Ethical Hacking · Beginner Glossary 2026
Ethical Hacking Glossary: Key Words Explained Simply
Quick summary — Ethical hacking glossary
Ethical hacking has its own language. Terms like malware, phishing, zero-day, and DDoS can be confusing for beginners. This glossary breaks down the most important cybersecurity terms into simple, easy-to-understand explanations with real-world examples. Perfect for anyone starting their ethical hacking journey in 2026.
In this glossary you will learn:
- Attacks & Threats — malware, phishing, ransomware, and more.
- Defense & Security — firewall, encryption, VPN, IDS.
- Hacking Techniques — penetration testing, social engineering, zero-day.
- Network & System Terms — IP address, DNS, DDoS.
- Ethical Hacking Roles — white hat, black hat, red team, blue team.
SECTION 01Attacks & Threats
Here are the most common types of cyberattacks and threats you'll encounter in ethical hacking:
| Term | Simple Explanation | Real-World Example |
|---|---|---|
| Malware | Software designed to harm computers or steal data | A virus that infects your computer |
| Phishing | Fake emails that trick you into sharing passwords | An email pretending to be your bank |
| Ransomware | Software that locks your files until you pay money | WannaCry attack in 2017 |
| DDoS | Flooding a website with traffic to make it crash | Website becomes slow or unavailable |
| Zero-Day Attack | Attack on a vulnerability not yet known to the vendor | Hackers exploit a bug before it's fixed |
| Trojan | Software that looks harmless but does bad things | A game that steals your passwords |
| Spyware | Software that secretly monitors your activity | Software that tracks your keystrokes |
SECTION 02Defense & Security
Here are the key defense and security terms you need to know:
| Term | Simple Explanation | Real-World Example |
|---|---|---|
| Firewall | A barrier that blocks unauthorized access | Your home Wi-Fi router's security |
| Encryption | Scrambling data so only authorized people can read it | WhatsApp end-to-end encryption |
| VPN | A secure tunnel that protects your internet traffic | Hiding your IP address and location |
| IDS | A system that detects suspicious activity | Alerting when someone tries to break in |
| Antivirus | Software that detects and removes malware | Norton, McAfee, Windows Defender |
| Penetration Testing | Testing security by trying to break in | Hiring ethical hackers to test systems |
SECTION 03Hacking Techniques
Here are the key hacking techniques used by ethical hackers and attackers:
Key Hacking Techniques:
1. Social Engineering
- Tricking people into giving up information
- Example: Calling someone pretending to be IT support
2. Phishing
- Fake emails that steal credentials
- Example: Email saying "Reset your password"
3. Man-in-the-Middle (MITM)
- Intercepting communication between two parties
- Example: Eavesdropping on Wi-Fi
4. SQL Injection
- Inserting malicious code into database queries
- Example: Getting data from a website's database
5. Cross-Site Scripting (XSS)
- Injecting scripts into websites
- Example: Redirecting users to fake pages
6. Brute Force Attack
- Trying all password combinations
- Example: Trying 10,000 passwords to guess one
7. Denial of Service (DoS)
- Overwhelming a system to make it crash
- Example: Sending too many requests to a server
Common Ethical Hacking Tools:
1. Kali Linux
- Operating system for ethical hacking
- Includes 600+ tools
2. Metasploit
- Framework for developing exploits
- Used for penetration testing
3. Wireshark
- Network traffic analyzer
- Captures and shows data packets
4. Nmap
- Network scanning tool
- Finds open ports and services
5. Burp Suite
- Web application security testing
- Finds vulnerabilities in websites
6. John the Ripper
- Password cracking tool
- Tests password strength
7. OWASP ZAP
- Web application scanner
- Finds security issues in web apps
💡 Tip: Always use these tools legally and with permission.
