Glossary
Framework
A structured collection of tools and conventions for organizing security work.
Vulnerability
A weakness in software, configuration, or process that could be misused.
Risk
The combination of how likely a weakness is to be exploited and its potential impact.
CVE
Common Vulnerabilities and Exposures — a public catalog identifier for a known weakness.
Snapshot
A saved VM state you can restore to undo changes instantly.
Scope
The explicitly authorized set of systems and actions for an assessment.
Knowledge checks
- I can explain what Metasploit is and why defenders study it.
- I can describe the four risk levels and what changes between them.
- I can name the common ports for SSH, DNS, HTTP, and HTTPS.
- I can set up an isolated virtual lab with a safe training target.