Ethical Hacking Terms for Beginners

Cybersecurity · Ethical Hacking · Beginner Glossary

Ethical Hacking Terms for Beginners

SECTION 01Recon terms — gathering information

Reconnaissance is the first phase of every ethical hacking engagement. These are the terms you'll see most often.

Recon terms to know:

• Reconnaissance (recon): The process of gathering information about a target before attacking it.
• OSINT (Open Source Intelligence): Public information about a target — social media, websites, DNS records, and public databases.
• Footprinting: Building a profile of the target organisation — its network, employees, and technology stack.
• Enumeration: Extracting details about users, services, and shared resources from a target system.
• Nmap: A tool for scanning networks and discovering open ports and running services.
• WHOIS: A public database that shows who owns a domain name and when it was registered.
• Scanning: Actively probing a system to find open ports, services, and potential vulnerabilities.
• Attack surface: Every place an attacker could potentially exploit — networks, applications, people, and physical access.

SECTION 02Attack terms — how hackers think

Understanding attacks is essential — even if your goal is defense. These are the terms every ethical hacking beginner needs.

Attack terms to know:

• Exploit: Code or a technique that takes advantage of a vulnerability to compromise a system.
• Payload: What an exploit delivers — a reverse shell, a malware file, or a system command.
• Vulnerability: A weakness in software, configuration, or process that can be exploited.
• Zero-day: A vulnerability the vendor doesn't yet know about — no patch exists.
• Phishing: Tricking users into giving up credentials or clicking malicious links.
• SQL Injection (SQLi): Inserting malicious SQL into application inputs to manipulate databases.
• Cross-Site Scripting (XSS): Injecting scripts into web pages that run in other users' browsers.
• MITM (Man-in-the-Middle): Intercepting communication between two parties to steal or modify data.
• Privilege escalation: Moving from a low-level user account to admin or root access.
• Brute force: Trying every possible password until one works.
• Ransomware: Malware that encrypts files and demands payment for decryption.

SECTION 03Defense terms — protecting systems

Ethical hacking isn't just about attacks. Most jobs in cybersecurity are on the defense side — so learn these terms early.

Defense terms to know:

• Firewall: A system that controls incoming and outgoing network traffic based on rules.
• IDS (Intrusion Detection System): Monitors traffic for suspicious activity and alerts on it.
• IPS (Intrusion Prevention System): Like an IDS, but also blocks detected attacks.
• SIEM (Security Information and Event Management): Collects and correlates logs from across the network for security analysis.
• SOC (Security Operations Centre): The team that monitors and responds to security incidents 24/7.
• VPN (Virtual Private Network): Encrypts traffic between two points — used for secure remote access.
• Encryption: Converting data into a form only authorised parties can read.
• MFA (Multi-Factor Authentication): Requiring two or more verification steps to log in.
• Patch management: Keeping systems up to date to fix known vulnerabilities.
• Incident response: The process of handling a security incident — from detection to recovery.

SECTION 04Career terms — the roles and paths

Once you know the technical terms, you need to know the job titles. Here are the roles you'll see in cybersecurity job searches.

Career terms to know:

• Ethical hacker: A security professional who tests systems with permission to find vulnerabilities.
• Pentester (penetration tester): A security professional who simulates attacks to find weaknesses.
• Red team: The team that plays the attacker in a security assessment.
• Blue team: The team that defends — monitors, detects, and responds to attacks.
• Purple team: A collaborative approach that combines red and blue team skills to improve defense.
• Bug bounty: A program where companies pay ethical hackers for reporting vulnerabilities.
• CTF (Capture the Flag): Competitive hacking challenges — great for learning and portfolio building.
• CEH (Certified Ethical Hacker): A well-known certification for ethical hacking beginners.
• OSCP (Offensive Security Certified Professional): A practical, advanced ethical hacking certification.
• VAPT (Vulnerability Assessment and Penetration Testing): The combined process of finding and exploiting vulnerabilities.

SECTION 05How to start after learning the terms

Knowing the terms is the starting point. Here's how to go from glossary to job in 2026.

The beginner path into ethical hacking:

• Step 1: Learn networking and Linux basics. You can't hack systems you don't understand.
• Step 2: Learn a scripting language. Python is the standard — plus Bash for Linux.
• Step 3: Practice on legal labs. TryHackMe, Hack The Box, and PortSwigger Web Security Academy are all beginner-friendly.
• Step 4: Study for one certification. CEH is well-known, but practical certifications like eJPT or OSCP carry more weight.
• Step 5: Build a portfolio. Write up CTF walkthroughs, bug bounty reports, and lab reports on GitHub and Medium.
• Step 6: Apply to entry-level roles. SOC analyst, security analyst, junior pentester, or VAPT analyst.

FIX ITHow to fix all five

Here's a practical 6-month plan to go from beginner terms to your first cybersecurity job.

Months 1–2: Fundamentals

• Learn networking basics: TCP/IP, DNS, HTTP, and ports.
• Learn Linux basics: commands, permissions, and file system.
• Learn Python basics for automation and scripting.

Months 3–4: Hands-on labs

• Complete TryHackMe beginner paths.
• Solve basic CTF challenges on Hack The Box or PortSwigger.
• Write up each challenge as a blog post or GitHub README.

Month 5: Certification prep

• Pick one beginner certification: CEH, eJPT, or CompTIA Security+.
• Study consistently for 4 weeks and take the exam.
• Add the certification to LinkedIn and resume.

Month 6: Job search

• Build a portfolio page with 3–4 CTF writeups and lab reports.
• Apply to SOC analyst and junior security roles.
• Prepare interview stories about your labs and CTFs.

SECTION 07Test yourself — ethical hacking terms

SECTION 08Frequently asked questions

SECTION 09Related reads