SECTION 04Network & System Terms
Here are the essential network and system terms for ethical hacking:
Network Basics for Ethical Hackers:
1. IP Address
- Unique address for a device on a network
- Like a house address for computers
2. DNS
- Translates domain names to IP addresses
- Like a phonebook for the internet
3. Port
- Entry point for network communication
- Port 80 = HTTP, Port 443 = HTTPS
4. Protocol
- Rules for data transmission
- HTTP, HTTPS, FTP, TCP/IP
5. Firewall
- Blocks unauthorized access
- Filters incoming/outgoing traffic
6. Router
- Connects different networks together
- Sends data between devices
7. Switch
- Connects devices on the same network
- Like a multi-port network hub
Advanced Network & System Terms:
1. DDoS (Distributed Denial of Service)
- Multiple systems attack one target
- Overwhelms server resources
2. VPN (Virtual Private Network)
- Creates secure, encrypted connection
- Hides IP address and location
3. Proxy Server
- Intermediary between device and internet
- Hides identity and bypasses blocks
4. Vulnerability
- Weakness in a system
- Can be exploited by attackers
5. Exploit
- Code that takes advantage of vulnerability
- Used to gain unauthorized access
6. Patch
- Fix for a vulnerability
- Released by software vendors
7. Zero-Day
- Vulnerability not yet patched
- Attackers exploit before fix is available
SECTION 05Ethical Hacking Roles
Here are the different roles in the ethical hacking and cybersecurity world:
| Role | Simple Explanation | What They Do |
|---|---|---|
| White Hat Hacker | Good hacker with permission to test systems | Finds vulnerabilities to fix them |
| Black Hat Hacker | Bad hacker who breaks into systems illegally | Steals data, causes damage |
| Grey Hat Hacker | Hacker who finds vulnerabilities without permission | May disclose or exploit them |
| Red Team | Attackers hired to test defenses | Simulates real-world attacks |
| Blue Team | Defenders who protect systems | Monitors, detects, and responds to threats |
| Purple Team | Combines red and blue teams | Works together to improve security |
| Security Analyst | Monitors and responds to security threats | Investigates incidents |
SECTION 06Full Glossary Table
Here's a complete A-Z glossary of ethical hacking terms:
Ethical Hacking Glossary A-M:
A - Antivirus: Software that detects and removes malware
A - Attack: An attempt to breach security
B - Botnet: Network of infected devices used for attacks
B - Brute Force: Trying all password combinations
B - Buffer Overflow: Program writing beyond memory limits
C - Cipher: Algorithm used for encryption
C - Cookie: Small data file stored on your computer
C - Cyber Security: Protecting systems from digital attacks
D - DDoS: Distributed Denial of Service attack
D - DNS: Domain Name System (translates domain names)
D - Decryption: Converting encrypted data back
E - Encryption: Scrambling data to keep it secret
E - Exploit: Code that takes advantage of vulnerabilities
E - Ethics: Moral principles guiding security work
F - Firewall: Blocks unauthorized network access
F - Forensic: Investigating digital evidence
F - Full Disclosure: Publishing all vulnerability details
G - Gateway: Connects different networks
G - Grey Hat: Hacker who finds vulnerabilities without permission
H - Hacker: Someone who breaks into computer systems
H - HTTP: Protocol for web traffic
H - HTTPS: Encrypted version of HTTP
I - IDS: Intrusion Detection System
I - IPS: Intrusion Prevention System
I - IP Address: Unique address for a device
J - JavaScript: Programming language (can be exploited)
J - JWT: JSON Web Token (authentication)
K - Kali Linux: Operating system for ethical hacking
K - Key: Used for encryption/decryption
L - Log: Record of system events
L - Logic Bomb: Malicious code triggered by an event
M - Malware: Malicious software
M - Metasploit: Penetration testing framework
M - MITM: Man-in-the-Middle attack
Ethical Hacking Glossary N-Z:
N - Nmap: Network scanning tool
N - Nonce: Number used once in cryptography
O - OWASP: Open Web Application Security Project
O - OSINT: Open Source Intelligence
P - Patch: Fix for a security vulnerability
P - Penetration Testing: Testing security by attacking
P - Phishing: Fake emails that steal credentials
P - Port: Entry point for network traffic
P - Proxy: Intermediary server
Q - Query: Request for data from a database
Q - Quantum: Advanced computing (future security risk)
R - Ransomware: Malware that locks files for ransom
R - Red Team: Attackers who test defenses
R - Router: Device that connects networks
R - Ransomware: Malware that demands payment
S - SQL Injection: Malicious code in database queries
S - Security Analyst: Monitors security threats
S - Social Engineering: Tricking people into giving info
S - Spyware: Software that monitors activity
S - SSL: Secure Sockets Layer (encryption)
T - Threat: Potential security risk
T - Trojan: Malware disguised as legitimate software
U - URL: Web address
U - USB: Device used for file transfer (can be infected)
V - Vulnerability: Weakness that can be exploited
V - VPN: Virtual Private Network
W - White Hat: Ethical hacker
W - Wireshark: Network traffic analyzer
X - XSS: Cross-Site Scripting
X - XML: Extensible Markup Language
Y - YARA: Pattern matching tool for malware
Z - Zero-Day: Vulnerability not yet patched
Z - Zombie: Infected device used in botnet
SECTION 07Test yourself — Ethical Hacking Quiz
Five questions. No sign-up.
0 / 5Pick an answer to see why it is right or wrong.
SECTION 08Frequently asked questions
What is ethical hacking?
Ethical hacking is the practice of testing computer systems for security vulnerabilities with permission. Ethical hackers use the same techniques as malicious hackers but do so legally to help organizations improve their security.
What is the difference between white hat and black hat?
White hat hackers are ethical — they have permission to test systems and help fix vulnerabilities. Black hat hackers are malicious — they break into systems illegally to steal data or cause harm.
What is a zero-day vulnerability?
A zero-day vulnerability is a security flaw that the software vendor doesn't know about yet. Attackers can exploit it before a fix (patch) is released — hence "zero-day" to respond.
What does DDoS stand for?
DDoS stands for Distributed Denial of Service. It's an attack where multiple computers flood a target with traffic to make it crash or become unavailable.
Do I need coding to learn ethical hacking?
Basic coding knowledge is helpful, but you can start with networking and security fundamentals. Python is the most commonly used language for ethical hacking. Uncodemy's ethical hacking course covers everything from basics.
SECTION 09Related reads
Classroom & online · Noida
Start Your Ethical Hacking Career
Our Ethical Hacking Course covers network security, penetration testing, malware analysis, and more — with hands-on labs, expert faculty, and placement support at just ₹25,000.
₹25,000 · Full Programme- Network Security & Protocols
- Penetration Testing & Tools
- Malware Analysis & Reverse Engineering
- Web Application Security (OWASP)
- Hands-on labs & real-world scenarios
- Placement support & certification

