrastructure.
DNSSEC (DNS Security Extentions)🔥🌐
Adding a layer of security to the domain name system.
Ping of Death 💥
Sending a malformed ping to crash a computer.
Side Channel Attack 🔄
Exploiting information leaked during a system’s operation.
Logical Bomb 💣
Code triggered by a specific event to cause harm.
Threat Intelligent 🕵️♂️
Gathering and analyzing information on cybersecurity threats.
Sniffing Attack 👃
Security barrier protecting your computer from online threats.Intercepting and inspecting network traffic.
Watering Hole Attack 💧
Compromising websites likely to be visited by the target.
Steganography 🔒
Hiding messages within other non-secret data.
Adaptive Security Architecture 🔄
Flexible security measures that adapt to evolving threats.
Fuzzing 🐜
Testing software by providing invalid, unexpected, or random data.
Eavesdropping 👂
Secretly listening to private conversations or communications.
Clickjacking 🖱️
Tricking users into clicking on something different from what they perceive.
Data Breach 💽
Unauthorized access, disclosure, or acquisition of sensitive information.
Kali Linux 🐧
A Linux distribution for penetration testing and ethical hacking.
Rogue Access Point 📡
Unauthorized wireless access point used to eavesdrop on a network.
Biometric Spoofing🤚
Fooling biometric authentication systems with fake data.
Invisible Keylogger 👀
Recording keystrokes without the user’s knowledge.
Script Kiddie 🧑💻
Inexperienced hacker using pre-written scripts without deep knowledge.
War Driving 📡
Searching for Wi-Fi networks with the intent to exploit vulnerabilities.
Buffer Overflow 💽
Exploiting software bugs to overrun allocated memory space.
Patch Management 🩹
Keeping software up-to-date with the latest security fixes.
Hacker Manifesto 📜
Security barrier protecting your computer from online threats.
Hacker Ethics 🕊️
Unwritten rules and values followed by ethical hackers.
WPA3 (Wifi Protected Access 3) 📡
The latest Wi-Fi security protocol.
Digital Footprint 👣
Traces of online activity left by a user.
HTTPS (Hypertext Transfer Protocol Secure) 🔒
Secure version of the standard web protocol.
AI-Driven Threat Detection 🤖
Using artificial intelligence to identify security threats.
RFID Hacking 📡
Unauthorized access to RFID (Radio-Frequency Identification) systems.
Secure Shell (SSH) 🐚
Encrypted communication protocol for secure remote access.
VLAN Hopping 🌐
Exploiting security vulnerabilities in virtual LANs.
Bash Shellshock 🐚
A vulnerability in the Bash shell allowing unauthorized access.
Rooting 🌱
The process of obtaining root access on a device, often associated with mobile phones.
Blue Team 🚓
The defenders in a cybersecurity scenario, responsible for maintaining and improving security.
Red Team 🚨
A group of ethical hackers simulating attacks to test and improve security defenses.
Social Media Reconnaissance 🕵️♂️
Gathering information about a target through their social media presence.
Evil Twin 👥
A rogue wireless access point that mimics a legitimate one to trick users.
Firmware Vulnerability🛡️
Security weaknesses in the software embedded in hardware devices.
Honeynet 🍯
A network of decoy systems set up to attract and detect hackers.
USB Drop Attack🔌
Leaving infected USB drives in public places to trick people into using them.
Ephemeral Key 🗝
Security barrier protecting your computer from online threats.
Cross-Site Request Forgery (CSRF) 🌐
Exploiting a user’s credentials to perform an undesired function on their behalf.
Secure Boot 🚀
A firmware feature ensuring that only signed and authorized code runs during the boot process.
IPv6 Security 🌐
Ensuring the security of the latest version of the Internet Protocol.
Air Gap 📡
Physically isolating a computer or network to prevent external access.
NIST (National Institute of Standarts and Technology)🔒
A U.S. government agency providing cybersecurity standards and guidelines.
Bypassing Antivirus 🦠
Techniques used to avoid detection by antivirus software.
Security Policy 📜
A set of rules and guidelines defining how an organization approaches security.
Pentest Report 📄
Documentation of findings and recommendations after a penetration test.
DNS Poisoning 🌐
Security barrier protecting your computer from online threats.
Shodan Search Engine 🔍
A search engine for discovering Internet-connected devices and their vulnerabilities.
Data Sanitization 🧹
Removing sensitive information from documents or files.
SecOps (Security Operations) 💻
The integration of security measures into an organization’s overall operations.
Bastion Host 🏰
A highly secure computer system designed to withstand attacks.
Snort IDS/IPS 👃
An open-source intrusion detection and prevention system.
WPS (Wi-Fi Protected Setup) 📡
A method for simplifying the process of connecting devices to Wi-Fi networks.
Digital Signature 🖊️
A cryptographic technique to verify the authenticity and integrity of digital messages or documents.
Security Token 🗝️
A physical or virtual device providing an additional layer of authentication.
SOC (Security Operations Center) 🏢
A centralized unit responsible for monitoring and responding to security incidents.
A centralized unit responsible for monitoring and responding to security incidents.
this is all about terms used in ethical hacking if you have any other suggestions or want to update just comment down we will try to update it as soon as possible !
thanks for reading 😉
