A technique used to exploit vulnerabilities in web applications by injecting malicious SQL queries.

A security vulnerability that allows attackers to inject malicious scripts into web pages viewed by users.

Weaknesses in web applications that can be exploited to compromise security.

The process of creating code or techniques to take advantage of vulnerabilities.

An integrated platform for performing security testing of web applications, widely used by penetration testers.

An open-source web application security scanner used for finding vulnerabilities in web applications.

Simulated cyber attacks on a system to evaluate its security and identify vulnerabilities.

The practice of intentionally probing systems for vulnerabilities with permission to improve security.

The process of identifying, quantifying, and prioritizing vulnerabilities in a system.

Techniques used to reduce the severity or impact of vulnerabilities.

Rules and standards that dictate how data is transmitted and secured over networks.

A network security device that monitors and controls incoming and outgoing network traffic.

Updates to software designed to fix vulnerabilities and improve security.

A method of tricking users into revealing sensitive information by masquerading as a trustworthy entity.

Malicious software that disguises itself as legitimate software to gain access to a system.

A type of malware that allows an attacker to control a system remotely.

Manipulative techniques used to trick individuals into divulging confidential information.

A Distributed Denial of Service attack aims to overwhelm a system with traffic to render it unavailable.

The process of converting information into a code to prevent unauthorized access.

A systematic evaluation of an organization's security policies and controls.

An incident where unauthorized access to sensitive data occurs.

A repository of known vulnerabilities and their associated risks.

The initial phase of penetration testing where information about the target is gathered.

A toolkit used to exploit vulnerabilities in software applications.

The process of identifying, evaluating, and prioritizing risks to minimize their impact.